last executing test programs: 4m15.104399106s ago: executing program 32 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 4m4.397916427s ago: executing program 33 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m59.212409402s ago: executing program 5 (id=1472): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x23456, {0x0, r3}}) io_uring_enter(r0, 0x7373, 0x1ba7, 0x0, 0x0, 0x0) 3m59.212032812s ago: executing program 5 (id=1474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, 0xee01, 0x0) setresuid(0x0, 0x0, r1) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}}], 0x2, 0x0) 3m59.181929105s ago: executing program 5 (id=1478): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket(0x2b, 0x5, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = timerfd_create(0x9, 0x80000) timerfd_gettime(r1, &(0x7f0000000040)) 3m59.1288762s ago: executing program 5 (id=1481): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m59.111327752s ago: executing program 5 (id=1483): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)="1d", 0x1}], 0x1}, 0xd0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000004a80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8848, @empty, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="f0", 0x1}], 0x1}}], 0x1, 0x200880c0) 3m58.91705088s ago: executing program 5 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r2, 0xacf5e67dd0b583a1, 0x40000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 3m58.891121373s ago: executing program 34 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r2, 0xacf5e67dd0b583a1, 0x40000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 1m49.680079143s ago: executing program 0 (id=7369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 1m49.621051678s ago: executing program 0 (id=7372): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1m49.567772153s ago: executing program 0 (id=7373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 1m49.549572555s ago: executing program 0 (id=7375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1m49.455826754s ago: executing program 0 (id=7380): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m49.455676343s ago: executing program 0 (id=7381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0xc000400) mq_open(&(0x7f0000000180)='%`\x01', 0x842, 0x57, 0x0) unshare(0x28000600) close_range(r0, 0xffffffffffffffff, 0x2) 1m33.367247417s ago: executing program 35 (id=7381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0xc000400) mq_open(&(0x7f0000000180)='%`\x01', 0x842, 0x57, 0x0) unshare(0x28000600) close_range(r0, 0xffffffffffffffff, 0x2) 1m21.478225876s ago: executing program 6 (id=8412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c801, 0x0) 1m21.473662506s ago: executing program 6 (id=8414): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) stat(&(0x7f00000000c0)='./file0\x00', 0x0) 1m21.452145838s ago: executing program 6 (id=8415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendmmsg$sock(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) 1m21.391515304s ago: executing program 6 (id=8420): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2011}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000003c0)={0x1}) 1m21.340267348s ago: executing program 6 (id=8424): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1m21.332030459s ago: executing program 6 (id=8426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsopen(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.846311499s ago: executing program 36 (id=8426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsopen(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 58.061486201s ago: executing program 7 (id=8633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 58.016307985s ago: executing program 7 (id=8635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 57.897294006s ago: executing program 7 (id=8639): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x0) 57.821584643s ago: executing program 7 (id=8653): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) 57.805484145s ago: executing program 7 (id=8645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx}, 0x1c) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 57.692661785s ago: executing program 2 (id=8651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) alarm(0x8) 57.654162608s ago: executing program 2 (id=8654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) 57.610095192s ago: executing program 2 (id=8656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x4fff, 0x2, 0xa, 0x62}, &(0x7f0000000380), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 57.561697676s ago: executing program 2 (id=8658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 57.561268196s ago: executing program 2 (id=8659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)) 57.221119308s ago: executing program 2 (id=8667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 57.220974158s ago: executing program 37 (id=8667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 57.220911848s ago: executing program 7 (id=8669): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) 57.220851528s ago: executing program 38 (id=8669): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) 764.35676ms ago: executing program 4 (id=10978): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2}, 0x18) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 703.822345ms ago: executing program 4 (id=10980): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_pidfd_open(0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) 700.189875ms ago: executing program 1 (id=10981): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 677.384228ms ago: executing program 1 (id=10983): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x63b, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7}}}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[{0x18, 0x10d, 0x7, "324ce7"}], 0x18}}], 0x5, 0x200040d1) 584.977246ms ago: executing program 8 (id=10985): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 584.808186ms ago: executing program 4 (id=10986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x4, 0x7, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 558.419388ms ago: executing program 1 (id=10988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) unshare(0x28000600) unshare(0x26020400) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x44800) 503.201193ms ago: executing program 1 (id=10990): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x100040, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x1, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket$key(0xf, 0x3, 0x2) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000001}) close_range(r0, 0xffffffffffffffff, 0x0) 423.807411ms ago: executing program 8 (id=10991): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2}, 0x18) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 423.719191ms ago: executing program 4 (id=10992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 420.966371ms ago: executing program 1 (id=10993): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='./bus/file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 374.625276ms ago: executing program 3 (id=10994): r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 371.705576ms ago: executing program 4 (id=11004): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 360.755126ms ago: executing program 8 (id=10995): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2000000004}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x4}, 0x50) 340.824259ms ago: executing program 3 (id=10997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r2 = dup(r1) write$binfmt_elf64(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e"], 0x178) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 293.126453ms ago: executing program 1 (id=10998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6e82, &(0x7f0000000380)={0x0, 0xd91a, 0x1480, 0x2, 0x31f}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, 0x0, 0x64, 0x0, 0x12345}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 292.964293ms ago: executing program 9 (id=10999): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) 257.671146ms ago: executing program 9 (id=11000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 256.281226ms ago: executing program 3 (id=11011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) 213.16461ms ago: executing program 3 (id=11001): shutdown(0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 189.374632ms ago: executing program 8 (id=11002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) 146.254156ms ago: executing program 3 (id=11003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 145.795956ms ago: executing program 9 (id=11005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 113.543679ms ago: executing program 8 (id=11006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 113.236839ms ago: executing program 9 (id=11007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) flistxattr(r2, 0x0, 0x0) 91.256511ms ago: executing program 8 (id=11008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x0, 0x9, 0x8, 0x5, 0x3, "b9517524db92542e0f1beafb17021a67153120"}) 67.860693ms ago: executing program 9 (id=11009): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 60.632754ms ago: executing program 4 (id=11010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 21.909188ms ago: executing program 9 (id=11012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 0s ago: executing program 3 (id=11013): socket$packet(0x11, 0x3, 0x300) eventfd2(0x8bdf5, 0x80801) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5] team0 (unregistering): Port device team_slave_1 removed [ 256.264715][T10845] team0 (unregistering): Port device team_slave_0 removed [ 256.328356][T24902] pim6reg: entered allmulticast mode [ 256.340926][T24907] pim6reg: left allmulticast mode [ 256.552690][T24937] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 256.607760][T24692] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.622324][T24692] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.645303][T24692] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.689958][T24692] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.725458][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.790734][T24692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.811017][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.824538][T24692] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.843708][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.850773][T10842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.869566][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.876695][T10842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.927838][T24692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.938303][T24692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.953401][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 256.953416][ T29] audit: type=1326 audit(498.953:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 256.995765][ T29] audit: type=1326 audit(498.981:11613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.018967][ T29] audit: type=1326 audit(498.981:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.041963][ T29] audit: type=1326 audit(498.981:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.065088][ T29] audit: type=1326 audit(498.981:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.077642][T24973] SELinux: failed to load policy [ 257.088203][ T29] audit: type=1326 audit(498.981:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.100124][T24979] loop3: detected capacity change from 0 to 8192 [ 257.116082][ T29] audit: type=1326 audit(498.981:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.145373][ T29] audit: type=1326 audit(498.981:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.168346][ T29] audit: type=1326 audit(498.981:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.180172][T24692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.191396][ T29] audit: type=1326 audit(498.981:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.9.