last executing test programs: 1m50.785277132s ago: executing program 32 (id=538): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x4091, &(0x7f0000000380)={[{@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1m13.777179792s ago: executing program 33 (id=1569): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1m8.985729231s ago: executing program 34 (id=1700): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.985663381s ago: executing program 35 (id=1699): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) capget(0x0, 0x0) 1m8.805906403s ago: executing program 36 (id=1706): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) 1m1.787205824s ago: executing program 37 (id=1866): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 53.563179642s ago: executing program 0 (id=2126): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0xeaf, 0x1f5, 0x3, 0x9, 0x7, 0x0, 0x8, 0x3, 0x8, 0x1, 0x0, 0x10, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x3, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x5, 0x8000000000000001, 0xfe, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x1, 0xc, 0x2, 0x8, 0x5, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x5, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x7fffffff, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 53.510911743s ago: executing program 0 (id=2128): r0 = epoll_create(0x3ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000280)={0x2000000}) 53.454030144s ago: executing program 0 (id=2130): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 52.880960722s ago: executing program 0 (id=2143): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 52.847145672s ago: executing program 0 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 52.474947548s ago: executing program 0 (id=2157): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x4000, 0x0) 52.435052008s ago: executing program 38 (id=2157): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x4000, 0x0) 46.674974541s ago: executing program 9 (id=2308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 46.583392022s ago: executing program 9 (id=2312): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 46.513966273s ago: executing program 9 (id=2314): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) 46.513537163s ago: executing program 9 (id=2316): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) pipe(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 46.302448306s ago: executing program 9 (id=2319): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) 45.918985142s ago: executing program 9 (id=2320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 45.918838162s ago: executing program 39 (id=2320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 30.898101007s ago: executing program 3 (id=2791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 30.847781518s ago: executing program 3 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 29.715864384s ago: executing program 3 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 29.620161495s ago: executing program 3 (id=2838): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) pipe(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 29.033976824s ago: executing program 3 (id=2856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) epoll_create1(0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x3bf4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 28.472732352s ago: executing program 3 (id=2870): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 28.416296122s ago: executing program 40 (id=2870): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 19.777983517s ago: executing program 1 (id=3117): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 19.732300397s ago: executing program 1 (id=3109): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 19.452554101s ago: executing program 1 (id=3112): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x400, 0x81, 0xffffffff, 0x6, 0x8, 0x204002, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) 19.095901046s ago: executing program 1 (id=3118): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) pipe(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 18.694015042s ago: executing program 1 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 18.310384637s ago: executing program 1 (id=3124): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 18.277623478s ago: executing program 41 (id=3124): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 16.455039714s ago: executing program 6 (id=3149): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x800, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16.402947525s ago: executing program 6 (id=3151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 16.365031375s ago: executing program 6 (id=3153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) rename(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20040000}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) 16.346372685s ago: executing program 6 (id=3154): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) pipe(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 16.135437088s ago: executing program 6 (id=3158): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 15.580243706s ago: executing program 6 (id=3166): r0 = io_uring_setup(0x1379, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x9747) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 15.566987987s ago: executing program 42 (id=3166): r0 = io_uring_setup(0x1379, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x9747) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.437754699s ago: executing program 2 (id=3633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000200)='kfree_skb\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe286}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x800) 1.34845518s ago: executing program 2 (id=3636): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 1.293767641s ago: executing program 2 (id=3638): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.258929102s ago: executing program 2 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.071551325s ago: executing program 2 (id=3644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 943.954676ms ago: executing program 4 (id=3648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 871.928408ms ago: executing program 4 (id=3649): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5b0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x8, 0x4000, 0x4000) 686.03764ms ago: executing program 4 (id=3650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f482a, 0x0) 595.430461ms ago: executing program 5 (id=3653): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) syz_emit_ethernet(0xd81, &(0x7f0000001180)={@random="effb616ccbe8", @random="92894c771699", @val={@val={0x88a8, 0x6}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x0, 0xd6b, 0x68, 0x0, 0xf5, 0x11, 0x0, @multicast2, @remote}, {0x4e22, 0x4e21, 0xd57, 0x0, @opaque="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"}}}}}, 0x0) 588.656641ms ago: executing program 4 (id=3654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3}}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) 539.761412ms ago: executing program 5 (id=3655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 460.608903ms ago: executing program 5 (id=3659): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 435.709414ms ago: executing program 5 (id=3661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 418.124004ms ago: executing program 5 (id=3662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 375.884604ms ago: executing program 7 (id=3663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) chmod(&(0x7f0000000400)='./file1\x00', 0x4c) 375.688635ms ago: executing program 5 (id=3664): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 370.810985ms ago: executing program 7 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 322.016955ms ago: executing program 4 (id=3666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x28) 321.844985ms ago: executing program 4 (id=3667): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x142) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 310.383495ms ago: executing program 7 (id=3669): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 276.056316ms ago: executing program 7 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 275.807206ms ago: executing program 8 (id=3671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0xfff1, 0xe}}}, 0x24}}, 0x4000) 252.378516ms ago: executing program 7 (id=3672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 238.252246ms ago: executing program 2 (id=3673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 206.556597ms ago: executing program 8 (id=3674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 161.960858ms ago: executing program 7 (id=3675): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 161.747827ms ago: executing program 8 (id=3676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 153.976618ms ago: executing program 8 (id=3677): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 123.339838ms ago: executing program 8 (id=3678): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="8000b431ebdcb7"], 0x48) 0s ago: executing program 8 (id=3679): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 01] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.206957][T10404] loop3: detected capacity change from 0 to 512 [ 122.228897][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2373'. [ 122.238524][T10404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.260725][T10404] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.281269][T10404] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.478260][ T29] audit: type=1400 audit(1752052080.054:1901): avc: denied { relabelfrom } for pid=10435 comm="syz.3.