last executing test programs: 1m37.076732088s ago: executing program 1 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 1m36.814743089s ago: executing program 1 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m36.637074323s ago: executing program 1 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m36.546899751s ago: executing program 1 (id=447): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x107) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file7\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1m36.251138845s ago: executing program 1 (id=461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 1m36.046594461s ago: executing program 1 (id=470): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) 1m36.046296871s ago: executing program 32 (id=470): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) 1m23.037723219s ago: executing program 4 (id=998): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140dffffffff0000000038000000000000000000000007"], 0x58}, 0x0) 1m23.002677672s ago: executing program 4 (id=1001): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) msync(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x1) 1m22.923181368s ago: executing program 4 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 1m22.891399711s ago: executing program 4 (id=1006): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28200, 0x20) 1m22.325280886s ago: executing program 4 (id=1022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7ebb, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x100004, 0x224}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x538}, 0x0, 0x1000}) pivot_root(0x0, &(0x7f0000000180)='./file0/../file0/../file0\x00') io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m21.799591589s ago: executing program 4 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m21.799291399s ago: executing program 33 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m21.763368932s ago: executing program 5 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) link(0x0, 0x0) 1m21.635875242s ago: executing program 5 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) 1m21.581697546s ago: executing program 5 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @dev}, 0x14) 1m21.550016619s ago: executing program 5 (id=1045): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28200, 0x20) 1m21.263380432s ago: executing program 5 (id=1053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1m20.892651652s ago: executing program 5 (id=1066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) 1m20.892456082s ago: executing program 34 (id=1066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) 1.639146877s ago: executing program 6 (id=3998): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 1.561569754s ago: executing program 6 (id=4001): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc368, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="c50f000000000000000011"], 0x138}}, 0x0) 1.561239154s ago: executing program 3 (id=4002): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x2, 0x18, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe54e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0x16) 1.48069572s ago: executing program 6 (id=4007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1.422787055s ago: executing program 0 (id=4010): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r2, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=[{0x2, 0x5, 0xf, 0xf}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x878}, 0x94) 1.401537247s ago: executing program 3 (id=4012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.353007991s ago: executing program 3 (id=4015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) 1.276194697s ago: executing program 3 (id=4018): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.24196165s ago: executing program 0 (id=4021): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 1.212157442s ago: executing program 3 (id=4023): sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 852.117001ms ago: executing program 7 (id=4027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 742.8655ms ago: executing program 0 (id=4030): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 699.953673ms ago: executing program 0 (id=4032): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 638.277659ms ago: executing program 7 (id=4033): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 587.200613ms ago: executing program 7 (id=4034): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 586.875483ms ago: executing program 7 (id=4035): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 416.650436ms ago: executing program 0 (id=4036): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000001700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 387.649819ms ago: executing program 0 (id=4038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) 366.82036ms ago: executing program 6 (id=4039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) 328.940713ms ago: executing program 7 (id=4040): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 280.645638ms ago: executing program 6 (id=4041): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4000000008, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) tkill(0x0, 0x7) r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 280.354358ms ago: executing program 2 (id=4042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 271.697408ms ago: executing program 2 (id=4043): socket$packet(0x11, 0x2, 0x300) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200004, &(0x7f0000000200)=ANY=[], 0x1, 0x657, &(0x7f0000000a00)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 232.539631ms ago: executing program 3 (id=4044): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) pause() 127.92385ms ago: executing program 6 (id=4045): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4000, &(0x7f00000002c0)={[{@nojournal_checksum}]}, 0xa, 0xbcd, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/60, 0x3c) 127.27767ms ago: executing program 2 (id=4046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 71.330354ms ago: executing program 2 (id=4047): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 39.283497ms ago: executing program 7 (id=4048): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 37.061348ms ago: executing program 2 (id=4049): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 0s ago: executing program 2 (id=4050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000ef8a"], 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x811400, 0x0, 0xff, 0x0, &(0x7f00000007c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f00000002c0)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): 3.1711'. [ 74.055818][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 74.187014][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'. [ 74.248151][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1729'. [ 74.652072][ T7646] vlan2: entered allmulticast mode [ 74.806003][ T7656] netlink: 'syz.6.1747': attribute type 3 has an invalid length. [ 74.905911][ T7667] netlink: 'syz.6.1753': attribute type 27 has an invalid length. [ 74.959146][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.966420][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.018875][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.028821][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.080394][ T4480] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.100867][ T4480] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.116084][ T4480] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.125319][ T4480] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.137195][ T7683] vlan2: entered allmulticast mode [ 75.190830][ T7694] loop6: detected capacity change from 0 to 1024 [ 75.197645][ T7694] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.208641][ T7694] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.220698][ T7694] JBD2: no valid journal superblock found [ 75.226427][ T7694] EXT4-fs (loop6): Could not load journal inode [ 75.273338][ T7708] SELinux: security_context_str_to_sid () failed with errno=-22 [ 75.275124][ T7705] lo speed is unknown, defaulting to 1000 [ 75.356717][ T7721] loop6: detected capacity change from 0 to 1024 [ 75.383533][ T7721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.417507][ T7721] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.449564][ T7721] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 75.497979][ T7728] loop2: detected capacity change from 0 to 1024 [ 75.521523][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.532071][ T7728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.585662][ T7728] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1778: Allocating blocks 497-513 which overlap fs metadata [ 75.633227][ T7740] vlan2: entered allmulticast mode [ 75.693206][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.798397][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 75.798411][ T29] audit: type=1400 audit(1754867415.898:22564): avc: denied { create } for pid=7759 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.828687][ T29] audit: type=1400 audit(1754867415.928:22565): avc: denied { create } for pid=7759 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.848948][ T29] audit: type=1400 audit(1754867415.928:22566): avc: denied { write } for pid=7759 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.869213][ T29] audit: type=1400 audit(1754867415.928:22567): avc: denied { nlmsg_write } for pid=7759 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.890016][ T29] audit: type=1400 audit(1754867415.928:22568): avc: denied { write } for pid=7759 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.915109][ T7763] netlink: 'syz.7.1794': attribute type 27 has an invalid length. [ 75.955319][ T7767] loop3: detected capacity change from 0 to 512 [ 75.964887][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.972097][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.992133][ T7767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.005912][ T7767] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.051565][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.061043][ T29] audit: type=1326 audit(1754867416.158:22569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 76.084591][ T29] audit: type=1326 audit(1754867416.158:22570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 76.108102][ T29] audit: type=1326 audit(1754867416.158:22571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 76.131619][ T29] audit: type=1326 audit(1754867416.158:22572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 76.155091][ T29] audit: type=1326 audit(1754867416.158:22573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 76.181948][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.195150][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.277348][ T7763] veth3: left promiscuous mode [ 76.319733][ T7794] loop3: detected capacity change from 0 to 512 [ 76.322723][ T7771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.344014][ T7794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.346123][ T7771] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.363430][ T7794] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.374101][ T7771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.376191][ T7794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1806: corrupted inode contents [ 76.402368][ T1660] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.440091][ T1660] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.449104][ T1660] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.454537][ T7794] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1806: mark_inode_dirty error [ 76.474973][ T1660] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.491455][ T7794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1806: corrupted inode contents [ 76.549132][ T7789] loop2: detected capacity change from 0 to 8192 [ 76.570880][ T7799] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1806: corrupted inode contents [ 76.616308][ T7799] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1806: mark_inode_dirty error [ 76.648659][ T7799] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1806: corrupted inode contents [ 76.699460][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.826877][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1816'. [ 