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 257.225137][T10845] IPVS: stop unused estimator thread 0... [ 257.231530][T10845] IPVS: stop unused estimator thread 0... [ 257.314369][T24688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.337218][T24688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.363456][T24688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.380921][T24688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.444245][T25019] netlink: 'syz.3.8791': attribute type 3 has an invalid length. [ 257.452037][T25019] netlink: 'syz.3.8791': attribute type 1 has an invalid length. [ 257.459872][T25019] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.8791'. [ 257.466082][T24692] veth0_vlan: entered promiscuous mode [ 257.482294][T24688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.492835][T24692] veth1_vlan: entered promiscuous mode [ 257.499998][T25021] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 257.503535][T24688] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.525018][T24692] veth0_macvtap: entered promiscuous mode [ 257.535616][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.542727][T10796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.554944][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.562128][T19099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.571190][T24692] veth1_macvtap: entered promiscuous mode [ 257.590243][T24692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.602289][T24692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.615396][T10845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.625245][T10845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.633952][T10845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.645705][T10845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.692924][T25030] loop4: detected capacity change from 0 to 512 [ 257.701021][T24688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.724147][T25030] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.739587][T25030] EXT4-fs (loop4): mount failed [ 257.766882][T25040] netlink: 'syz.4.8794': attribute type 298 has an invalid length. [ 257.794433][T24688] veth0_vlan: entered promiscuous mode [ 257.802593][T24688] veth1_vlan: entered promiscuous mode [ 257.813101][T25045] netlink: 444 bytes leftover after parsing attributes in process `syz.4.8796'. [ 257.819855][T24688] veth0_macvtap: entered promiscuous mode [ 257.827021][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8796'. [ 257.830850][T24688] veth1_macvtap: entered promiscuous mode [ 257.847976][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.856422][T24688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.868257][T24688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.885053][T19099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.893861][T19099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.903458][T19099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.913291][T19099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.001784][T25061] syzkaller1: entered promiscuous mode [ 258.007297][T25061] syzkaller1: entered allmulticast mode [ 258.018469][T25063] IPVS: Unknown mcast interface: [ 258.342041][T25103] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 258.487563][T25120] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 258.501319][T25122] loop8: detected capacity change from 0 to 164 [ 258.508946][T25122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 258.518426][T25122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 258.528072][T25122] rock: directory entry would overflow storage [ 258.534334][T25122] rock: sig=0x4f50, size=4, remaining=3 [ 258.539947][T25122] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 258.750545][T25151] __nla_validate_parse: 3 callbacks suppressed [ 258.750562][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8844'. [ 258.773047][T25151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.949128][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.148538][T25184] loop3: detected capacity change from 0 to 512 [ 259.192669][T25184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.201535][T25184] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.222381][T25184] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.8858: Allocating blocks 41-42 which overlap fs metadata [ 259.242973][T25184] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.8858: Allocating blocks 41-42 which overlap fs metadata [ 259.257097][T25184] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8858: Failed to acquire dquot type 1 [ 259.268933][T25184] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 259.283753][T25184] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8858: corrupted inode contents [ 259.296267][T25184] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.8858: mark_inode_dirty error [ 259.312855][T25184] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8858: corrupted inode contents [ 259.325645][T25184] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.8858: mark_inode_dirty error [ 259.339651][T25184] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8858: corrupted inode contents [ 259.355098][T25184] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 259.364240][T25184] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8858: corrupted inode contents [ 259.377515][T25184] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.8858: mark_inode_dirty error [ 259.389417][T25184] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 259.405344][T25184] EXT4-fs (loop3): 1 truncate cleaned up [ 259.411822][T25184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.447704][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.525470][T25218] loop9: detected capacity change from 0 to 1024 [ 259.543795][T25218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.623685][T25218] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.8874: Freeing blocks not in datazone - block = 0, count = 16 [ 259.648760][T25233] loop4: detected capacity change from 0 to 1024 [ 259.656057][T25233] EXT4-fs: inline encryption not supported [ 259.662076][T25233] EXT4-fs: Ignoring removed orlov option [ 259.670667][T25233] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.681899][T10796] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 112: padding at end of block bitmap is not set [ 259.697691][T10796] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 259.710171][T10796] EXT4-fs (loop9): This should not happen!! Data will be lost [ 259.710171][T10796] [ 259.727085][T25233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.736999][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.780331][T25243] loop9: detected capacity change from 0 to 2048 [ 259.789146][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.806974][T25243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.824117][T25245] loop8: detected capacity change from 0 to 8192 [ 259.844187][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.982781][T25277] loop8: detected capacity change from 0 to 1024 [ 260.001540][T25277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 260.033064][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 260.049545][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8904'. [ 260.058500][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8904'. [ 260.067421][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 260.079467][T25295] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 260.087272][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8904'. [ 260.130839][T25300] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 260.142122][T25299] IPVS: stopping master sync thread 25300 ... [ 260.188797][T25304] netlink: 'syz.3.8910': attribute type 3 has an invalid length. [ 260.196691][T25304] netlink: 'syz.3.8910': attribute type 1 has an invalid length. [ 260.204487][T25304] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.8910'. [ 260.435318][T25339] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 260.484988][T25345] sd 0:0:1:0: device reset [ 260.557125][T25356] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 260.592851][T25361] loop3: detected capacity change from 0 to 512 [ 260.600622][T25361] EXT4-fs (loop3): 1 truncate cleaned up [ 260.607433][T25361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.634118][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.663298][T25364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.815980][T25385] Falling back ldisc for ttyS3. [ 261.114095][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8956'. [ 261.156933][T25414] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8959'. [ 261.172758][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.347706][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8970'. [ 261.627078][T25496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8997'. [ 261.665984][T25496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8997'. [ 261.887883][T25537] serio: Serial port ttyS3 [ 262.093295][T25570] loop3: detected capacity change from 0 to 1024 [ 262.102351][T25575] netlink: 'syz.1.9033': attribute type 30 has an invalid length. [ 262.110695][T25570] EXT4-fs: Ignoring removed orlov option [ 262.117332][T25570] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 262.127242][T25578] hsr_slave_0: left promiscuous mode [ 262.133485][T25578] hsr_slave_1: left promiscuous mode [ 262.142722][T25570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.171687][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.285212][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.327166][ T29] kauditd_printk_skb: 976 callbacks suppressed [ 262.327178][ T29] audit: type=1400 audit(247.973:12593): avc: denied { write } for pid=25605 comm="syz.1.9045" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 262.360063][ T29] audit: type=1400 audit(247.973:12594): avc: denied { open } for pid=25605 comm="syz.1.9045" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 262.411018][ T29] audit: type=1400 audit(248.057:12595): avc: denied { nlmsg_read } for pid=25607 comm="syz.4.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.452577][ T29] audit: type=1326 audit(248.095:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.509627][ T29] audit: type=1326 audit(248.095:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.532744][ T29] audit: type=1326 audit(248.095:12598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.555926][ T29] audit: type=1326 audit(248.095:12599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.579165][ T29] audit: type=1326 audit(248.095:12600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.602195][ T29] audit: type=1326 audit(248.095:12601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 262.625264][ T29] audit: type=1326 audit(248.095:12602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.4.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 263.199185][T25643] sch_tbf: burst 22 is lower than device lo mtu (1514) ! [ 263.396445][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.858392][T25725] netlink: 'syz.1.9095': attribute type 7 has an invalid length. [ 263.875496][T25725] netlink: 'syz.1.9095': attribute type 7 has an invalid length. [ 263.922699][T25732] SELinux: policydb version 11375 does not match my version range 15-35 [ 263.931629][T25732] SELinux: failed to load policy [ 264.128450][T25754] __nla_validate_parse: 6 callbacks suppressed [ 264.128506][T25754] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.9106'. [ 264.159860][T25754] netlink: zone id is out of range [ 264.165152][T25754] netlink: zone id is out of range [ 264.174439][T25754] netlink: del zone limit has 8 unknown bytes [ 264.508278][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.909011][T25833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=11853 sclass=netlink_audit_socket pid=25833 comm=+}[@ [ 264.947011][T25837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25837 comm=syz.3.9147 [ 264.986846][T25841] loop3: detected capacity change from 0 to 1024 [ 264.993766][T25841] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.000603][T25841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.009307][T25841] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.027122][T25841] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.9149: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 265.046232][T25841] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9149: couldn't read orphan inode 11 (err -117) [ 265.071490][T25841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.166492][T25851] syzkaller1: entered promiscuous mode [ 265.172139][T25851] syzkaller1: entered allmulticast mode [ 265.217428][T25859] loop4: detected capacity change from 0 to 512 [ 265.237239][T25859] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 265.249326][T25859] EXT4-fs (loop4): orphan cleanup on readonly fs [ 265.256125][T25859] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.9157: Failed to acquire dquot type 1 [ 265.271826][T25859] EXT4-fs (loop4): Remounting filesystem read-only [ 265.278757][T25859] EXT4-fs (loop4): 1 truncate cleaned up [ 265.286063][T25859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.315721][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.330528][T25870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25870 comm=syz.8.9161 [ 265.344525][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.397665][T25874] ip6gre1: entered promiscuous mode [ 265.426319][T25884] netlink: 'syz.9.9168': attribute type 3 has an invalid length. [ 265.495778][T25895] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9173'. [ 265.620050][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.655909][T25911] netlink: 9 bytes leftover after parsing attributes in process `syz.9.9179'. [ 265.678087][T25911] netlink: 9 bytes leftover after parsing attributes in process `syz.9.9179'. [ 265.693057][T25914] 9p: Bad value for 'rfdno' [ 266.007799][T25948] loop9: detected capacity change from 0 to 128 [ 266.068572][T25948] syz.9.9195: attempt to access beyond end of device [ 266.068572][T25948] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 266.082161][T25948] syz.9.9195: attempt to access beyond end of device [ 266.082161][T25948] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 266.095680][T25948] syz.9.9195: attempt to access beyond end of device [ 266.095680][T25948] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 266.109116][T25948] syz.9.9195: attempt to access beyond end of device [ 266.109116][T25948] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 266.122689][T25948] syz.9.9195: attempt to access beyond end of device [ 266.122689][T25948] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 266.136395][T25948] syz.9.9195: attempt to access beyond end of device [ 266.136395][T25948] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 266.149909][T25948] syz.9.9195: attempt to access beyond end of device [ 266.149909][T25948] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 266.163395][T25948] syz.9.9195: attempt to access beyond end of device [ 266.163395][T25948] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 266.177485][T25948] syz.9.9195: attempt to access beyond end of device [ 266.177485][T25948] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 266.191009][T25948] syz.9.9195: attempt to access beyond end of device [ 266.191009][T25948] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 266.366296][T25962] vlan2: entered allmulticast mode [ 266.371550][T25962] geneve1: entered allmulticast mode [ 266.423517][T25971] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 266.452102][T25975] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.460355][T25975] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.731856][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.752616][ T9] Process accounting resumed [ 266.787500][T26016] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9227'. [ 266.810155][T26018] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 266.912583][T26026] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 266.922451][T26025] IPVS: stopping backup sync thread 26026 ... [ 267.083676][T26040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 267.256476][T26063] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9247'. [ 267.339060][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9252'. [ 267.379499][T26075] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.400584][T26075] vhci_hcd vhci_hcd.2: invalid port number 96 [ 267.406880][T26075] vhci_hcd vhci_hcd.2: default hub control req: 030b vfffa i0060 l0 [ 267.445748][T26084] loop8: detected capacity change from 0 to 512 [ 267.465965][T26084] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.498038][T26084] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9257: Allocating blocks 41-42 which overlap fs metadata [ 267.521095][T26084] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9257: Allocating blocks 41-42 which overlap fs metadata [ 267.563869][T26084] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9257: Failed to acquire dquot type 1 [ 267.584791][T26099] pim6reg: entered allmulticast mode [ 267.592829][T26084] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 267.599779][T26099] pim6reg: left allmulticast mode [ 267.607619][T26084] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9257: corrupted inode contents [ 267.624540][T26084] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.9257: mark_inode_dirty error [ 267.636241][T26084] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9257: corrupted inode contents [ 267.648305][T26084] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.9257: mark_inode_dirty error [ 267.659907][T26084] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9257: corrupted inode contents [ 267.672487][T26084] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 267.681879][T26084] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9257: corrupted inode contents [ 267.694343][T26084] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.9257: mark_inode_dirty error [ 267.714855][T26084] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 267.724214][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9266'. [ 267.732397][T26084] EXT4-fs (loop8): 1 truncate cleaned up [ 267.739208][T26084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.752006][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 267.752017][ T29] audit: type=1400 audit(253.052:12990): avc: denied { mount } for pid=26082 comm="syz.8.9257" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 267.790132][T26106] netdevsim netdevsim9: Direct firmware load for ./file1 failed with error -2 [ 267.835369][ T29] audit: type=1326 audit(253.071:12991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff11e37df90 code=0x7ffc0000 [ 267.858488][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.865492][ T29] audit: type=1326 audit(253.071:12992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff11e37e497 code=0x7ffc0000 [ 267.888498][ T29] audit: type=1326 audit(253.071:12993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff11e37df90 code=0x7ffc0000 [ 267.911655][ T29] audit: type=1326 audit(253.071:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 267.934656][ T29] audit: type=1326 audit(253.080:12995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 267.957718][ T29] audit: type=1326 audit(253.108:12996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 267.980813][ T29] audit: type=1326 audit(253.108:12997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 268.004023][ T29] audit: type=1326 audit(253.108:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.8.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 268.004856][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.027032][ T29] audit: type=1400 audit(253.118:12999): avc: denied { tracepoint } for pid=26112 comm="syz.9.9270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.181769][T26121] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 268.337944][T10793] Bluetooth: hci0: Frame reassembly failed (-84) [ 268.386806][T26134] SELinux: failed to load policy [ 268.448230][T26140] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 268.462817][T26140] bond2: (slave lo): Enslaving as an active interface with an up link [ 268.472351][T26140] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 268.955511][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.973062][T26172] netlink: 444 bytes leftover after parsing attributes in process `syz.1.9297'. [ 268.982452][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9297'. [ 269.747268][T26229] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 269.999457][T26261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 270.067327][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.149460][T26281] loop3: detected capacity change from 0 to 164 [ 270.189993][T26281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.218727][T26281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.237396][T26281] rock: directory entry would overflow storage [ 270.250213][T26281] rock: sig=0x4f50, size=4, remaining=3 [ 270.255834][T26281] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 270.455979][T26319] loop3: detected capacity change from 0 to 128 [ 270.472678][T26319] FAT-fs (loop3): Directory bread(block 414) failed [ 270.482537][T26326] netlink: 'syz.8.9372': attribute type 4 has an invalid length. [ 270.489210][T26319] FAT-fs (loop3): Directory bread(block 415) failed [ 270.497431][ T7361] Bluetooth: hci0: command 0x1003 tx timeout [ 270.503453][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 270.510164][T26319] FAT-fs (loop3): Directory bread(block 416) failed [ 270.531667][T26319] FAT-fs (loop3): Directory bread(block 417) failed [ 270.538535][T26319] FAT-fs (loop3): Directory bread(block 418) failed [ 270.545280][T26319] FAT-fs (loop3): Directory bread(block 419) failed [ 270.552283][T26319] FAT-fs (loop3): Directory bread(block 420) failed [ 270.559195][T26319] FAT-fs (loop3): Directory bread(block 421) failed [ 270.568001][T26319] __nla_validate_parse: 2 callbacks suppressed [ 270.568015][T26319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9362'. [ 270.648514][T26338] sd 0:0:1:0: device reset [ 270.676369][T26343] loop4: detected capacity change from 0 to 1024 [ 270.715696][T26343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.866270][T26365] loop3: detected capacity change from 0 to 1024 [ 270.890751][T26343] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.9374: Freeing blocks not in datazone - block = 0, count = 16 [ 270.895893][T26365] EXT4-fs: inline encryption not supported [ 270.909983][T26365] EXT4-fs: Ignoring removed orlov option [ 270.931477][T26365] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 270.951221][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 270.978765][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 270.991129][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 270.991129][ T52] [ 270.991529][T26365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.041472][T26375] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 271.052710][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.087190][T26379] serio: Serial port ptm0 [ 271.094357][T26377] loop9: detected capacity change from 0 to 1024 [ 271.104766][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.141573][T26377] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 271.179496][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.220324][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 271.228852][T26407] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 271.329848][T26424] sd 0:0:1:0: device reset [ 271.490852][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9418'. [ 271.520907][T26449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 271.830575][T26487] loop3: detected capacity change from 0 to 512 [ 271.837561][T26487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.849833][T26487] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.9436: invalid indirect mapped block 4294967295 (level 0) [ 271.866133][T26487] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.9436: invalid indirect mapped block 4294967295 (level 1) [ 271.884958][T26487] EXT4-fs (loop3): 1 orphan inode deleted [ 271.890791][T26487] EXT4-fs (loop3): 1 truncate cleaned up [ 271.897284][T26487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.912656][T26487] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 271.966854][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.047781][T26504] netlink: 'syz.4.9443': attribute type 1 has an invalid length. [ 272.104157][T26511] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.9445' sets config #1 [ 272.109815][T26504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.195631][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9450'. [ 272.246831][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9450'. [ 272.272824][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9450'. [ 272.290985][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.301440][T26532] bridge0: port 3(batadv1) entered blocking state [ 272.307959][T26532] bridge0: port 3(batadv1) entered disabled state [ 272.335061][T26532] batadv1: entered allmulticast mode [ 272.341225][T26532] batadv1: entered promiscuous mode [ 272.346977][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9450'. [ 272.431055][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9462'. [ 272.440084][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9462'. [ 272.674048][T26585] netlink: 'syz.3.9490': attribute type 19 has an invalid length. [ 272.681951][T26585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9490'. [ 272.688018][T26586] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9480'. [ 272.706960][T26585] netlink: 'syz.3.9490': attribute type 19 has an invalid length. [ 272.836215][T10804] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 272.845511][T10804] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 273.008179][T26625] ALSA: seq fatal error: cannot create timer (-22) [ 273.127234][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 273.127250][ T29] audit: type=1400 audit(258.085:13295): avc: denied { read write } for pid=26639 comm="syz.4.9508" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.190781][ T29] audit: type=1400 audit(258.085:13296): avc: denied { open } for pid=26639 comm="syz.4.9508" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.214278][ T29] audit: type=1400 audit(258.085:13297): avc: denied { ioctl } for pid=26639 comm="syz.4.9508" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.372654][ T29] audit: type=1400 audit(258.206:13298): avc: denied { getopt } for pid=26643 comm="syz.1.9509" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.392773][ T29] audit: type=1400 audit(258.263:13299): avc: denied { create } for pid=26648 comm="syz.1.9510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.411952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.418840][ T29] audit: type=1400 audit(258.263:13300): avc: denied { connect } for pid=26648 comm="syz.1.9510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.438307][ T29] audit: type=1400 audit(258.263:13301): avc: denied { setopt } for pid=26648 comm="syz.1.9510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.457580][ T29] audit: type=1326 audit(514.288:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26651 comm="syz.4.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 273.480627][ T29] audit: type=1326 audit(514.288:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26651 comm="syz.4.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 273.503614][ T29] audit: type=1326 audit(514.288:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26651 comm="syz.4.