76.930609][ T7824] 9pnet_fd: Insufficient options for proto=fd [ 76.954386][ T7828] loop7: detected capacity change from 0 to 512 [ 76.972538][ T7828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.995162][ T7828] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.150202][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.270339][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1845'. [ 77.271746][ T7861] loop6: detected capacity change from 0 to 512 [ 77.292949][ T7861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.305631][ T7861] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.322518][ T7861] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1832: corrupted inode contents [ 77.335035][ T7861] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1832: mark_inode_dirty error [ 77.347504][ T7861] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1832: corrupted inode contents [ 77.361769][ T7861] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1832: corrupted inode contents [ 77.374417][ T7861] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1832: mark_inode_dirty error [ 77.386645][ T7861] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1832: corrupted inode contents [ 77.411485][ T7867] pimreg: entered allmulticast mode [ 77.418882][ T7867] pimreg: left allmulticast mode [ 77.437090][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.467517][ T7876] loop6: detected capacity change from 0 to 512 [ 77.477911][ T7878] netlink: 'syz.0.1841': attribute type 27 has an invalid length. [ 77.492203][ T7876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.507909][ T7878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.513271][ T7876] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.519928][ T7878] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.535035][ T7878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.685672][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.698105][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1851'. [ 77.781625][ T7919] netlink: 'syz.6.1860': attribute type 27 has an invalid length. [ 77.802326][ T7919] 8021q: adding VLAN 0 to HW filter on device  [ 77.809849][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.820745][ T7919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.888967][ T7931] bridge0: entered allmulticast mode [ 77.909054][ T7931] pim6reg: entered allmulticast mode [ 77.924123][ T7935] 9pnet_fd: Insufficient options for proto=fd [ 77.981683][ T7941] lo speed is unknown, defaulting to 1000 [ 78.031947][ T7948] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1870'. [ 78.401011][ T7985] netlink: 'syz.3.1887': attribute type 4 has an invalid length. [ 78.413392][ T7985] netlink: 'syz.3.1887': attribute type 4 has an invalid length. [ 78.478723][ T7994] lo speed is unknown, defaulting to 1000 [ 78.535195][ T7994] lo speed is unknown, defaulting to 1000 [ 78.601768][ T7994] syzkaller1: entered promiscuous mode [ 78.607330][ T7994] syzkaller1: entered allmulticast mode [ 78.631535][ T8004] loop2: detected capacity change from 0 to 128 [ 78.879261][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 78.995288][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1914'. [ 79.175626][ T8064] netlink: 'syz.7.1925': attribute type 25 has an invalid length. [ 79.314034][ T8083] loop7: detected capacity change from 0 to 512 [ 79.336584][ T8083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.353973][ T8083] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.366535][ T8083] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1934: corrupted inode contents [ 79.378863][ T8083] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1934: mark_inode_dirty error [ 79.390556][ T8083] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1934: corrupted inode contents [ 79.405233][ T8083] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1934: corrupted inode contents [ 79.419309][ T8083] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1934: mark_inode_dirty error [ 79.431052][ T8083] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1934: corrupted inode contents [ 79.456532][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.483161][ T8101] : renamed from bond0 (while UP) [ 79.530399][ T8107] loop2: detected capacity change from 0 to 512 [ 79.562577][ T8107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.575372][ T8107] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.621979][ T8107] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1955: corrupted inode contents [ 79.635438][ T8107] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1955: mark_inode_dirty error [ 79.651558][ T8107] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1955: corrupted inode contents [ 79.665948][ T8107] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1955: corrupted inode contents [ 79.679406][ T8107] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1955: mark_inode_dirty error [ 79.699139][ T8107] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1955: corrupted inode contents [ 79.742294][ T8121] loop6: detected capacity change from 0 to 512 [ 79.753122][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.770053][ T8127] netlink: 'syz.2.1962': attribute type 25 has an invalid length. [ 79.778704][ T8121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.791718][ T8121] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.907418][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.263303][ T8141] loop6: detected capacity change from 0 to 4096 [ 80.274841][ T8141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.316559][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.460577][ T8168] loop2: detected capacity change from 0 to 128 [ 80.481165][ T8168] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.509822][ T8168] ext4 filesystem being mounted at /463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.665794][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.718008][ T8183] pim6reg: entered allmulticast mode [ 80.727294][ T8185] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 80.741969][ T8183] pim6reg: left allmulticast mode [ 80.757164][ T8187] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1974'. [ 80.835342][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 80.835355][ T29] audit: type=1326 audit(1754867420.938:22810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 80.879914][ T29] audit: type=1400 audit(1754867420.948:22811): avc: denied { getopt } for pid=8203 comm="syz.2.1983" lport=54765 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.904276][ T29] audit: type=1326 audit(1754867420.968:22812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 80.927779][ T29] audit: type=1326 audit(1754867420.968:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 80.951257][ T29] audit: type=1326 audit(1754867420.968:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 80.974708][ T29] audit: type=1326 audit(1754867420.968:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 80.998190][ T29] audit: type=1326 audit(1754867420.968:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 81.021793][ T29] audit: type=1326 audit(1754867420.968:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 81.045338][ T29] audit: type=1326 audit(1754867420.968:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 81.068787][ T29] audit: type=1326 audit(1754867420.968:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.7.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 81.095104][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1986'. [ 81.254349][ T8240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8240 comm=syz.3.1998 [ 81.266830][ T8240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8240 comm=syz.3.1998 [ 81.617322][ T8265] ipvlan2: entered promiscuous mode [ 81.623959][ T8265] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 81.639846][ T8265] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.886224][ T8292] loop3: detected capacity change from 0 to 256 [ 81.940410][ T8295] netlink: 'syz.7.2032': attribute type 4 has an invalid length. [ 81.969168][ T8295] netlink: 'syz.7.2032': attribute type 4 has an invalid length. [ 82.057278][ T8303] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 82.071603][ T8303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.091617][ T8303] bond2: (slave gretap1): making interface the new active one [ 82.100129][ T8303] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 82.271126][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 82.469702][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810a046a00: rx timeout, send abort [ 82.477956][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a046a00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.571279][ T8338] lo speed is unknown, defaulting to 1000 [ 82.833167][ T8350] vlan2: entered allmulticast mode [ 82.957919][ T8347] loop7: detected capacity change from 0 to 8192 [ 83.006813][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'. [ 83.196706][ T8368] bond3: entered promiscuous mode [ 83.201805][ T8368] bond3: entered allmulticast mode [ 83.207338][ T8368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.222185][ T8368] bond3 (unregistering): Released all slaves [ 83.233147][ T8373] loop6: detected capacity change from 0 to 128 [ 83.241178][ T8373] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.253580][ T8373] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.312016][ T5986] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.332308][ T8381] loop6: detected capacity change from 0 to 512 [ 83.351054][ T8381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.363848][ T8381] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.376688][ T8381] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2055: corrupted inode contents [ 83.388942][ T8381] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2055: mark_inode_dirty error [ 83.402276][ T8381] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2055: corrupted inode contents [ 83.414777][ T8385] loop3: detected capacity change from 0 to 1024 [ 83.420282][ T1660] tipc: Subscription rejected, illegal request [ 83.424094][ T8381] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2055: corrupted inode contents [ 83.439958][ T8381] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2055: mark_inode_dirty error [ 83.452518][ T8385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.469552][ T8381] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2055: corrupted inode contents [ 83.490603][ T8391] vlan2: entered allmulticast mode [ 83.522450][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.563020][ T8395] lo speed is unknown, defaulting to 1000 [ 83.582364][ T8397] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2061'. [ 83.613684][ T8395] lo speed is unknown, defaulting to 1000 [ 83.665318][ T8395] syzkaller1: entered promiscuous mode [ 83.670830][ T8395] syzkaller1: entered allmulticast mode [ 83.694838][ T8385] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2056: Allocating blocks 497-513 which overlap fs metadata [ 83.743460][ T8405] netlink: 'syz.6.2064': attribute type 1 has an invalid length. [ 83.751513][ T8385] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2056: Allocating blocks 497-513 which overlap fs metadata [ 83.765695][ T8385] EXT4-fs (loop3): pa ffff888106e682a0: logic 256, phys. 369, len 9 [ 83.770490][ T8405] netlink: 'syz.6.2064': attribute type 1 has an invalid length. [ 83.773759][ T8385] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 83.846453][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.897662][ T4462] tipc: Subscription rejected, illegal request [ 83.955871][ T8426] loop3: detected capacity change from 0 to 512 [ 83.973391][ T8426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.987250][ T8426] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.999782][ T8426] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2072: corrupted inode contents [ 84.011806][ T8426] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.2072: mark_inode_dirty error [ 84.024899][ T8426] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2072: corrupted inode contents [ 84.038229][ T8426] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2072: corrupted inode contents [ 84.044176][ T8436] loop6: detected capacity change from 0 to 1024 [ 84.056511][ T8426] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.2072: mark_inode_dirty error [ 84.068190][ T8426] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2072: corrupted inode contents [ 84.091148][ T8436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.104692][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.164692][ T4453] tipc: Subscription rejected, illegal request [ 84.270790][ T8436] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2078: Allocating blocks 497-513 which overlap fs metadata [ 84.333378][ T8436] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2078: Allocating blocks 497-513 which overlap fs metadata [ 84.347958][ T8436] EXT4-fs (loop6): pa ffff888106e682a0: logic 256, phys. 369, len 9 [ 84.356016][ T8436] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 84.419691][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.538780][ T8490] loop7: detected capacity change from 0 to 1024 [ 84.553782][ T8490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.574024][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 84.713133][ T8514] SELinux: policydb version 65535 does not match my version range 15-35 [ 84.743024][ T8514] SELinux: failed to load policy [ 84.780314][ T8490] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2103: Allocating blocks 497-513 which overlap fs metadata [ 84.824460][ T8523] pim6reg1: entered promiscuous mode [ 84.829925][ T8523] pim6reg1: entered allmulticast mode [ 84.867338][ T8490] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2103: Allocating blocks 497-513 which overlap fs metadata [ 84.881769][ T8490] EXT4-fs (loop7): pa ffff888106e317e0: logic 256, phys. 369, len 9 [ 84.889879][ T8490] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 84.911840][ T8528] lo speed is unknown, defaulting to 1000 [ 84.958942][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.996625][ T8538] loop7: detected capacity change from 0 to 1024 [ 85.003221][ T8538] EXT4-fs: Ignoring removed orlov option [ 85.008963][ T8538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.020763][ T8538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.061342][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.091856][ T8542] SELinux: failed to load policy [ 85.185056][ T8559] loop6: detected capacity change from 0 to 1024 [ 85.192732][ T8559] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.203686][ T8559] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.216365][ T8559] JBD2: no valid journal superblock found [ 85.222118][ T8559] EXT4-fs (loop6): Could not load journal inode [ 85.418091][ T8598] SELinux: policydb version 65535 does not match my version range 15-35 [ 85.426929][ T8598] SELinux: failed to load policy [ 85.610545][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 85.648573][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2163'. [ 85.715215][ T8642] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 85.755630][ T8644] lo speed is unknown, defaulting to 1000 [ 85.839624][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 85.839638][ T29] audit: type=1326 audit(1754867425.948:23612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec2d15ba7 code=0x7ffc0000 [ 85.877496][ T29] audit: type=1326 audit(1754867425.948:23613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec2cbadd9 code=0x7ffc0000 [ 85.900997][ T29] audit: type=1326 audit(1754867425.948:23614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 85.924609][ T29] audit: type=1326 audit(1754867425.948:23615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec2d15ba7 code=0x7ffc0000 [ 85.948093][ T29] audit: type=1326 audit(1754867425.948:23616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec2cbadd9 code=0x7ffc0000 [ 85.971600][ T29] audit: type=1326 audit(1754867425.948:23617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 85.995136][ T29] audit: type=1326 audit(1754867425.978:23618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec2d15ba7 code=0x7ffc0000 [ 86.018506][ T29] audit: type=1326 audit(1754867425.978:23619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec2cbadd9 code=0x7ffc0000 [ 86.042344][ T29] audit: type=1326 audit(1754867425.978:23620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 86.066032][ T29] audit: type=1326 audit(1754867425.978:23621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec2d15ba7 code=0x7ffc0000 [ 86.168198][ T8666] loop3: detected capacity change from 0 to 1024 [ 86.175040][ T8666] EXT4-fs: Ignoring removed orlov option [ 86.180829][ T8666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.190665][ T8666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.214551][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.758342][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 86.774174][ T8676] loop6: detected capacity change from 0 to 128 [ 86.784821][ T8676] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.798928][ T8676] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.856338][ T5986] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.879169][ T8686] loop6: detected capacity change from 0 to 1024 [ 86.890290][ T8688] wireguard0: entered promiscuous mode [ 86.891977][ T8686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.895758][ T8688] wireguard0: entered allmulticast mode [ 87.020962][ T8686] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2185: Allocating blocks 497-513 which overlap fs metadata [ 87.094202][ T8686] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2185: Allocating blocks 497-513 which overlap fs metadata [ 87.111863][ T8679] loop3: detected capacity change from 0 to 8192 [ 87.119184][ T8686] EXT4-fs (loop6): pa ffff888106e682a0: logic 256, phys. 369, len 9 [ 87.127250][ T8686] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 87.187972][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.207206][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2200'. [ 87.790462][ T8750] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2216'. [ 87.932694][ T8767] loop2: detected capacity change from 0 to 1024 [ 87.955575][ T8767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.974814][ T8771] netlink: 'syz.3.2225': attribute type 6 has an invalid length. [ 88.148362][ T8788] sctp: [Deprecated]: syz.7.2232 (pid 8788) Use of int in max_burst socket option. [ 88.148362][ T8788] Use struct sctp_assoc_value instead [ 88.202989][ T8792] wireguard0: entered promiscuous mode [ 88.208486][ T8792] wireguard0: entered allmulticast mode [ 88.214213][ T8790] loop7: detected capacity change from 0 to 128 [ 88.230793][ T8790] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.244315][ T8767] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2224: Allocating blocks 497-513 which overlap fs metadata [ 88.258581][ T8790] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.322116][ T8767] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2224: Allocating blocks 497-513 which overlap fs metadata [ 88.338825][ T8767] EXT4-fs (loop2): pa ffff888106e318c0: logic 256, phys. 369, len 9 [ 88.346866][ T8767] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 88.496155][ T8817] loop2: detected capacity change from 0 to 1024 [ 88.639734][ T8817] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2252: Allocating blocks 497-513 which overlap fs metadata [ 88.665285][ T8837] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 88.679766][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 88.784392][ T8817] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2252: Allocating blocks 497-513 which overlap fs metadata [ 88.799854][ T8817] EXT4-fs (loop2): pa ffff888106e682a0: logic 256, phys. 369, len 9 [ 88.807970][ T8817] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 88.836138][ T8852] lo speed is unknown, defaulting to 1000 [ 88.923629][ T8862] loop3: detected capacity change from 0 to 128 [ 88.939188][ T8862] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.975091][ T8867] netlink: 'syz.6.2263': attribute type 21 has an invalid length. [ 88.983026][ T8867] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.204194][ T8882] loop3: detected capacity change from 0 to 8192 [ 89.218830][ T8882] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 89.227528][ T8882] FAT-fs (loop3): Filesystem has been set read-only [ 89.235119][ T8882] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 89.244397][ T8882] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 89.576985][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2285'. [ 89.608123][ T8923] loop7: detected capacity change from 0 to 1024 [ 89.628188][ T8923] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.654407][ T8932] netlink: 'syz.6.2290': attribute type 1 has an invalid length. [ 89.815960][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 89.824868][ T8943] netlink: 'syz.2.2294': attribute type 30 has an invalid length. [ 89.962815][ T8955] loop6: detected capacity change from 0 to 164 [ 89.977533][ T8955] bio_check_eod: 86 callbacks suppressed [ 89.977548][ T8955] syz.6.2300: attempt to access beyond end of device [ 89.977548][ T8955] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.997315][ T8955] syz.6.2300: attempt to access beyond end of device [ 89.997315][ T8955] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.152310][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2307'. [ 90.354425][ T8981] sctp: [Deprecated]: syz.6.2312 (pid 8981) Use of int in max_burst socket option. [ 90.354425][ T8981] Use struct sctp_assoc_value instead [ 90.385375][ T8985] loop6: detected capacity change from 0 to 512 [ 90.403380][ T8985] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.436196][ T8993] netlink: 'syz.7.2316': attribute type 1 has an invalid length. [ 90.454337][ T8995] loop6: detected capacity change from 0 to 1024 [ 90.474890][ T8995] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.527317][ T9007] bridge: RTM_NEWNEIGH with invalid ether address [ 90.535106][ T9007] bridge: RTM_NEWNEIGH with invalid ether address [ 90.603084][ T9014] loop6: detected capacity change from 0 to 4096 [ 90.824925][ T9026] netlink: 'syz.2.2329': attribute type 21 has an invalid length. [ 90.832834][ T9026] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.857365][ T9030] loop2: detected capacity change from 0 to 1024 [ 90.973890][ T9030] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2330: Allocating blocks 497-513 which overlap fs metadata [ 91.021018][ T9030] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2330: Allocating blocks 497-513 which overlap fs metadata [ 91.035263][ T9030] EXT4-fs (loop2): pa ffff888106e318c0: logic 256, phys. 369, len 9 [ 91.043293][ T9030] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 91.098246][ T9037] loop2: detected capacity change from 0 to 1024 [ 91.118045][ T9037] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.154060][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 91.179990][ T9047] netlink: 4 bytes leftover after parsing attributes in process `'. [ 91.384898][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 91.393855][ T9067] netlink: 'syz.7.2344': attribute type 30 has an invalid length. [ 91.420080][ T4480] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.439519][ T4480] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.451951][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 91.451963][ T29] audit: type=1400 audit(1754867431.558:24104): avc: denied { create } for pid=9069 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.488014][ T4480] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.490573][ T9052] loop2: detected capacity change from 0 to 8192 [ 91.503504][ T4480] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.513493][ T9071] loop7: detected capacity change from 0 to 164 [ 91.532586][ T9071] syz.7.2346: attempt to access beyond end of device [ 91.532586][ T9071] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 91.546517][ T9071] syz.7.2346: attempt to access beyond end of device [ 91.546517][ T9071] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 91.620336][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2352'. [ 91.656396][ T9085] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.669769][ T29] audit: type=1400 audit(1754867431.778:24105): avc: denied { read write } for pid=9078 comm=77DEA305FF07 name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.693950][ T29] audit: type=1400 audit(1754867431.778:24106): avc: denied { open } for pid=9078 comm=77DEA305FF07 path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.785246][ T29] audit: type=1400 audit(1754867431.888:24107): avc: denied { name_bind } for pid=9099 comm="syz.0.2357" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 91.857155][ T9107] loop7: detected capacity change from 0 to 512 [ 91.880640][ T9107] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.917176][ T9114] loop3: detected capacity change from 0 to 164 [ 91.926329][ T9114] syz.3.2361: attempt to access beyond end of device [ 91.926329][ T9114] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 91.941472][ T9114] syz.3.2361: attempt to access beyond end of device [ 91.941472][ T9114] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 91.969955][ T29] audit: type=1400 audit(1754867432.078:24108): avc: denied { create } for pid=9119 comm="syz.6.