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 274.410081][T26697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=11853 sclass=netlink_audit_socket pid=26697 comm=+}[@ [ 274.514631][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.543839][T26710] loop4: detected capacity change from 0 to 8192 [ 274.597903][T26721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26721 comm=syz.4.9543 [ 274.714191][T26738] 9p: Bad value for 'rfdno' [ 274.852418][T26759] loop4: detected capacity change from 0 to 512 [ 274.867966][T26759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.902639][T26759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.965111][T26770] netlink: 'syz.8.9566': attribute type 12 has an invalid length. [ 274.973074][T26770] netlink: 'syz.8.9566': attribute type 29 has an invalid length. [ 274.980985][T26770] netlink: 'syz.8.9566': attribute type 1 has an invalid length. [ 275.014321][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.032756][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.046967][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.087144][T26782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26782 comm=syz.4.9571 [ 275.564610][T26800] loop4: detected capacity change from 0 to 512 [ 275.573610][T26800] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.585139][T26800] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 275.595436][T26800] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9581: Corrupt directory, running e2fsck is recommended [ 275.614113][T26800] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 275.622649][T26800] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.9581: corrupted in-inode xattr: e_name out of bounds [ 275.636619][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.643887][T26800] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.9581: couldn't read orphan inode 15 (err -117) [ 275.656598][T26800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.674220][T26800] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.685786][T26800] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 275.695926][T26800] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9581: Corrupt directory, running e2fsck is recommended [ 275.711024][T26800] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.722660][T26800] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 275.732752][T26800] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9581: Corrupt directory, running e2fsck is recommended [ 275.748240][T26800] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.755711][T26811] SELinux: failed to load policy [ 275.759805][T26800] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 275.774795][T26800] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9581: Corrupt directory, running e2fsck is recommended [ 275.795135][T26800] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.829262][T26817] smc: net device bond0 applied user defined pnetid SYZ0 [ 275.837874][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.848817][T26817] smc: net device bond0 erased user defined pnetid SYZ0 [ 275.910145][T26831] loop8: detected capacity change from 0 to 512 [ 275.921824][T26831] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9594: invalid indirect mapped block 256 (level 2) [ 275.937068][T26831] EXT4-fs (loop8): 2 truncates cleaned up [ 275.947047][T26831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.976031][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.000246][T26838] serio: Serial port ptm0 [ 276.255552][T26891] loop8: detected capacity change from 0 to 128 [ 276.432140][T26923] netlink: 'syz.3.9635': attribute type 3 has an invalid length. [ 276.538880][T26943] loop8: detected capacity change from 0 to 128 [ 276.627090][T26943] bio_check_eod: 102 callbacks suppressed [ 276.627104][T26943] syz.8.9642: attempt to access beyond end of device [ 276.627104][T26943] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 276.646743][T26943] syz.8.9642: attempt to access beyond end of device [ 276.646743][T26943] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 276.660718][T26943] syz.8.9642: attempt to access beyond end of device [ 276.660718][T26943] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 276.674225][T26943] syz.8.9642: attempt to access beyond end of device [ 276.674225][T26943] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 276.687823][T26943] syz.8.9642: attempt to access beyond end of device [ 276.687823][T26943] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 276.701650][T26943] syz.8.9642: attempt to access beyond end of device [ 276.701650][T26943] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 276.715246][T26943] syz.8.9642: attempt to access beyond end of device [ 276.715246][T26943] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 276.728848][T26943] syz.8.9642: attempt to access beyond end of device [ 276.728848][T26943] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 276.742268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.750068][T26943] syz.8.9642: attempt to access beyond end of device [ 276.750068][T26943] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 276.765287][T26943] syz.8.9642: attempt to access beyond end of device [ 276.765287][T26943] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 276.822847][T26954] __nla_validate_parse: 6 callbacks suppressed [ 276.822889][T26954] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9649'. [ 276.840530][T26956] ip6gre1: entered promiscuous mode [ 276.858123][T26959] loop9: detected capacity change from 0 to 1024 [ 276.858720][T26960] vlan2: entered allmulticast mode [ 276.865017][T26959] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.869680][T26960] geneve1: entered allmulticast mode [ 276.877396][T26959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.890210][T26959] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 276.901597][T26959] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.9651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 276.920691][T26959] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.9651: couldn't read orphan inode 11 (err -117) [ 276.933548][T26959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.180540][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.212765][T26972] loop9: detected capacity change from 0 to 1024 [ 277.221314][T26972] EXT4-fs: Ignoring removed orlov option [ 277.228390][T26972] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 277.257104][T26972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.295676][T26985] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9670'. [ 277.315984][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.354733][T26988] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.377251][T26988] bond2: (slave lo): Enslaving as an active interface with an up link [ 277.388430][T26988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 277.527164][T27015] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 277.545418][T27017] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 277.615553][T27031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9680'. [ 277.669946][T27031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9680'. [ 277.850119][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.893855][T27056] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9689'. [ 277.930074][T27060] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9692'. [ 277.939617][T27060] IPVS: Unknown mcast interface: [ 277.973601][T27063] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 277.983609][T27062] IPVS: stopping backup sync thread 27063 ... [ 278.020125][T27065] loop8: detected capacity change from 0 to 1024 [ 278.031883][T27065] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 278.042790][T27065] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 278.053468][T27065] JBD2: no valid journal superblock found [ 278.059238][T27065] EXT4-fs (loop8): Could not load journal inode [ 278.071392][T27065] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 278.343132][T27109] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 278.411738][T27115] loop8: detected capacity change from 0 to 8192 [ 278.513506][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 278.513523][ T29] audit: type=1400 audit(519.124:13642): avc: denied { write } for pid=27128 comm="syz.9.9723" name="anycast6" dev="proc" ino=4026533633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 278.562493][ T29] audit: type=1400 audit(519.142:13643): avc: denied { audit_write } for pid=27129 comm="syz.3.9735" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 278.583322][ T29] audit: type=1107 audit(519.142:13644): pid=27129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 278.653687][ T29] audit: type=1400 audit(519.255:13645): avc: denied { create } for pid=27142 comm="syz.8.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.675305][ T29] audit: type=1400 audit(519.255:13646): avc: denied { setopt } for pid=27142 comm="syz.8.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.716620][ T29] audit: type=1400 audit(519.311:13647): avc: denied { write } for pid=27142 comm="syz.8.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.753586][ T29] audit: type=1400 audit(519.348:13648): avc: denied { watch_reads } for pid=27147 comm="syz.3.9734" path="/2004/file1" dev="tmpfs" ino=10306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.853082][T27155] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=11853 sclass=netlink_audit_socket pid=27155 comm=+}[@ [ 278.910974][T27156] loop3: detected capacity change from 0 to 8192 [ 278.911768][ T29] audit: type=1400 audit(519.489:13649): avc: denied { create } for pid=27157 comm="syz.9.9740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.940410][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9740'. [ 278.961928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.967675][ T29] audit: type=1400 audit(519.517:13650): avc: denied { connect } for pid=27157 comm="syz.9.9740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.989830][T27163] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.022750][ T29] audit: type=1326 audit(519.591:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27168 comm="syz.9.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 279.047272][T27169] loop9: detected capacity change from 0 to 512 [ 279.055029][T27169] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.091521][T27169] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.9743: Allocating blocks 41-42 which overlap fs metadata [ 279.119149][T27169] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.9743: Allocating blocks 41-42 which overlap fs metadata [ 279.139798][T27169] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.9743: Failed to acquire dquot type 1 [ 279.152243][T27169] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 279.185814][T27169] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9743: corrupted inode contents [ 279.198491][T27169] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.9743: mark_inode_dirty error [ 279.210279][T27169] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9743: corrupted inode contents [ 279.235312][T27169] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.9743: mark_inode_dirty error [ 279.246720][T27174] loop3: detected capacity change from 0 to 2048 [ 279.248066][T27169] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9743: corrupted inode contents [ 279.266158][T27169] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 279.274975][T27169] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9743: corrupted inode contents [ 279.290495][T27169] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.9743: mark_inode_dirty error [ 279.302472][T27174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.304031][T27169] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 279.324910][T27169] EXT4-fs (loop9): 1 truncate cleaned up [ 279.331081][T27169] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.364397][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.398107][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.428851][T27181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.437728][T27181] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.441110][T27184] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.471796][T27181] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9746: Allocating blocks 41-42 which overlap fs metadata [ 279.490246][T27181] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9746: Allocating blocks 41-42 which overlap fs metadata [ 279.518098][T27181] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.9746: Failed to acquire dquot type 1 [ 279.529855][T27181] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 279.554866][T27181] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9746: corrupted inode contents [ 279.579700][T27181] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.9746: mark_inode_dirty error [ 279.593084][T27181] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9746: corrupted inode contents [ 279.608052][T27181] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.9746: mark_inode_dirty error [ 279.619971][T27181] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9746: corrupted inode contents [ 279.635028][T27201] EXT4-fs: inline encryption not supported [ 279.640993][T27201] EXT4-fs: Ignoring removed orlov option [ 279.647467][T27181] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 279.649075][T27201] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 279.666203][T27181] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9746: corrupted inode contents [ 279.666229][T27199] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 279.686298][T27181] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.9746: mark_inode_dirty error [ 279.698850][T27181] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 279.708085][T27199] EXT4-fs (loop3): orphan cleanup on readonly fs [ 279.715527][T27181] EXT4-fs (loop4): 1 truncate cleaned up [ 279.722354][T27201] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.738209][T27199] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9750: corrupted inode contents [ 279.751022][T27181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.773547][T27199] EXT4-fs (loop3): Remounting filesystem read-only [ 279.795960][T27199] EXT4-fs (loop3): 1 truncate cleaned up [ 279.802021][T10801] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 279.812635][T10801] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 279.838762][T10801] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 279.849873][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.859530][T27199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.879041][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9752'. [ 279.887978][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9752'. [ 279.897592][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.902882][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9752'. [ 279.934783][T27212] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 279.946087][T27209] IPVS: stopping master sync thread 27212 ... [ 