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.004385][ T29] audit: type=1400 audit(1754867432.078:24109): avc: denied { setopt } for pid=9119 comm="syz.6.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.023957][ T29] audit: type=1326 audit(1754867432.098:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9121 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 92.047584][ T29] audit: type=1326 audit(1754867432.098:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9121 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 92.071131][ T29] audit: type=1326 audit(1754867432.098:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9121 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 92.094752][ T29] audit: type=1326 audit(1754867432.098:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9121 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 92.144902][ T9128] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 92.158804][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2369'. [ 92.171546][ T9130] netlink: 4 bytes leftover after parsing attributes in process `'. [ 92.258617][ T9150] vlan2: entered allmulticast mode [ 92.362075][ T9164] IPVS: Error connecting to the multicast addr [ 92.417035][ T9169] netlink: 'syz.6.2385': attribute type 1 has an invalid length. [ 92.627554][ T9196] vlan2: entered allmulticast mode [ 92.632768][ T9196] : entered allmulticast mode [ 92.637872][ T9196] bond_slave_0: entered allmulticast mode [ 92.643882][ T9196] bond_slave_1: entered allmulticast mode [ 92.668428][ T9197] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 92.967004][ T9241] loop6: detected capacity change from 0 to 1024 [ 92.976477][ T9241] EXT4-fs: Ignoring removed orlov option [ 92.996473][ T9243] netlink: 'syz.7.2417': attribute type 298 has an invalid length. [ 93.016630][ T9241] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.199040][ T9270] IPVS: Error connecting to the multicast addr [ 93.332363][ T9288] tipc: Enabling of bearer rejected, failed to enable media [ 93.604684][ T9314] netlink: '': attribute type 6 has an invalid length. [ 93.939050][ T9346] loop2: detected capacity change from 0 to 1024 [ 93.967313][ T9346] EXT4-fs: Ignoring removed orlov option [ 93.995243][ T9346] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.059449][ T9360] __nla_validate_parse: 12 callbacks suppressed [ 94.059539][ T9360] netlink: 566 bytes leftover after parsing attributes in process `syz.0.2466'. [ 94.119153][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2471'. [ 94.133211][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2471'. [ 94.186166][ T9383] loop2: detected capacity change from 0 to 1024 [ 94.201262][ T9383] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.214232][ T9383] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.225992][ T9383] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2475: inode #100663328: comm syz.2.2475: iget: illegal inode # [ 94.242367][ T9383] EXT4-fs (loop2): Remounting filesystem read-only [ 94.249022][ T9383] EXT4-fs (loop2): no journal found [ 94.254351][ T9383] EXT4-fs (loop2): can't get journal size [ 94.271190][ T9383] EXT4-fs (loop2): failed to initialize system zone (-22) [ 94.282348][ T9383] EXT4-fs (loop2): mount failed [ 94.302271][ T9395] lo speed is unknown, defaulting to 1000 [ 94.391148][ T9410] netlink: 'syz.7.2488': attribute type 3 has an invalid length. [ 94.605987][ T9431] hub 6-0:1.0: USB hub found [ 94.611441][ T9431] hub 6-0:1.0: 8 ports detected [ 94.618861][ T9438] loop7: detected capacity change from 0 to 512 [ 94.626538][ T9438] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.670180][ T9444] loop7: detected capacity change from 0 to 1024 [ 94.677055][ T9444] EXT4-fs: Ignoring removed orlov option [ 94.688994][ T9444] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 95.281390][ T9478] lo speed is unknown, defaulting to 1000 [ 95.804792][ T9523] loop3: detected capacity change from 0 to 128 [ 95.819821][ T9524] loop7: detected capacity change from 0 to 512 [ 95.826895][ T9523] EXT4-fs mount: 26 callbacks suppressed [ 95.826907][ T9523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.832020][ T9524] EXT4-fs: Ignoring removed oldalloc option [ 95.858433][ T9523] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.865125][ T9524] ext4: Unknown parameter 'smackfsfloor' [ 96.021218][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.054663][ T9541] loop3: detected capacity change from 0 to 512 [ 96.061343][ T9541] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.201423][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 96.225092][ T9564] vlan2: entered allmulticast mode [ 96.230266][ T9564] syz_tun: entered allmulticast mode [ 96.432046][ T9580] lo speed is unknown, defaulting to 1000 [ 96.492509][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 96.527101][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2561'. [ 96.726215][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 96.726236][ T29] audit: type=1326 audit(1755916012.723:24359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.755904][ T29] audit: type=1326 audit(1755916012.723:24360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.779535][ T29] audit: type=1326 audit(1755916012.723:24361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.803117][ T29] audit: type=1326 audit(1755916012.723:24362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.826649][ T29] audit: type=1326 audit(1755916012.723:24363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.850143][ T29] audit: type=1326 audit(1755916012.723:24364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.873614][ T29] audit: type=1326 audit(1755916012.723:24365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.897075][ T29] audit: type=1326 audit(1755916012.723:24366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.923318][ T29] audit: type=1326 audit(1755916012.723:24367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 96.946819][ T29] audit: type=1326 audit(1755916012.723:24368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f585a5bebe9 code=0x7ffc0000 [ 97.003389][ T9619] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2573'. [ 97.018303][ T9621] netlink: 'syz.0.2574': attribute type 21 has an invalid length. [ 97.026534][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2574'. [ 97.035666][ T9621] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 97.148041][ T9637] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 97.181914][ T9635] loop3: detected capacity change from 0 to 512 [ 97.195992][ T9635] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 97.209370][ T9635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.227196][ T9635] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2580: iget: bad i_size value: 38620345925642 [ 97.251616][ T9635] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2580: couldn't read orphan inode 15 (err -117) [ 97.268199][ T9635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.310959][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.320248][ T9648] loop2: detected capacity change from 0 to 512 [ 97.327266][ T9648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.340923][ T9648] EXT4-fs (loop2): 1 truncate cleaned up [ 97.348068][ T9648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.377575][ T9656] netlink: 'syz.7.2589': attribute type 21 has an invalid length. [ 97.379222][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.385517][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2589'. [ 97.403449][ T9656] netlink: 'syz.7.2589': attribute type 1 has an invalid length. [ 97.438288][ T9662] netlink: 'syz.7.2592': attribute type 10 has an invalid length. [ 97.527353][ T9670] bridge0: port 3(batadv1) entered blocking state [ 97.533905][ T9670] bridge0: port 3(batadv1) entered disabled state [ 97.545988][ T9670] batadv1: entered allmulticast mode [ 97.552573][ T9670] batadv1: entered promiscuous mode [ 97.627490][ T9677] loop2: detected capacity change from 0 to 512 [ 97.653410][ T9677] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.675404][ T9677] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.690136][ T9677] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2598: iget: bad i_size value: 38620345925642 [ 97.716108][ T9677] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2598: couldn't read orphan inode 15 (err -117) [ 97.728587][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.768772][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.906185][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 97.917097][ T9709] netlink: 'syz.0.2612': attribute type 6 has an invalid length. [ 98.044541][ T4469] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.053776][ T4469] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.164627][ T9748] netlink: 'syz.2.2627': attribute type 10 has an invalid length. [ 98.563928][ T9791] lo speed is unknown, defaulting to 1000 [ 98.934282][ T9815] netlink: 'syz.2.2656': attribute type 6 has an invalid length. [ 99.387309][ T9861] __nla_validate_parse: 9 callbacks suppressed [ 99.387322][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 99.483441][ T9872] serio: Serial port ttyS3 [ 100.258403][ T9915] rdma_op ffff888104ef9980 conn xmit_rdma 0000000000000000 [ 100.379911][ T9928] loop6: detected capacity change from 0 to 512 [ 100.420667][ T9928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.433374][ T9940] ip6tnl1: entered promiscuous mode [ 100.440568][ T9928] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.470125][ T9941] netlink: 48 bytes leftover after parsing attributes in process `gtp'. [ 100.486990][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.522481][ T9954] netlink: 'syz.6.2716': attribute type 3 has an invalid length. [ 100.537317][ T9955] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2717'. [ 100.697394][ T9988] loop3: detected capacity change from 0 to 1024 [ 100.704704][ T9988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.744072][ T9988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.775882][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.794158][T10000] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2737'. [ 100.872711][T10010] tmpfs: Unknown parameter 'usrquota0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 100.872711][T10010] 0 [ 101.261535][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2755'. [ 101.384054][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2763'. [ 101.393208][T10054] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2763'. [ 101.403493][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2763'. [ 101.412591][T10054] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2763'. [ 101.421685][T10054] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2763'. [ 101.875394][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 101.875409][ T29] audit: type=1326 audit(1756440305.733:25060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 101.926090][ T29] audit: type=1326 audit(1756440305.762:25061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 101.949708][ T29] audit: type=1326 audit(1756440305.772:25062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 101.974145][ T29] audit: type=1326 audit(1756440305.782:25063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 101.997736][ T29] audit: type=1326 audit(1756440305.782:25064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 102.021284][ T29] audit: type=1326 audit(1756440305.782:25065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 102.044899][ T29] audit: type=1326 