280.020565][T27226] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.035708][T27226] bond2: (slave lo): Enslaving as an active interface with an up link [ 280.047420][T27226] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 280.074294][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.110904][T27239] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.117870][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.126917][T27239] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.138434][T27239] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.9767: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 280.157726][T27239] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.9767: couldn't read orphan inode 11 (err -117) [ 280.170237][T27239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.186167][T27239] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.9767: Invalid block bitmap block 0 in block_group 0 [ 280.199925][T27239] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.9767: Failed to acquire dquot type 0 [ 280.220266][ T52] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 280.232560][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.895979][T27252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 280.904811][T27252] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.961372][T27258] IPVS: Error connecting to the multicast addr [ 280.961845][T27252] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.9773: Allocating blocks 41-42 which overlap fs metadata [ 281.003154][T27252] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.9773: Allocating blocks 41-42 which overlap fs metadata [ 281.020205][T27252] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.9773: Failed to acquire dquot type 1 [ 281.035320][T27252] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 281.049992][T27252] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9773: corrupted inode contents [ 281.068850][T27252] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.9773: mark_inode_dirty error [ 281.102191][T27252] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9773: corrupted inode contents [ 281.139348][T27252] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.9773: mark_inode_dirty error [ 281.178539][T27252] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9773: corrupted inode contents [ 281.196257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.207622][T27252] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 281.234298][T27252] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.9773: corrupted inode contents [ 281.254871][T27252] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.9773: mark_inode_dirty error [ 281.266947][T27252] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 281.285294][T27252] EXT4-fs (loop9): 1 truncate cleaned up [ 281.298859][T27252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.397804][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.539508][T27289] sch_tbf: burst 22 is lower than device lo mtu (1514) ! [ 281.736844][ T3488] Process accounting resumed [ 281.850973][T27314] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 282.061635][T27324] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 282.095172][T27327] set_capacity_and_notify: 5 callbacks suppressed [ 282.095258][T27327] loop8: detected capacity change from 0 to 512 [ 282.096958][T27324] bond2: (slave lo): Enslaving as an active interface with an up link [ 282.116981][T27327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.118422][T27324] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 282.125699][T27327] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.191742][T27327] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9802: Allocating blocks 41-42 which overlap fs metadata [ 282.207155][T27327] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9802: Allocating blocks 41-42 which overlap fs metadata [ 282.221866][T27327] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9802: Failed to acquire dquot type 1 [ 282.234221][T27327] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 282.249094][T27327] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9802: corrupted inode contents [ 282.262994][T27327] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.9802: mark_inode_dirty error [ 282.275630][T27327] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9802: corrupted inode contents [ 282.288750][T27327] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.9802: mark_inode_dirty error [ 282.300194][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.307739][T27327] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9802: corrupted inode contents [ 282.319922][T27327] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 282.328602][T27327] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.9802: corrupted inode contents [ 282.340809][T27327] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.9802: mark_inode_dirty error [ 282.358046][T27327] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 282.369531][T27327] EXT4-fs (loop8): 1 truncate cleaned up [ 282.376605][T27327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.427392][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.139780][T27366] loop9: detected capacity change from 0 to 512 [ 283.153731][T27366] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 283.163723][T27370] netlink: 'syz.3.9821': attribute type 4 has an invalid length. [ 283.174488][T27366] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.9819: invalid indirect mapped block 4294967295 (level 0) [ 283.189380][T27373] netlink: 'syz.4.9822': attribute type 12 has an invalid length. [ 283.197333][T27373] netlink: 'syz.4.9822': attribute type 29 has an invalid length. [ 283.205142][T27373] __nla_validate_parse: 5 callbacks suppressed [ 283.205156][T27373] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9822'. [ 283.220453][T27373] netlink: 'syz.4.9822': attribute type 1 has an invalid length. [ 283.228224][T27373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9822'. [ 283.238869][T27366] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.9819: invalid indirect mapped block 4294967295 (level 1) [ 283.253476][T27366] EXT4-fs (loop9): 1 orphan inode deleted [ 283.259237][T27366] EXT4-fs (loop9): 1 truncate cleaned up [ 283.265509][T27366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.281326][T27366] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 283.309704][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.383864][T27388] smc: net device bond0 applied user defined pnetid SYZ0 [ 283.398945][T27388] smc: net device bond0 erased user defined pnetid SYZ0 [ 283.409257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 283.464497][T27394] loop8: detected capacity change from 0 to 256 [ 283.550708][T27401] netlink: 'syz.9.9835': attribute type 4 has an invalid length. [ 283.562742][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9845'. [ 283.571707][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9845'. [ 283.617984][T27406] netlink: 'syz.1.9836': attribute type 12 has an invalid length. [ 283.626081][T27406] netlink: 'syz.1.9836': attribute type 29 has an invalid length. [ 283.633966][T27406] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9836'. [ 283.643014][T27406] netlink: 'syz.1.9836': attribute type 1 has an invalid length. [ 283.650920][T27406] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9836'. [ 283.703055][T27411] loop8: detected capacity change from 0 to 512 [ 283.723114][T27414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 283.733544][T27411] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 283.768947][T27418] loop4: detected capacity change from 0 to 512 [ 283.787857][T27411] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.9839: invalid indirect mapped block 4294967295 (level 0) [ 283.817113][T27418] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.9852: invalid indirect mapped block 256 (level 2) [ 283.830868][T27411] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.9839: invalid indirect mapped block 4294967295 (level 1) [ 283.847209][T27418] EXT4-fs (loop4): 2 truncates cleaned up [ 283.860512][T27418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.876902][T27411] EXT4-fs (loop8): 1 orphan inode deleted [ 283.882750][T27411] EXT4-fs (loop8): 1 truncate cleaned up [ 283.893758][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 283.893773][ T29] audit: type=1326 audit(524.128:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbc9f665e7 code=0x7ffc0000 [ 283.922981][ T29] audit: type=1326 audit(524.128:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbc9f0b829 code=0x7ffc0000 [ 283.945881][ T29] audit: type=1326 audit(524.128:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbc9f665e7 code=0x7ffc0000 [ 283.968780][ T29] audit: type=1326 audit(524.128:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbc9f0b829 code=0x7ffc0000 [ 283.991676][ T29] audit: type=1326 audit(524.128:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 284.014678][ T29] audit: type=1326 audit(524.128:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 284.037679][ T29] audit: type=1326 audit(524.137:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc9f6f749 code=0x7ffc0000 [ 284.060658][ T29] audit: type=1326 audit(524.137:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbc9f665e7 code=0x7ffc0000 [ 284.083532][ T29] audit: type=1326 audit(524.137:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbc9f0b829 code=0x7ffc0000 [ 284.104574][T27411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.106610][ T29] audit: type=1326 audit(524.137:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27424 comm="syz.9.9844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbc9f665e7 code=0x7ffc0000 [ 284.163884][T27411] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 284.182904][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.288341][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.332251][T27446] loop4: detected capacity change from 0 to 256 [ 284.345813][T27440] loop9: detected capacity change from 0 to 8192 [ 284.373427][T27452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 284.404016][T27440] loop9: p1 < > p2 < p5 p6 > p3 p4 [ 284.409250][T27440] loop9: partition table partially beyond EOD, truncated [ 284.416813][T27440] loop9: p1 start 67108864 is beyond EOD, truncated [ 284.425166][T27440] loop9: p3 start 100859904 is beyond EOD, truncated [ 284.431886][T27440] loop9: p4 size 393216 extends beyond EOD, truncated [ 284.439143][T27440] loop9: p5 start 100859904 is beyond EOD, truncated [ 284.445883][T27440] loop9: p6 size 393216 extends beyond EOD, truncated [ 284.521059][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.392662][T27471] ALSA: seq fatal error: cannot create timer (-22) [ 285.610687][T27502] sd 0:0:1:0: device reset [ 285.616682][T27504] loop3: detected capacity change from 0 to 512 [ 285.632558][T27504] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9876: invalid indirect mapped block 256 (level 2) [ 285.646731][T27504] EXT4-fs (loop3): 2 truncates cleaned up [ 285.654238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.658777][T27504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.705728][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.717566][T27511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9878'. [ 285.726628][T27511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9878'. [ 285.745955][T27511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9878'. [ 285.829130][T27523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9895'. [ 285.870080][T27525] loop3: detected capacity change from 0 to 512 [ 285.881453][T27525] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 285.896160][T27525] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.908626][T27525] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9883: Failed to acquire dquot type 1 [ 285.923359][T27525] EXT4-fs (loop3): Remounting filesystem read-only [ 285.937005][T27525] EXT4-fs (loop3): 1 truncate cleaned up [ 285.945967][T27525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.987456][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.033645][T27542] loop3: detected capacity change from 0 to 512 [ 286.048175][T27542] EXT4-fs: Ignoring removed bh option [ 286.060851][T27542] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 286.079938][T27542] EXT4-fs (loop3): invalid journal inode [ 286.086721][T27542] EXT4-fs (loop3): can't get journal size [ 286.093408][T27542] EXT4-fs (loop3): 1 truncate cleaned up [ 286.099490][T27542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.141686][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.211264][T27569] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 286.219276][T27569] EXT4-fs (loop8): orphan cleanup on readonly fs [ 286.226279][T27569] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9904: Failed to acquire dquot type 1 [ 286.238630][T27569] EXT4-fs (loop8): Remounting filesystem read-only [ 286.245172][T27569] EXT4-fs (loop8): 1 truncate cleaned up [ 286.251275][T27569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.276323][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.331172][T27576] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 286.342808][T27576] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 286.352084][T27581] netlink: 'syz.3.9909': attribute type 4 has an invalid length. [ 286.352954][T27576] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9906: Corrupt directory, running e2fsck is recommended [ 286.391437][T27576] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 286.403360][T27576] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.9906: corrupted in-inode xattr: e_name out of bounds [ 286.420261][T27581] netlink: 'syz.3.9909': attribute type 4 