audit(1756440305.811:25066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 102.068516][ T29] audit: type=1326 audit(1756440305.811:25067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 102.100536][ T29] audit: type=1400 audit(1756440305.948:25068): avc: denied { relabelfrom } for pid=10090 comm="syz.2.2779" name="NETLINK" dev="sockfs" ino=27372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.124797][ T29] audit: type=1400 audit(1756440305.948:25069): avc: denied { relabelto } for pid=10090 comm="syz.2.2779" name="NETLINK" dev="sockfs" ino=27372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_audit_socket permissive=1 [ 102.296725][T10109] atomic_op ffff88810d1c1128 conn xmit_atomic 0000000000000000 [ 102.297358][T10111] random: crng reseeded on system resumption [ 102.423488][ T3391] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.441979][ T3391] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.552360][T10133] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.560608][T10134] sctp: [Deprecated]: syz.3.2796 (pid 10134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.560608][T10134] Use struct sctp_sack_info instead [ 102.616158][T10138] loop6: detected capacity change from 0 to 512 [ 102.640716][T10138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.666888][T10138] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.687534][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.789370][T10154] lo speed is unknown, defaulting to 1000 [ 103.084267][T10180] loop6: detected capacity change from 0 to 512 [ 103.123972][T10180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.155168][T10180] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.185226][T10180] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2817: corrupted xattr block 33: e_value out of bounds [ 103.219091][T10180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 103.240711][T10180] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2817: corrupted xattr block 33: e_value out of bounds [ 103.240888][T10188] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2817: corrupted xattr block 33: e_value out of bounds [ 103.269724][T10180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 103.314361][T10188] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 103.372352][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.409466][T10196] geneve2: entered promiscuous mode [ 103.430881][ T4469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.451782][ T4469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.462957][ T4469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.472191][ T4469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.634400][T10232] netlink: 'syz.3.2838': attribute type 39 has an invalid length. [ 104.028725][T10255] ipip0: entered promiscuous mode [ 104.114109][T10266] loop6: detected capacity change from 0 to 512 [ 104.134337][T10266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.149073][T10266] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.167253][T10266] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2852: corrupted inode contents [ 104.179809][T10266] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2852: mark_inode_dirty error [ 104.204691][T10266] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2852: corrupted inode contents [ 104.225402][T10266] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2852: corrupted inode contents [ 104.238757][T10266] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2852: mark_inode_dirty error [ 104.253212][T10266] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2852: corrupted inode contents [ 104.291152][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.337672][T10291] lo speed is unknown, defaulting to 1000 [ 104.399310][T10302] loop2: detected capacity change from 0 to 512 [ 104.425161][T10302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.477024][T10304] loop7: detected capacity change from 0 to 8192 [ 104.483522][T10302] ext4 filesystem being mounted at /621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.501795][T10302] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2866: corrupted xattr block 33: e_value out of bounds [ 104.516166][T10302] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.530571][T10304] random: crng reseeded on system resumption [ 104.549815][T10302] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2866: corrupted xattr block 33: e_value out of bounds [ 104.558014][T10313] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2866: corrupted xattr block 33: e_value out of bounds [ 104.593588][T10313] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.629385][T10302] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.683971][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.743812][T10327] __nla_validate_parse: 9 callbacks suppressed [ 104.743830][T10327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2874'. [ 104.758989][T10327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2874'. [ 104.778781][T10333] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2881'. [ 104.911026][T10345] lo speed is unknown, defaulting to 1000 [ 104.961096][T10360] IPv6: Can't replace route, no match found [ 105.334584][T10408] loop3: detected capacity change from 0 to 8192 [ 105.366857][T10408] random: crng reseeded on system resumption [ 105.403161][T10422] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2920'. [ 105.412279][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2920'. [ 105.454447][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 105.470881][T10431] team1: entered promiscuous mode [ 105.475949][T10431] team1: entered allmulticast mode [ 105.481323][T10431] 8021q: adding VLAN 0 to HW filter on device team1 [ 105.488057][ T23] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 105.538667][T10439] loop2: detected capacity change from 0 to 128 [ 105.628286][T10456] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2935'. [ 105.656648][T10463] bridge_slave_0: default FDB implementation only supports local addresses [ 105.686070][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 105.723663][T10473] loop3: detected capacity change from 0 to 2048 [ 105.744977][T10473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.757185][T10473] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.782093][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.922791][T10505] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 105.960074][T10505] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 105.983929][T10510] loop2: detected capacity change from 0 to 1024 [ 105.993594][T10510] EXT4-fs: Ignoring removed oldalloc option [ 105.999555][T10510] EXT4-fs: Ignoring removed bh option [ 106.011042][T10510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 106.036858][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.042222][T10520] loop3: detected capacity change from 0 to 512 [ 106.053168][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.063072][T10520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.064226][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.083898][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.084432][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 106.110687][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.247286][T10546] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 106.298129][T10556] ip6gre2: entered allmulticast mode [ 106.316846][T10555] lo speed is unknown, defaulting to 1000 [ 106.618329][T10589] vhci_hcd: invalid port number 65 [ 106.994010][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 106.994084][ T29] audit: type=1326 audit(1756440310.736:25354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.023862][ T29] audit: type=1326 audit(1756440310.756:25355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.047477][ T29] audit: type=1326 audit(1756440310.756:25356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.078736][ T29] audit: type=1326 audit(1756440310.776:25357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.102698][ T29] audit: type=1326 audit(1756440310.776:25358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.126329][ T29] audit: type=1326 audit(1756440310.776:25359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.150166][ T29] audit: type=1326 audit(1756440310.805:25360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.173762][ T29] audit: type=1326 audit(1756440310.805:25361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.197346][ T29] audit: type=1326 audit(1756440310.825:25362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.233405][ T29] audit: type=1326 audit(1756440310.854:25363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 107.444743][ T3391] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 60 sec [ 107.965739][T10652] tipc: Started in network mode [ 107.970651][T10652] tipc: Node identity ac14140f, cluster identity 4711 [ 107.977984][T10652] tipc: New replicast peer: 255.255.255.255 [ 107.984066][T10652] tipc: Enabled bearer , priority 10 [ 108.621845][T10686] atomic_op ffff88810248c928 conn xmit_atomic 0000000000000000 [ 108.641608][T10688] netlink: 'syz.3.3038': attribute type 4 has an invalid length. [ 108.750900][T10701] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 108.750900][T10701] program syz.3.3043 not setting count and/or reply_len properly [ 108.940554][T10716] netlink: 'syz.2.3052': attribute type 4 has an invalid length. [ 108.977254][T10720] 9p: Unknown Cache mode or invalid value n [ 109.009763][T10725] netlink: 'syz.3.3056': attribute type 39 has an invalid length. [ 109.036767][ T4485] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.059039][ T4485] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.084315][ T4485] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.097663][ T4485] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.121218][ T3391] tipc: Node number set to 2886997007 [ 109.219756][T10747] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 109.285730][T10758] loop7: detected capacity change from 0 to 512 [ 109.292296][T10758] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.298948][T10758] ext4: Unknown parameter 'noacl' [ 109.457792][T10785] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 109.457792][T10785] program syz.7.3082 not setting count and/or reply_len properly [ 109.738471][T10824] hsr_slave_1 (unregistering): left promiscuous mode [ 109.926295][T10848] __nla_validate_parse: 12 callbacks suppressed [ 109.926312][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3113'. [ 109.941805][T10848] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3113'. [ 109.950774][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3113'. [ 109.961181][T10848] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3113'. [ 110.011227][T10861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'. [ 110.316043][T10901] netlink: zone id is out of range [ 110.324628][T10900] loop3: detected capacity change from 0 to 512 [ 110.339614][T10902] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3137'. [ 110.350227][T10900] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.380116][T10900] ext4: Unknown parameter 'noacl' [ 110.489951][T10914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10914 comm=syz.0.3142 [ 110.575410][T10918] loop3: detected capacity change from 0 to 1024 [ 110.607507][T10918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.637323][T10918] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 110.687995][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.746708][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'. [ 110.775127][T10934] loop6: detected capacity change from 0 to 2048 [ 110.780016][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'. [ 110.805700][T10934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.859985][ T5986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 110.901304][ T5986] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 110.945190][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.005425][T10945] netlink: 'syz.2.3156': attribute type 39 has an invalid length. [ 111.261799][T10960] openvswitch: netlink: Message has 6 unknown bytes. [ 111.445283][T10986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3175'. [ 111.655085][T11014] bridge2: entered allmulticast mode [ 111.826937][T11041] loop2: detected capacity change from 0 to 1024 [ 111.836910][T11041] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.847918][T11041] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.875442][T11041] JBD2: no valid journal superblock found [ 111.881343][T11041] EXT4-fs (loop2): Could not load journal inode [ 112.052337][T11062] lo speed is unknown, defaulting to 1000 [ 112.131715][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3213'. [ 112.185828][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.206934][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.291915][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 112.291939][ T29] audit: type=1326 audit(1756440315.956:25548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.332003][ T29] audit: type=1326 audit(1756440315.986:25549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.355629][ T29] audit: type=1326 audit(1756440315.986:25550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.379263][ T29] audit: type=1326 audit(1756440315.986:25551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.402896][ T29] audit: type=1326 audit(1756440315.986:25552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.426474][ T29] audit: type=1326 audit(1756440315.986:25553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.450081][ T29] audit: type=1326 audit(1756440315.986:25554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.473660][ T29] audit: type=1326 audit(1756440315.996:25555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.497205][ T29] audit: type=1326 audit(1756440315.996:25556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.520764][ T29] audit: type=1326 audit(1756440315.996:25557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.2.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 112.607383][T11084] hsr_slave_1 (unregistering): left promiscuous mode [ 112.793414][T11111] netlink: 'syz.7.3231': attribute type 1 has an invalid length. [ 112.820958][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.845064][T11111] bond0: (slave gretap1): making interface the new active one [ 112.853616][T11111] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 113.000948][T11149] loop2: detected capacity change from 0 to 512 [ 113.011150][T11149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 113.019384][T11147] lo speed is unknown, defaulting to 1000 [ 113.025684][T11149] System zones: 1-12 [ 113.037144][T11149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3247: error while reading EA inode 32 err=-116 [ 113.050797][T11149] EXT4-fs (loop2): Remounting filesystem read-only [ 113.057445][T11149] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 113.077409][T11149] EXT4-fs (loop2): 1 orphan inode deleted [ 113.099962][T11149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.116075][T11149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.343195][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.350969][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.358726][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.366492][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.374258][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.381874][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.389276][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.397030][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.404612][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.412009][ T9] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 113.421106][ T9] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 113.532321][ T23] IPVS: starting estimator thread 0... [ 113.622426][T11184] IPVS: using max 2208 ests per chain, 110400 per kthread [ 113.731543][T11204] SELinux: failed to load policy [ 113.922520][T11212] bridge0: entered promiscuous mode [ 113.999108][T11224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11224 comm=syz.0.3281 [ 114.012239][T11224] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 114.030974][T11224] bond1: (slave bridge2): making interface the new active one [ 114.038645][T11224] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 114.047664][T11226] netlink: 'syz.3.3280': attribute type 15 has an invalid length. [ 114.057931][T11226] vxlan0: entered promiscuous mode [ 114.063608][ T1660] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.073195][ T1660] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.082114][ T1660] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.091038][ T1660] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.358576][T11244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11244 comm=syz.7.3289 [ 114.451160][T11254] pimreg: entered allmulticast mode [ 114.469669][T11254] pimreg: left allmulticast mode [ 114.645584][T11271] netlink: 'syz.0.3300': attribute type 3 has an invalid length. [ 114.671238][T11273] macsec0: entered allmulticast mode [ 114.681796][T11273] bridge0: port 4(macsec0) entered blocking state [ 114.688341][T11273] bridge0: port 4(macsec0) entered disabled state [ 115.114067][T11311] netlink: 'syz.3.3317': attribute type 3 has an invalid length. [ 115.150982][T11316] loop3: detected capacity change from 0 to 1024 [ 115.161159][T11316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.173702][T11316] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.199339][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.233577][T11321] loop3: detected capacity change from 0 to 2048 [ 115.265979][T11321] loop3: p2 p3 p7 [ 115.309479][T11331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11331 comm=syz.3.3325 [ 115.324396][T11331] netlink: 'syz.3.3325': attribute type 1 has an invalid length. [ 115.345432][T11331] bond2: (slave bridge2): making interface the new active one [ 115.353302][T11331] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 115.501933][T11357] IPVS: Error connecting to the multicast addr [ 115.505036][T11354] loop2: detected capacity change from 0 to 2048 [ 115.545485][T11361] loop6: detected capacity change from 0 to 1024 [ 115.552717][T11361] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 115.555270][T11354] loop2: p2 p3 p7 [ 115.630687][T11370] loop2: detected capacity change from 0 to 128 [ 115.639334][T11370] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.652168][T11370] ext4 filesystem being mounted at /738/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.675253][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.704279][T11379] __nla_validate_parse: 9 callbacks suppressed [ 115.704293][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'. [ 115.719561][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3347'. [ 115.728529][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'. [ 115.738164][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'. [ 115.818042][T11389] loop3: detected capacity change from 0 to 512 [ 115.837028][T11389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.857473][T11389] ext4 filesystem being mounted at /679/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.873636][T11389] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3352: bg 0: block 64: padding at end of block bitmap is not set [ 115.901621][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.209998][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 116.239236][T11418] bridge0: entered promiscuous mode [ 116.245765][T11418] macsec1: entered allmulticast mode [ 116.248719][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 116.251084][T11418] bridge0: entered allmulticast mode [ 116.266065][T11418] bridge0: port 3(macsec1) entered blocking state [ 116.272530][T11418] bridge0: port 3(macsec1) entered disabled state [ 116.280024][T11418] bridge0: left allmulticast mode [ 116.285175][T11418] bridge0: left promiscuous mode [ 116.387277][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3367'. [ 116.696681][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3383'. [ 117.517172][T11504] loop3: detected capacity change from 0 to 8192 [ 117.688094][T11520] loop6: detected capacity change from 0 to 512 [ 117.689986][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 117.690064][ T29] audit: type=1326 audit(1756440321.278:25980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11514 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 117.724065][ T29] audit: type=1326 audit(1756440321.278:25981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11514 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 117.747730][ T29] audit: type=1326 audit(1756440321.278:25982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11514 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 117.852308][T11520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.869805][T11520] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.883143][T11532] team0 (unregistering): Port device team_slave_0 removed [ 117.892504][T11532] team0 (unregistering): Port device team_slave_1 removed [ 117.916290][T11534] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 117.916290][T11534] program syz.3.3412 not setting count and/or reply_len properly [ 117.954022][T11520] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3408: bg 0: block 64: padding at end of block bitmap is not set [ 117.970588][ T29] audit: type=1326 audit(1756440321.585:25983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.7.3413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585a5bebe9 code=0x0 [ 118.007227][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.021165][T11541] : renamed from vlan0 [ 118.054378][ T29] audit: type=1326 audit(1756440321.664:25984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.078170][ T29] audit: type=1326 audit(1756440321.664:25985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.104130][ T29] audit: type=1326 audit(1756440321.714:25986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.127736][ T29] audit: type=1326 audit(1756440321.714:25987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.151570][ T29] audit: type=1326 audit(1756440321.714:25988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.176368][ T29] audit: type=1326 audit(1756440321.714:25989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb9ecebe9 code=0x7ffc0000 [ 118.220648][T11550] loop3: detected capacity change from 0 to 512 [ 118.243996][T11550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.275023][T11550] ext4 filesystem being mounted at /696/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.330446][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.348730][T11566] loop2: detected capacity change from 0 to 512 [ 118.386076][T11568] SELinux: failed to load policy [ 118.395258][T11566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.410931][T11566] ext4 filesystem being mounted at /751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.429441][T11579] loop6: detected capacity change from 0 to 256 [ 118.441322][T11579] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 118.441788][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3433'. [ 118.449267][T11579] FAT-fs (loop6): Filesystem has been set read-only [ 118.469488][T11566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3428: bg 0: block 64: padding at end of block bitmap is not set [ 118.496146][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.542271][T11590] loop6: detected capacity change from 0 to 512 [ 118.556692][T11590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.569636][T11590] ext4 filesystem being mounted at /472/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.596842][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.665823][T11606] loop6: detected capacity change from 0 to 512 [ 118.672248][T11607] loop2: detected capacity change from 0 to 1024 [ 118.681354][T11607] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 118.691666][T11606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.739592][T11606] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.753564][T11612] IPv4: Oversized IP packet from 127.202.26.0 [ 118.784590][T11606] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #18: comm syz.6.3444: corrupted inode contents [ 118.819153][T11606] EXT4-fs (loop6): Remounting filesystem read-only [ 118.831108][T11606] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 118.858278][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.897710][T11621] loop2: detected capacity change from 0 to 1024 [ 118.904591][T11621] EXT4-fs: Ignoring removed nobh option [ 118.918722][T11623] bridge: RTM_NEWNEIGH with invalid ether address [ 