has an invalid length. [ 286.428473][T27576] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9906: couldn't read orphan inode 15 (err -117) [ 286.454258][T27576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.484464][T27576] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 286.496109][T27576] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 286.506397][T27576] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9906: Corrupt directory, running e2fsck is recommended [ 286.528788][T27576] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 286.540464][T27576] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 286.550592][T27576] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9906: Corrupt directory, running e2fsck is recommended [ 286.565810][T27576] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 286.577460][T27576] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 286.587568][T27576] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9906: Corrupt directory, running e2fsck is recommended [ 286.603353][T27576] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 286.630482][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.744688][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.894295][T27611] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 286.974272][T27615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.002404][T27615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.9923: invalid indirect mapped block 4294967295 (level 0) [ 287.038310][T27615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.9923: invalid indirect mapped block 4294967295 (level 1) [ 287.072088][T27615] EXT4-fs (loop4): 1 orphan inode deleted [ 287.077954][T27615] EXT4-fs (loop4): 1 truncate cleaned up [ 287.084265][T27615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.117006][T27615] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 287.165913][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.454717][T27634] set_capacity_and_notify: 4 callbacks suppressed [ 287.454733][T27634] loop9: detected capacity change from 0 to 512 [ 287.472567][T27634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.508696][T27634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.663404][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.708503][T27670] atomic_op ffff88813235dd28 conn xmit_atomic 0000000000000000 [ 287.803321][T27688] loop9: detected capacity change from 0 to 1024 [ 287.810388][T27688] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 287.821349][T27688] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 287.834721][T27688] JBD2: no valid journal superblock found [ 287.840552][T27688] EXT4-fs (loop9): Could not load journal inode [ 287.856522][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.878212][T27688] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 287.940958][T27707] xt_NFQUEUE: number of total queues is 0 [ 287.998934][T27714] loop9: detected capacity change from 0 to 512 [ 287.999108][T27710] atomic_op ffff88813235c528 conn xmit_atomic 0000000000000000 [ 288.006776][T27714] EXT4-fs: Ignoring removed bh option [ 288.025610][T27714] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 288.036185][T27714] EXT4-fs (loop9): invalid journal inode [ 288.042092][T27714] EXT4-fs (loop9): can't get journal size [ 288.050596][T27714] EXT4-fs (loop9): 1 truncate cleaned up [ 288.056622][T27714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.087568][T27721] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 288.087568][T27721] program syz.4.9983 not setting count and/or reply_len properly [ 288.106323][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.353760][T27750] loop3: detected capacity change from 0 to 512 [ 288.394085][T27752] xt_NFQUEUE: number of total queues is 0 [ 288.400261][T27750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.427445][T27756] bond0: entered promiscuous mode [ 288.432553][T27756] bond_slave_0: entered promiscuous mode [ 288.438302][T27756] bond_slave_1: entered promiscuous mode [ 288.446227][T27756] batadv0: entered promiscuous mode [ 288.452341][T27756] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 288.460069][T27750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.472654][T27756] bond0: left promiscuous mode [ 288.477524][T27756] bond_slave_0: left promiscuous mode [ 288.483160][T27756] bond_slave_1: left promiscuous mode [ 288.493973][T27756] batadv0: left promiscuous mode [ 288.561997][T27762] atomic_op ffff888147fc9128 conn xmit_atomic 0000000000000000 [ 288.575007][T27764] __nla_validate_parse: 6 callbacks suppressed [ 288.575019][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9993'. [ 288.590291][T27764] netlink: 312 bytes leftover after parsing attributes in process `syz.9.9993'. [ 288.599377][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9993'. [ 288.609782][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.634826][T27767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9995'. [ 288.727827][T27781] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.751425][T27781] vhci_hcd vhci_hcd.2: invalid port number 96 [ 288.757616][T27781] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 288.828331][T27796] loop8: detected capacity change from 0 to 512 [ 288.855403][T27796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.886616][T27796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.912711][T27807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10010'. [ 288.968651][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.069061][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.094230][T27829] loop4: detected capacity change from 0 to 512 [ 289.104604][T27829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.119601][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10024'. [ 289.124226][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10025'. [ 289.129346][T27834] netlink: 312 bytes leftover after parsing attributes in process `syz.3.10024'. [ 289.140277][T27829] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.10023: invalid indirect mapped block 4294967295 (level 0) [ 289.146737][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10024'. [ 289.170610][T27829] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.10023: invalid indirect mapped block 4294967295 (level 1) [ 289.185783][T27829] EXT4-fs (loop4): 1 orphan inode deleted [ 289.191551][T27829] EXT4-fs (loop4): 1 truncate cleaned up [ 289.197740][T27829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.223511][T27829] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 289.228808][ T1054] kernel write not supported for file bpf-prog (pid: 1054 comm: kworker/0:2) [ 289.258260][T24692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.321188][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 289.321203][ T29] audit: type=1400 audit(529.226:14481): avc: denied { read write } for pid=24692 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.351204][ T29] audit: type=1400 audit(529.226:14482): avc: denied { open } for pid=24692 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.412148][ T29] audit: type=1400 audit(529.226:14483): avc: denied { ioctl } for pid=24692 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.437469][ T29] audit: type=1400 audit(529.282:14484): avc: denied { write } for pid=27841 comm="syz.3.10028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.456660][ T29] audit: type=1400 audit(529.282:14485): avc: denied { map_create } for pid=27848 comm="syz.4.10030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.475454][ T29] audit: type=1400 audit(529.282:14486): avc: denied { perfmon } for pid=27848 comm="syz.4.10030" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.496223][ T29] audit: type=1400 audit(529.282:14487): avc: denied { map_read map_write } for pid=27848 comm="syz.4.10030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.515803][ T29] audit: type=1400 audit(529.282:14488): avc: denied { prog_load } for pid=27848 comm="syz.4.10030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.534576][ T29] audit: type=1400 audit(529.282:14489): avc: denied { bpf } for pid=27848 comm="syz.4.10030" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.554729][ T29] audit: type=1400 audit(529.292:14490): avc: denied { prog_run } for pid=27848 comm="syz.4.10030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.611112][T27853] rdma_op ffff888147fca580 conn xmit_rdma 0000000000000000 [ 289.647642][T27860] netlink: 9 bytes leftover after parsing attributes in process `syz.8.10035'. [ 289.737505][T27868] loop4: detected capacity change from 0 to 8192 [ 289.789356][T27880] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 289.965663][T27903] program syz.1.10056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.975466][T27903] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.080173][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.545197][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b031800: rx timeout, send abort [ 290.553424][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b031600: rx timeout, send abort [ 290.561702][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b031800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.575995][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b031600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.965391][T27951] netlink: 'syz.3.10080': attribute type 15 has an invalid length. [ 290.980273][T10846] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 290.989275][T27951] netlink: 'syz.3.10080': attribute type 15 has an invalid length. [ 291.003568][T10846] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.023642][T10846] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.036714][T10846] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.148619][T27973] program syz.8.10090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.167249][T27973] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.202676][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.317849][T27982] bond0: entered promiscuous mode [ 291.322984][T27982] bond_slave_0: entered promiscuous mode [ 291.328855][T27982] bond_slave_1: entered promiscuous mode [ 291.336065][T27982] batadv0: entered promiscuous mode [ 291.341902][T27982] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 291.350551][T27982] bond0: left promiscuous mode [ 291.355485][T27982] bond_slave_0: left promiscuous mode [ 291.360963][T27982] bond_slave_1: left promiscuous mode [ 291.367277][T27982] batadv0: left promiscuous mode [ 291.522736][T28001] netlink: 'syz.8.10114': attribute type 12 has an invalid length. [ 291.578245][T28007] netlink: 'syz.1.10107': attribute type 15 has an invalid length. [ 291.592805][T10809] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.602105][T28007] netlink: 'syz.1.10107': attribute type 15 has an invalid length. [ 291.615006][T10809] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.638255][T10809] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.661060][T10809] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 291.770497][T28015] netlink: 'syz.9.10110': attribute type 13 has an invalid length. [ 291.813635][T28015] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.820952][T28015] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.868944][T28015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.880042][T28015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.925019][T10819] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.934382][T10819] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.946695][T10819] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.955779][T10819] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.071000][T28041] netlink: 'syz.9.10121': attribute type 15 has an invalid length. [ 292.082416][T10812] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 292.082472][T28041] netlink: 'syz.9.10121': attribute type 15 has an invalid length. [ 292.093007][T10812] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 292.107917][T10812] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 292.117730][T10812] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 292.154226][T28046] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.183144][T28050] netlink: 'syz.9.10127': attribute type 12 has an invalid length. [ 292.314499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.389451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.890909][T28156] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 293.415626][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.488780][ T3394] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 293.508456][ T3394] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.598083][T28215] SELinux: failed to load policy [ 294.070257][T28302] netlink: 'syz.4.10242': attribute type 10 has an invalid length. [ 294.081672][T28302] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.090552][T28302] bond0: (slave team0): Enslaving as an active interface with an up link [ 294.102631][T28302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 294.110790][T28302] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.173380][T28311] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.336746][T28318] loop9: detected capacity change from 0 to 2048 [ 294.389915][T28318] Alternate GPT is invalid, using primary GPT. [ 294.396299][T28318] loop9: p1 p2 p3 [ 294.400058][T28318] loop9: partition table partially beyond EOD, truncated [ 294.527470][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.542320][T28330] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 294.792977][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 294.792993][ T29] audit: type=1326 audit(534.343:14726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28353 comm="syz.4.