118.939936][T11621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.970114][T11634] netlink: 'syz.7.3454': attribute type 27 has an invalid length. [ 118.979011][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.048678][T11640] loop2: detected capacity change from 0 to 512 [ 119.077974][T11640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.110300][T11640] ext4 filesystem being mounted at /758/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.165939][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.184589][T11650] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3460'. [ 119.278665][T11658] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 119.287763][T11658] dummy0: entered promiscuous mode [ 119.463470][ T3391] lo speed is unknown, defaulting to 1000 [ 119.465910][T11672] ipvlan2: entered promiscuous mode [ 119.469283][ T3391] syz0: Port: 1 Link DOWN [ 119.475562][T11672] bridge0: port 3(ipvlan2) entered blocking state [ 119.485393][T11672] bridge0: port 3(ipvlan2) entered disabled state [ 119.493910][T11672] ipvlan2: entered allmulticast mode [ 119.499210][T11672] bridge0: entered allmulticast mode [ 119.519192][T11672] ipvlan2: left allmulticast mode [ 119.524276][T11672] bridge0: left allmulticast mode [ 119.549489][T11682] loop3: detected capacity change from 0 to 512 [ 119.557518][ T4462] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.566463][ T4462] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.575901][T11682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.586547][ T4462] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.595577][ T4462] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.604543][ T1660] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.613520][ T1660] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.622633][ T1660] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.631669][ T1660] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.641911][T11682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 119.649910][T11682] System zones: 0-2, 18-18, 34-34 [ 119.669076][T11682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.681727][T11682] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.694717][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.078357][T11727] loop6: detected capacity change from 0 to 8192 [ 120.123784][T11731] bond_slave_1: entered promiscuous mode [ 120.130094][T11731] bond_slave_1: left promiscuous mode [ 120.233951][T11736] loop6: detected capacity change from 0 to 8192 [ 120.321341][T11745] ipvlan2: entered promiscuous mode [ 120.326962][T11745] bridge0: port 3(ipvlan2) entered blocking state [ 120.333509][T11745] bridge0: port 3(ipvlan2) entered disabled state [ 120.340440][T11745] ipvlan2: entered allmulticast mode [ 120.346085][T11745] ipvlan2: left allmulticast mode crond[3093]: time disparity of 26215 minutes detected [ 120.871319][T11783] __nla_validate_parse: 6 callbacks suppressed [ 120.877567][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3510'. [ 120.989387][T11793] netlink: 'syz.6.3516': attribute type 21 has an invalid length. [ 121.049281][T11798] loop7: detected capacity change from 0 to 1024 [ 121.056420][T11798] EXT4-fs: Ignoring removed bh option [ 121.066577][T11798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.418130][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.609994][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3525'. [ 121.664888][T11825] futex_wake_op: syz.2.3529 tries to shift op by -1; fix this program [ 121.680509][T11833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3533'. [ 121.787526][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 121.828883][T11861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3546'. [ 122.658648][T11897] loop7: detected capacity change from 0 to 512 [ 122.677604][T11897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.690658][T11897] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.761223][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.792773][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.802623][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.825259][T11911] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 122.868154][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 122.868169][ T29] audit: type=1400 audit(1756440326.436:26569): avc: denied { nlmsg_read } for pid=11922 comm="syz.0.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.868640][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3573'. [ 122.877589][T11923] geneve3: entered promiscuous mode [ 122.909383][T11923] geneve3: entered allmulticast mode [ 122.994539][T11935] netlink: 'syz.3.3577': attribute type 6 has an invalid length. [ 123.077530][T11948] netlink: 'syz.0.3584': attribute type 1 has an invalid length. [ 123.091195][T11948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.116607][T11948] vlan2: entered allmulticast mode [ 123.121859][T11948] bond2: entered allmulticast mode [ 123.292973][T11959] syz_tun: entered allmulticast mode [ 123.417139][T11971] netlink: 'syz.7.3594': attribute type 13 has an invalid length. [ 123.425005][T11971] netlink: 'syz.7.3594': attribute type 17 has an invalid length. [ 123.445891][T11974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11974 comm=syz.0.3595 [ 123.512967][T11971] 8021q: adding VLAN 0 to HW filter on device  [ 123.520964][T11971] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.542796][T11971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.603710][ T29] audit: type=1326 audit(1756440327.171:26570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 123.637314][T11982] loop3: detected capacity change from 0 to 2048 [ 123.651272][ T29] audit: type=1326 audit(1756440327.191:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4cdadebe9 code=0x7ffc0000 [ 123.674981][ T29] audit: type=1326 audit(1756440327.191:26572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4cdadec23 code=0x7ffc0000 [ 123.698350][ T29] audit: type=1326 audit(1756440327.201:26573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4cdadd69f code=0x7ffc0000 [ 123.721780][ T29] audit: type=1326 audit(1756440327.201:26574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4cdadec77 code=0x7ffc0000 [ 123.745291][ T29] audit: type=1326 audit(1756440327.201:26575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4cdadd550 code=0x7ffc0000 [ 123.768921][ T29] audit: type=1326 audit(1756440327.201:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4cdade7eb code=0x7ffc0000 [ 123.792514][ T29] audit: type=1326 audit(1756440327.211:26577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4cdadd84a code=0x7ffc0000 [ 123.815979][ T29] audit: type=1326 audit(1756440327.211:26578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4cdadd84a code=0x7ffc0000 [ 123.872807][T11982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 123.943472][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 123.974887][T11994] loop7: detected capacity change from 0 to 512 [ 124.031033][T11994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.059685][T11994] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.091022][T11994] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3603: corrupted inode contents [ 124.113839][T11994] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3603: mark_inode_dirty error [ 124.125614][T11994] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3603: corrupted inode contents [ 124.194538][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.253482][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3611'. [ 124.284673][T12031] bond0: entered promiscuous mode [ 124.289794][T12031] bond_slave_0: entered promiscuous mode [ 124.295582][T12031] bond_slave_1: entered promiscuous mode [ 124.379655][T12042] loop3: detected capacity change from 0 to 512 [ 124.401525][T12042] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.418036][T12042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.478948][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.530611][T12050] loop6: detected capacity change from 0 to 512 [ 124.555340][T12050] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.638675][T12071] netlink: 'syz.7.3634': attribute type 1 has an invalid length. [ 124.646440][T12071] netlink: 198116 bytes leftover after parsing attributes in process `syz.7.3634'. [ 124.692408][T12076] loop3: detected capacity change from 0 to 128 [ 124.706096][T12076] ext4 filesystem being mounted at /739/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.862044][T12106] serio: Serial port ptm0 [ 124.940478][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3653'. [ 124.975452][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3653'. [ 125.064353][T12120] loop2: detected capacity change from 0 to 8192 [ 125.440291][T12154] loop6: detected capacity change from 0 to 2048 [ 125.517586][T12165] bridge: RTM_NEWNEIGH with invalid ether address [ 126.578783][T12251] __nla_validate_parse: 3 callbacks suppressed [ 126.578797][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3715'. [ 126.595713][T12251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.612123][T12251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.959595][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.968161][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.978829][T12281] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 127.159091][T12294] loop3: detected capacity change from 0 to 2368 [ 127.471330][T12321] loop3: detected capacity change from 0 to 128 [ 127.482764][T12321] EXT4-fs mount: 6 callbacks suppressed [ 127.482778][T12321] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.516813][T12321] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.550082][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.693890][T12339] netlink: 2020 bytes leftover after parsing attributes in process `syz.0.3750'. [ 127.703109][T12339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3750'. [ 127.749325][T12338] loop3: detected capacity change from 0 to 8192 [ 127.912990][T12336] Set syz1 is full, maxelem 65536 reached [ 128.123944][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 128.123957][ T29] audit: type=1326 audit(1756440331.656:26681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ab3495ba7 code=0x7ffc0000 [ 128.153641][ T29] audit: type=1326 audit(1756440331.656:26682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ab343add9 code=0x7ffc0000 [ 128.177176][ T29] audit: type=1326 audit(1756440331.656:26683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ab3495ba7 code=0x7ffc0000 [ 128.200700][ T29] audit: type=1326 audit(1756440331.656:26684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ab343add9 code=0x7ffc0000 [ 128.224235][ T29] audit: type=1326 audit(1756440331.656:26685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 128.247907][ T29] audit: type=1326 audit(1756440331.656:26686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 128.288676][T12350] dummy0: left promiscuous mode [ 128.296054][T12350] macvtap1: left promiscuous mode [ 128.301105][T12350] macvtap1: left allmulticast mode [ 128.306335][T12350] vxlan0: left promiscuous mode [ 128.311666][T12350] veth3: left promiscuous mode [ 128.317065][T12350] team1: left promiscuous mode [ 128.321834][T12350] team1: left allmulticast mode [ 128.344376][ T29] audit: type=1326 audit(1756440331.805:26687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 128.368058][ T29] audit: type=1326 audit(1756440331.805:26688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 128.391704][ T29] audit: type=1326 audit(1756440331.805:26689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab349ebe9 code=0x7ffc0000 [ 128.420696][ T29] audit: type=1400 audit(1756440331.964:26690): avc: denied { write } for pid=12352 comm="syz.3.3757" lport=37494 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.565348][T12379] loop7: detected capacity change from 0 to 128 [ 128.605215][T12384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12384 comm=syz.7.3773 [ 128.617880][T12384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12384 comm=syz.7.3773 [ 128.674131][T12386] lo speed is unknown, defaulting to 1000 [ 129.123142][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.132163][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.224128][T12467] loop7: detected capacity change from 0 to 128 [ 129.230881][T12467] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.243311][T12467] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.265296][ T4468] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.355706][T12475] loop3: detected capacity change from 0 to 1024 [ 129.369029][T12475] EXT4-fs: Ignoring removed orlov option [ 129.390025][T12475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.427525][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.448720][T12486] loop3: detected capacity change from 0 to 512 [ 129.455593][T12486] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 129.458141][T12488] tipc: Started in network mode [ 129.469316][T12488] tipc: Node identity ac14140f, cluster identity 4711 [ 129.476322][T12488] tipc: New replicast peer: 255.255.255.83 [ 129.482182][T12488] tipc: Enabled bearer , priority 10 [ 129.516029][T12490] lo speed is unknown, defaulting to 1000 [ 129.531618][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.540153][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.541173][T12476] lo speed is unknown, defaulting to 1000 [ 129.550446][T12492] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 129.741451][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3826'. [ 129.829468][T12505] bond0: left promiscuous mode [ 129.834380][T12505] bond_slave_0: left promiscuous mode [ 129.839838][T12505] bond_slave_1: left promiscuous mode [ 129.869627][T12505] vlan2: left allmulticast mode [ 129.875303][T12505] ip6tnl1: left promiscuous mode [ 129.883593][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'. [ 129.896009][T12505] ipip0: left promiscuous mode [ 129.902885][T12505] vxlan0: left promiscuous mode [ 129.928026][ T4466] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.937179][ T4466] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.947202][ T4466] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.974053][ T4466] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.077218][T12530] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3833'. [ 130.218408][T12553] pim6reg1: entered promiscuous mode [ 130.223723][T12553] pim6reg1: entered allmulticast mode [ 130.362648][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.384493][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.395633][T12568] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 130.478432][T12511] tipc: Node number set to 2886997007 [ 130.595175][T12576] geneve2: entered promiscuous mode [ 130.600455][T12576] geneve2: entered allmulticast mode [ 130.817407][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3856'. [ 131.066651][T12606] pim6reg1: entered promiscuous mode [ 131.072077][T12606] pim6reg1: entered allmulticast mode [ 131.399414][T12632] loop2: detected capacity change from 0 to 2048 [ 131.436574][T12632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.473205][T12632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3877: bg 0: block 234: padding at end of block bitmap is not set [ 131.501351][T12632] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 131.513838][T12632] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.513838][T12632] [ 131.574452][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.641091][T12648] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3883'. [ 132.026042][T12679] 9pnet: Could not find request transport: 0xffffffffffffffff [ 132.039043][T12679] loop3: detected capacity change from 0 to 512 [ 132.075814][T12679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.103928][T12679] ext4 filesystem being mounted at /795/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.170064][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.271038][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 132.293068][T12691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.085576][T12730] loop7: detected capacity change from 0 to 512 [ 133.089503][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3918'. [ 133.119355][T12730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.134026][T12730] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.210723][ T6059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.267508][T12755] loop6: detected capacity change from 0 to 2048 [ 133.276665][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 133.276737][ T29] audit: type=1326 audit(1756440336.794:27393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.307180][T12757] loop2: detected capacity change from 0 to 128 [ 133.308097][ T29] audit: type=1326 audit(1756440336.794:27394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.314639][T12757] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.337199][ T29] audit: type=1326 audit(1756440336.794:27395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.350053][T12757] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.372448][ T29] audit: type=1326 audit(1756440336.794:27396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.405021][ T29] audit: type=1326 audit(1756440336.794:27397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.428583][ T29] audit: type=1326 audit(1756440336.794:27398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.452171][ T29] audit: type=1326 audit(1756440336.794:27399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.475726][ T29] audit: type=1326 audit(1756440336.804:27400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.488367][T12755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.499309][ T29] audit: type=1326 audit(1756440336.804:27401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.499336][ T29] audit: type=1326 audit(1756440336.804:27402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f6ec2d1ebe9 code=0x7ffc0000 [ 133.533281][T12755] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3926: bg 0: block 234: padding at end of block bitmap is not set [ 133.574993][T12755] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 133.587403][T12755] EXT4-fs (loop6): This should not happen!! Data will be lost [ 133.587403][T12755] [ 133.600831][T12761] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 133.635846][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.675693][T12769] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.683216][T12769] vhci_hcd: invalid port number 129 [ 133.688498][T12769] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 133.864960][T12796] loop3: detected capacity change from 0 to 512 [ 133.905648][T12796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.981024][T12796] ext4 filesystem being mounted at /806/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.129055][T12807] loop2: detected capacity change from 0 to 512 [ 134.153078][T12807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.194955][T12807] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.278469][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.314665][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.415831][T12821] bridge: RTM_NEWNEIGH with invalid ether address [ 134.540666][T12831] lo speed is unknown, defaulting to 1000 [ 134.724205][T12853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.801511][T12863] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3969'. [ 134.821441][T12863] hsr_slave_0: left promiscuous mode [ 134.831514][T12863] hsr_slave_1: left promiscuous mode [ 135.117726][T12908] infiniband syz!: set down [ 135.122335][T12908] infiniband syz!: added team_slave_0 [ 135.133339][T12908] RDS/IB: syz!: added [ 135.137411][T12908] smc: adding ib device syz! with port count 1 [ 135.143631][T12908] smc: ib device syz! port 1 has pnetid [ 135.150716][T12918] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3994'. [ 135.160759][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3993'. [ 135.169989][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3993'. [ 135.281336][T12931] netlink: 292 bytes leftover after parsing attributes in process `syz.6.4001'. [ 135.399545][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4006'. [ 135.416164][T12947] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 135.439187][T12949] pim6reg1: entered promiscuous mode [ 135.444530][T12949] pim6reg1: entered allmulticast mode [ 135.461530][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'. [ 135.504029][T12954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.167150][T13003] loop2: detected capacity change from 0 to 1024 [ 136.191633][T12991] lo speed is unknown, defaulting to 1000 [ 136.201018][T13003] EXT4-fs: Ignoring removed bh option [ 136.206509][T13003] EXT4-fs: inline encryption not supported [ 136.231196][T13003] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.257964][T13003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 136.276140][T13003] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4031: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.291923][T13003] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4031: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.306255][T13003] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4031: Failed to acquire dquot type 0 [ 136.318607][T13003] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 136.328289][T13003] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4031: mark_inode_dirty error [ 136.340985][T13003] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 136.351278][T13003] EXT4-fs (loop2): 1 orphan inode deleted [ 136.357809][T13003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.370822][ T4466] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.385248][ T4466] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 0 [ 136.419890][T13003] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4031: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.472782][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.605235][T13030] loop2: detected capacity change from 0 to 164 [ 136.643739][T13034] loop3: detected capacity change from 0 to 512 [ 136.663408][T13034] journal_path: Non-blockdev passed as './bus' [ 136.669672][T13034] EXT4-fs: error: could not find journal device path [ 136.722459][T13038] loop6: detected capacity change from 0 to 4096 [ 136.737707][T13038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.851427][T13038] EXT4-fs (loop6): shut down requested (0) [ 136.863228][T13038] ================================================================== [ 136.871313][T13038] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 136.878684][T13038] [ 136.880999][T13038] read-write to 0xffff88811a130d98 of 8 bytes by task 4458 on cpu 0: [ 136.889042][T13038] __xa_clear_mark+0xf5/0x1e0 [ 136.893713][T13038] __folio_end_writeback+0x177/0x470 [ 136.898991][T13038] folio_end_writeback+0x71/0x3d0 [ 136.904014][T13038] ext4_finish_bio+0x459/0x8c0 [ 136.908767][T13038] ext4_release_io_end+0x9f/0x1f0 [ 136.913779][T13038] ext4_end_io_end+0x18d/0x240 [ 136.918532][T13038] ext4_end_io_rsv_work+0x151/0x1e0 [ 136.923719][T13038] process_scheduled_works+0x4cb/0x9d0 [ 136.929170][T13038] worker_thread+0x582/0x770 [ 136.933755][T13038] kthread+0x489/0x510 [ 136.937807][T13038] ret_from_fork+0xda/0x150 [ 136.942293][T13038] ret_from_fork_asm+0x1a/0x30 [ 136.947042][T13038] [ 136.949348][T13038] read to 0xffff88811a130d98 of 8 bytes by task 13038 on cpu 1: [ 136.956954][T13038] xas_find_marked+0x218/0x620 [ 136.961706][T13038] find_get_entry+0x5d/0x380 [ 136.966292][T13038] filemap_get_folios_tag+0x13b/0x210 [ 136.971651][T13038] filemap_fdatawait_keep_errors+0x6c/0x180 [ 136.977534][T13038] sync_inodes_sb+0x39c/0x440 [ 136.982199][T13038] sync_filesystem+0x102/0x190 [ 136.986958][T13038] freeze_super+0x36a/0xa40 [ 136.991459][T13038] fs_bdev_freeze+0xfb/0x1d0 [ 136.996036][T13038] bdev_freeze+0x90/0x120 [ 137.000354][T13038] ext4_force_shutdown+0x1a8/0x2f0 [ 137.005456][T13038] ext4_ioctl+0x118b/0x2080 [ 137.009944][T13038] __se_sys_ioctl+0xcb/0x140 [ 137.014529][T13038] __x64_sys_ioctl+0x43/0x50 [ 137.019117][T13038] x64_sys_call+0x1816/0x2ff0 [ 137.023785][T13038] do_syscall_64+0xd2/0x200 [ 137.028280][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.034161][T13038] [ 137.036467][T13038] value changed: 0xfffffc0000000000 -> 0xff80000000000000 [ 137.043552][T13038] [ 137.045858][T13038] Reported by Kernel Concurrency Sanitizer on: [ 137.052008][T13038] CPU: 1 UID: 0 PID: 13038 Comm: syz.6.4045 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 137.062754][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.072794][T13038] ================================================================== [ 137.108403][ T5986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.