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 294.833064][ T29] audit: type=1326 audit(534.343:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28353 comm="syz.4.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 294.856403][ T29] audit: type=1326 audit(534.343:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28353 comm="syz.4.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 294.879562][ T29] audit: type=1326 audit(534.343:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28353 comm="syz.4.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 294.902863][ T29] audit: type=1326 audit(534.352:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28353 comm="syz.4.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedee14f749 code=0x7ffc0000 [ 294.946040][ T29] audit: type=1400 audit(534.492:14731): avc: denied { write } for pid=28359 comm="syz.4.10267" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 294.969086][ T29] audit: type=1400 audit(534.492:14732): avc: denied { open } for pid=28359 comm="syz.4.10267" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 294.997731][T28346] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.004942][T28346] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.028137][ T29] audit: type=1400 audit(534.567:14733): avc: denied { create } for pid=28361 comm="syz.1.10268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.047697][ T29] audit: type=1400 audit(534.595:14734): avc: denied { setopt } for pid=28361 comm="syz.1.10268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.067294][T28364] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 295.098435][T28346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.108423][T28346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.152925][T28368] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 295.152940][T10832] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.164152][T28367] IPVS: stopping master sync thread 28368 ... [ 295.172928][T10832] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.189688][T10832] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.198737][T10832] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.231254][T10832] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.240350][T10832] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.263036][ T29] audit: type=1400 audit(534.782:14735): avc: denied { mounton } for pid=28376 comm="syz.1.10272" path=2F3239392FE91F7189591E9233614B dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 295.263951][T10832] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.296286][T10832] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.339706][ T3579] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 295.347936][ T3579] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.426910][T28395] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 295.495985][T28404] __nla_validate_parse: 22 callbacks suppressed [ 295.496002][T28404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10288'. [ 295.562786][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10293'. [ 295.586050][T28416] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 295.627419][T28427] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 295.639314][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.649455][T28425] ip6gre2: entered promiscuous mode [ 295.654865][T28425] ip6gre2: entered allmulticast mode [ 295.677435][T28425] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.677571][T10832] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.692521][T10832] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.703884][ T6478] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.710890][T28433] nfs4: Bad value for 'source' [ 295.824342][T28410] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.831520][T28410] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.900776][T28410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.914246][T28410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.013272][T10796] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.022559][T10796] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.031810][T28453] bond2: option mode: unable to set because the bond device has slaves [ 296.055136][T10796] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.064422][T10796] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.073467][T28456] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 296.103932][T10796] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.113004][T10796] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.141044][T10796] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.149987][T10796] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.175047][T28464] Falling back ldisc for ptm0. [ 296.285585][T28485] loop8: detected capacity change from 0 to 1024 [ 296.304016][T28485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.332828][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.351628][T28492] loop8: detected capacity change from 0 to 512 [ 296.367687][T28492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.380848][T28492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.398467][ T3799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.445979][T28498] IPVS: Error connecting to the multicast addr [ 296.580109][ T3799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.761794][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.781311][T28510] validate_nla: 3 callbacks suppressed [ 296.781380][T28510] netlink: 'syz.3.10330': attribute type 13 has an invalid length. [ 296.826430][T10839] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.835466][T10839] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.844789][T10839] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.853790][T10839] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.864096][T10839] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.873151][T10839] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.882406][T10839] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 296.891297][T10839] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.041986][T28534] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 297.053188][T28531] IPVS: stopping master sync thread 28534 ... [ 297.083143][T28539] random: crng reseeded on system resumption [ 297.322643][T28563] IPVS: Error connecting to the multicast addr [ 297.487193][T28561] netlink: 'syz.4.10349': attribute type 13 has an invalid length. [ 297.505297][T28594] netlink: 'syz.8.10367': attribute type 29 has an invalid length. [ 297.562275][T28561] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.569543][T28561] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.653271][T28561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.663753][T28561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.678905][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10387'. [ 297.736984][T10839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.747118][T28621] bond1: option mode: unable to set because the bond device has slaves [ 297.756317][T28621] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 297.771819][T10839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.780913][T10839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.796771][T10839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.823109][T28624] loop9: detected capacity change from 0 to 512 [ 297.830761][T28628] loop8: detected capacity change from 0 to 512 [ 297.845456][T28628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.858415][T28624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.871689][T28624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.873645][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.926860][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.941605][T28639] sg_write: data in/out 65516/82 bytes for SCSI command 0x0-- guessing data in; [ 297.941605][T28639] program syz.1.10388 not setting count and/or reply_len properly [ 298.017201][T28654] bond2: option mode: unable to set because the bond device has slaves [ 298.026199][T28654] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 298.058083][T28658] loop9: detected capacity change from 0 to 512 [ 298.066274][T28658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.122008][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.176327][T28675] SELinux: failed to load policy [ 298.339240][T28700] SELinux: failed to load policy [ 298.417612][T28719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.534854][T28732] SELinux: failed to load policy [ 298.694404][ T3394] kernel write not supported for file bpf-prog (pid: 3394 comm: kworker/1:3) [ 298.801650][T28782] hub 9-0:1.0: USB hub found [ 298.809563][T28782] hub 9-0:1.0: 8 ports detected [ 298.902114][T28801] netlink: 68 bytes leftover after parsing attributes in process `syz.8.10460'. [ 298.974789][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.027746][T28805] netlink: 84 bytes leftover after parsing attributes in process `syz.8.10463'. [ 299.036831][T28805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.296212][T28816] loop8: detected capacity change from 0 to 512 [ 299.313442][T28816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.367821][T22893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.385131][T28828] netlink: 3 bytes leftover after parsing attributes in process `syz.8.10470'. [ 299.394370][T28828] 0ªX¹¦À: renamed from caif0 [ 299.400891][T28828] 0ªX¹¦À: entered allmulticast mode [ 299.406158][T28828] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 299.515609][T28852] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10483'. [ 299.601988][T28864] netlink: 'syz.4.10489': attribute type 4 has an invalid length. [ 299.612712][T28864] netlink: 'syz.4.10489': attribute type 4 has an invalid length. [ 299.623634][T28866] netlink: 'syz.9.10490': attribute type 13 has an invalid length. [ 299.688343][T10796] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.713842][T28871] netlink: 'syz.9.10492': attribute type 29 has an invalid length. [ 299.731052][T10796] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.742228][T10796] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.751952][T10796] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.804653][T28882] hub 9-0:1.0: USB hub found [ 299.811919][T28882] hub 9-0:1.0: 8 ports detected [ 299.865408][T10796] Bluetooth: hci0: Frame reassembly failed (-84) [ 299.889795][T28900] netlink: 19 bytes leftover after parsing attributes in process `syz.4.10506'. [ 299.920966][T28902] program syz.8.10507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.011345][T28921] hub 9-0:1.0: USB hub found [ 300.016224][T28921] hub 9-0:1.0: 8 ports detected [ 300.086572][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.249119][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 300.249135][ T29] audit: type=1400 audit(539.459:14888): avc: denied { cpu } for pid=28946 comm="syz.3.10527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 300.329973][T28939] netlink: 'syz.4.10523': attribute type 13 has an invalid length. [ 300.378525][T28956] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10530'. [ 300.387825][T28956] 0ªX¹¦À: renamed from caif0 [ 300.394810][T28956] 0ªX¹¦À: entered allmulticast mode [ 300.400097][T28956] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 300.509314][ T29] audit: type=1400 audit(539.693:14889): avc: denied { name_bind } for pid=28978 comm="syz.4.10539" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 300.555633][ T29] audit: type=1400 audit(539.731:14890): avc: denied { create } for pid=28985 comm="syz.4.10541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 300.576033][ T29] audit: type=1400 audit(539.731:14891): avc: denied { write } for pid=28985 comm="syz.4.10541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 300.704275][ T29] audit: type=1326 audit(539.871:14892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.727459][ T29] audit: type=1326 audit(539.871:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.750494][ T29] audit: type=1326 audit(539.871:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.773624][ T29] audit: type=1326 audit(539.871:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.796673][ T29] audit: type=1326 audit(539.871:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.819728][ T29] audit: type=1326 audit(539.871:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29005 comm="syz.1.10553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193cdcf749 code=0x7ffc0000 [ 300.896394][T29019] program syz.4.10560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.929176][T29022] netlink: 'syz.4.10561': attribute type 29 has an invalid length. [ 301.198393][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 301.556716][T29121] netlink: 'syz.8.10605': attribute type 10 has an invalid length. [ 301.565009][T29121] bridge_slave_1: left allmulticast mode [ 301.570703][T29121] bridge_slave_1: left promiscuous mode [ 301.570800][T29121] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.597072][T29121] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 301.949484][T29184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10634'. [ 301.990001][T29188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29188 comm=syz.1.10636 [ 302.029013][T29173] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10629'. [ 302.053637][T20172] Bluetooth: hci0: command 0x1003 tx timeout [ 302.053743][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.320914][ C0] net_ratelimit: 2 callbacks suppressed [ 302.320930][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 302.617430][T29259] netlink: 'syz.3.10668': attribute type 10 has an invalid length. [ 303.042799][T29291] netlink: 'syz.1.10682': attribute type 10 has an invalid length. [ 303.042980][T29291] bridge_slave_1: left allmulticast mode [ 303.042996][T29291] bridge_slave_1: left promiscuous mode [ 303.043228][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.059172][T29291] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.165544][ T7361] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 303.180957][T29299] loop8: detected capacity change from 0 to 1024 [ 303.181820][T29299] EXT4-fs: Ignoring removed oldalloc option [ 303.201915][T29299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 303.210941][T29299] System zones: 0-1, 3-12 [ 303.211771][T29299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.229915][T29299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.269449][T29310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10689'. [ 303.269472][T29310] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10689'. [ 303.269536][T29310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10689'. [ 303.269577][T29310] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10689'. [ 303.269647][T29310] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10689'. [ 303.350228][T29316] loop8: detected capacity change from 0 to 512 [ 303.350527][T29316] EXT4-fs: dax option not supported [ 303.422215][T29323] netlink: 'syz.4.10695': attribute type 10 has an invalid length. [ 303.422336][T29323] bridge_slave_1: left allmulticast mode [ 303.422353][T29323] bridge_slave_1: left promiscuous mode [ 303.422438][T29323] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.425193][T29323] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.432732][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 303.485442][T29312] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10690'. [ 303.485466][T29312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.498781][T29327] tipc: Started in network mode [ 303.498804][T29327] tipc: Node identity ac14140f, cluster identity 4711 [ 303.498941][T29327] tipc: New replicast peer: 255.255.255.255 [ 303.499195][T29327] tipc: Enabled bearer , priority 10 [ 303.517925][T29329] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 303.643735][T29349] Cannot find add_set index 0 as target [ 303.779134][T29357] netlink: 'syz.9.10709': attribute type 10 has an invalid length. [ 303.796495][T29357] bridge_slave_1: left allmulticast mode [ 303.802169][T29357] bridge_slave_1: left promiscuous mode [ 303.803514][T29361] sd 0:0:1:0: device reset [ 303.808173][T29357] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.851792][T29357] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.927345][T29360] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10713'. [ 303.936515][T29360] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.939556][T29374] loop9: detected capacity change from 0 to 512 [ 303.966277][T29374] journal_path: Non-blockdev passed as './bus' [ 303.972517][T29374] EXT4-fs: error: could not find journal device path [ 304.171117][T29408] sg_write: process 880 (syz.9.10729) changed security contexts after opening file descriptor, this is not allowed. [ 304.394785][T29411] netlink: 84 bytes leftover after parsing attributes in process `syz.9.10730'. [ 304.403902][T29411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.480818][T29444] netlink: 'syz.9.10745': attribute type 10 has an invalid length. [ 304.507215][T29445] loop8: detected capacity change from 0 to 512 [ 304.529925][T29445] journal_path: Lookup failure for './file0' [ 304.536157][T29445] EXT4-fs: error: could not find journal device path [ 304.544557][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 304.565970][ T6478] tipc: Node number set to 2886997007 [ 305.000206][T29526] SELinux: failed to load policy [ 305.229522][T29549] syzkaller0: entered promiscuous mode [ 305.235014][T29549] syzkaller0: entered allmulticast mode [ 305.571790][T29589] rdma_op ffff88812c425180 conn xmit_rdma 0000000000000000 [ 305.645697][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 305.675032][T29611] netlink: 'syz.1.10819': attribute type 2 has an invalid length. [ 305.734034][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 305.734047][ T29] audit: type=1400 audit(544.585:15199): avc: denied { read write } for pid=29607 comm="syz.3.10818" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.734131][ T29] audit: type=1400 audit(544.585:15200): avc: denied { open } for pid=29607 comm="syz.3.10818" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.821740][T29622] SELinux: failed to load policy [ 306.020401][ T29] audit: type=1400 audit(544.857:15201): avc: denied { setcheckreqprot } for pid=29650 comm="syz.1.10838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 306.053867][T29653] SELinux: failed to load policy [ 306.072421][ T29] audit: type=1326 audit(544.894:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 306.095540][ T29] audit: type=1326 audit(544.894:15203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 306.120249][T29658] tipc: Started in network mode [ 306.125254][T29658] tipc: Node identity ac14140f, cluster identity 4711 [ 306.153405][T29658] tipc: New replicast peer: 255.255.255.255 [ 306.159950][T29658] tipc: Enabled bearer , priority 10 [ 306.189955][ T29] audit: type=1326 audit(544.950:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 306.213013][ T29] audit: type=1326 audit(544.950:15205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 306.236213][ T29] audit: type=1326 audit(544.950:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11e37f749 code=0x7ffc0000 [ 306.259388][ T29] audit: type=1326 audit(544.950:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff11e381667 code=0x7ffc0000 [ 306.282587][ T29] audit: type=1326 audit(544.950:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff11e3815dc code=0x7ffc0000 [ 306.443286][T29699] netlink: 'syz.1.10858': attribute type 27 has an invalid length. [ 306.467022][T29699] 0ªX¹¦À: left allmulticast mode [ 306.522783][T29699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.524026][T29699] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.551813][T29699] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 306.599115][ T3579] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 306.599143][ T3579] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 306.599183][ T3579] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 306.607338][ T3579] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 306.757528][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 306.854061][T29726] netlink: 'syz.1.10870': attribute type 39 has an invalid length. [ 306.918862][T29731] random: crng reseeded on system resumption [ 306.951033][T29730] vlan2: entered allmulticast mode [ 306.998708][T29735] sd 0:0:1:0: device reset [ 307.352730][ T802] Bluetooth: hci0: Frame reassembly failed (-84) [ 307.359497][ T3579] tipc: Node number set to 2886997007 [ 307.556566][T29769] __nla_validate_parse: 19 callbacks suppressed [ 307.556579][T29769] netlink: 19 bytes leftover after parsing attributes in process `syz.1.10886'. [ 307.694031][T29783] tipc: New replicast peer: 255.255.255.255 [ 307.700344][T29783] tipc: Enabled bearer , priority 10 [ 307.748294][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10898'. [ 307.869337][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 307.962429][T29810] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 308.055170][T29818] loop9: detected capacity change from 0 to 512 [ 308.067757][T29824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10913'. [ 308.080109][T29818] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 308.080274][T29818] EXT4-fs (loop9): orphan cleanup on readonly fs [ 308.082162][T29818] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.10918: corrupted inode contents [ 308.107010][T29818] EXT4-fs (loop9): Remounting filesystem read-only [ 308.113760][T29818] EXT4-fs (loop9): 1 truncate cleaned up [ 308.114216][T10866] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 308.114237][T10866] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 308.114254][T10866] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 308.151808][T29818] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.182301][T24114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.270555][T29838] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 308.270555][T29838] cct.usage_percpu_sys' [ 308.354148][T29849] tipc: Started in network mode [ 308.359140][T29849] tipc: Node identity ac14140f, cluster identity 4711 [ 308.359366][T29849] tipc: New replicast peer: 255.255.255.255 [ 308.371951][T29849] tipc: Enabled bearer , priority 10 [ 308.594659][T29875] netlink: 'syz.3.10937': attribute type 1 has an invalid length. [ 308.687924][T29878] xt_l2tp: v2 tid > 0xffff: 37482740 [ 308.824804][T29892] syzkaller0: entered promiscuous mode [ 308.830315][T29892] syzkaller0: entered allmulticast mode [ 308.895825][ T6478] tipc: Node number set to 2130706433 [ 308.951204][T29899] vlan2: entered allmulticast mode [ 308.956371][T29899] bridge_slave_0: entered allmulticast mode [ 308.991865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 309.413076][T29905] netlink: 'syz.3.10950': attribute type 39 has an invalid length. [ 309.447107][ T6478] tipc: Node number set to 2886997007 [ 309.565763][T29924] netlink: 'syz.3.10957': attribute type 27 has an invalid length. [ 309.566311][T29924] ip6gre0: left promiscuous mode [ 309.580406][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 309.580588][ T7361] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.598287][T29924] batadv_slave_0: left promiscuous mode [ 309.603059][T29924] geneve2: left promiscuous mode [ 309.611953][T29924] geneve2: left allmulticast mode [ 309.612078][T29924] bond1: left promiscuous mode [ 309.621794][T29924] gre1: left promiscuous mode [ 309.622197][T29924] ip6gre2: left promiscuous mode [ 309.631548][T29924] ip6gre2: left allmulticast mode [ 309.695241][T29924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.704430][T29924] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.706525][T29930] SELinux: ebitmap: high bit 4224 is not equal to the expected value 1152 [ 309.707292][T29930] SELinux: failed to load policy [ 309.717466][T29924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.729452][T29935] netlink: 'syz.8.10964': attribute type 39 has an invalid length. [ 309.791538][T29939] netlink: 'syz.4.10975': attribute type 1 has an invalid length. [ 309.807429][T29941] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 309.807429][T29941] cct.usage_percpu_sys' [ 309.826256][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10967'. [ 309.826486][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10967'. [ 309.905306][T29953] serio: Serial port ttyS3 [ 310.069674][T29969] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 310.092991][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 310.340217][T29990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10992'. [ 310.399502][T29998] netlink: 'syz.4.11004': attribute type 27 has an invalid length. [ 310.510835][T29998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.532877][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11000'. [ 310.549792][T29998] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.555354][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11000'. [ 310.584794][T29998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.623721][T30022] netlink: 'syz.9.11005': attribute type 1 has an invalid length. [ 310.761652][T30027] ================================================================== [ 310.769770][T30027] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 310.776799][T30027] [ 310.779109][T30027] write to 0xffff88811b2d1d08 of 44 bytes by task 30034 on cpu 1: [ 310.786899][T30027] tty_set_termios+0xc0/0x8c0 [ 310.791573][T30027] set_termios+0x35b/0x4d0 [ 310.795985][T30027] tty_mode_ioctl+0x379/0x5c0 [ 310.800667][T30027] n_tty_ioctl_helper+0x91/0x210 [ 310.805600][T30027] n_tty_ioctl+0x101/0x230 [ 310.810017][T30027] tty_ioctl+0x83f/0xb80 [ 310.814250][T30027] __se_sys_ioctl+0xce/0x140 [ 310.818836][T30027] __x64_sys_ioctl+0x43/0x50 [ 310.823425][T30027] x64_sys_call+0x14b0/0x3000 [ 310.828098][T30027] do_syscall_64+0xca/0x2b0 [ 310.832603][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.838484][T30027] [ 310.840790][T30027] read to 0xffff88811b2d1d14 of 4 bytes by task 30027 on cpu 0: [ 310.848401][T30027] n_tty_write+0x9c/0xbf0 [ 310.852723][T30027] file_tty_write+0x378/0x690 [ 310.857384][T30027] tty_write+0x25/0x30 [ 310.861436][T30027] vfs_write+0x52a/0x960 [ 310.865665][T30027] ksys_write+0xda/0x1a0 [ 310.869892][T30027] __x64_sys_write+0x40/0x50 [ 310.874470][T30027] x64_sys_call+0x2847/0x3000 [ 310.879138][T30027] do_syscall_64+0xca/0x2b0 [ 310.883635][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.889518][T30027] [ 310.891827][T30027] value changed: 0x00008a3b -> 0x00000005 [ 310.897525][T30027] [ 310.899832][T30027] Reported by Kernel Concurrency Sanitizer on: [ 310.906005][T30027] CPU: 0 UID: 0 PID: 30027 Comm: syz.8.11008 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.917449][T30027] Tainted: [W]=WARN [ 310.921233][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.931275][T30027] ================================================================== [ 311.204813][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 312.327355][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 313.428464][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 314.540366][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 315.652113][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 316.774657][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 317.875773][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 318.987604][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 320.099409][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available