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.498355][ T29] audit: type=1400 audit(1752052080.054:1902): avc: denied { relabelto } for pid=10435 comm="syz.3.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.521665][ T2523] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x41 [ 122.632466][T10448] loop3: detected capacity change from 0 to 512 [ 122.641863][T10448] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2389: casefold flag without casefold feature [ 122.658050][T10448] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2389: couldn't read orphan inode 15 (err -117) [ 122.671408][T10448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.684125][ T29] audit: type=1326 audit(1752052080.265:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.707999][ T29] audit: type=1326 audit(1752052080.265:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.708575][T10453] loop5: detected capacity change from 0 to 128 [ 122.731624][ T29] audit: type=1326 audit(1752052080.265:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.761310][ T29] audit: type=1326 audit(1752052080.265:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.784834][ T29] audit: type=1326 audit(1752052080.265:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.808460][ T29] audit: type=1326 audit(1752052080.265:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 122.831991][ T29] audit: type=1326 audit(1752052080.265:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde98a8e963 code=0x7ffc0000 [ 122.874479][T10453] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.892248][T10453] ext4 filesystem being mounted at /427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.928983][T10249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.999751][ T4898] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.030258][T10473] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 123.125038][T10485] netlink: 'syz.1.2403': attribute type 13 has an invalid length. [ 123.155111][T10485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.492164][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 123.503027][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 123.665419][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10541 comm=syz.1.2430 [ 123.737322][T10556] pim6reg1: entered promiscuous mode [ 123.742679][T10556] pim6reg1: entered allmulticast mode [ 123.929609][T10573] loop5: detected capacity change from 0 to 8192 [ 123.963477][ T4898] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 123.971410][ T4898] FAT-fs (loop5): Filesystem has been set read-only [ 124.265942][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2455'. [ 124.392023][T10607] loop3: detected capacity change from 0 to 2048 [ 124.430982][T10607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.714191][T10629] loop7: detected capacity change from 0 to 1024 [ 124.730196][T10629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.738663][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2469'. [ 124.747810][T10631] netem: change failed [ 124.752851][T10249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.790485][T10633] random: crng reseeded on system resumption [ 124.797669][T10629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.946940][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.125579][T10668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10668 comm=syz.5.2480 [ 125.158068][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 125.167960][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 125.255342][T10688] xt_hashlimit: max too large, truncated to 1048576 [ 125.427466][T10719] loop7: detected capacity change from 0 to 512 [ 125.434412][T10719] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.443594][T10719] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 125.445800][T10721] lo speed is unknown, defaulting to 1000 [ 125.452941][T10719] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 125.481005][T10719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 125.491930][T10725] loop1: detected capacity change from 0 to 512 [ 125.493377][T10719] System zones: 0-2, 18-18, 34-34 [ 125.504388][T10719] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.2509: iget: bad i_size value: 360287970189639680 [ 125.517626][T10726] loop3: detected capacity change from 0 to 128 [ 125.522582][T10719] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2509: couldn't read orphan inode 15 (err -117) [ 125.525497][T10725] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2510: bg 0: block 5: invalid block bitmap [ 125.538306][T10726] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.548491][T10725] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.561726][T10726] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.569244][T10719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.578659][T10725] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2510: invalid indirect mapped block 3 (level 2) [ 125.605899][T10725] EXT4-fs (loop1): 2 truncates cleaned up [ 125.612096][T10725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.625967][T10719] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.2509: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 125.668465][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.698470][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.778096][T10741] SELinux: ebitmap: truncated map [ 125.784201][T10741] SELinux: failed to load policy [ 125.800080][T10747] netlink: 'syz.7.2519': attribute type 10 has an invalid length. [ 125.802139][T10746] loop1: detected capacity change from 0 to 2048 [ 125.816298][T10747] team0: Port device dummy0 added [ 125.855612][T10753] siw: device registration error -23 [ 125.901767][T10759] __nla_validate_parse: 2 callbacks suppressed [ 125.901781][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 125.917779][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 126.107830][T10778] loop1: detected capacity change from 0 to 2048 [ 126.119701][T10778] EXT4-fs (loop1): failed to initialize system zone (-117) [ 126.128963][T10778] EXT4-fs (loop1): mount failed [ 126.196907][T10784] lo speed is unknown, defaulting to 1000 [ 126.282839][T10797] loop7: detected capacity change from 0 to 512 [ 126.301347][T10797] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.326192][T10807] loop6: detected capacity change from 0 to 1024 [ 126.345298][T10807] EXT4-fs (loop6): shut down requested (0) [ 126.451936][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119997c00: rx timeout, send abort [ 126.460359][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119997c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.530062][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2549'. [ 126.672852][T10838] netlink: 'syz.7.2556': attribute type 1 has an invalid length. [ 126.680700][T10838] netlink: 'syz.7.2556': attribute type 4 has an invalid length. [ 126.688593][T10838] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2556'. [ 126.834556][T10843] netlink: 'syz.7.2556': attribute type 1 has an invalid length. [ 126.842415][T10843] netlink: 'syz.7.2556': attribute type 4 has an invalid length. [ 126.850704][T10843] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2556'. [ 126.992064][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2560'. [ 127.043627][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 127.043656][ T29] audit: type=1400 audit(1752052084.868:1992): avc: denied { append } for pid=10841 comm="syz.6.2558" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.112593][T10854] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 127.115906][T10853] Falling back ldisc for ttyS3. [ 127.169897][T10860] loop7: detected capacity change from 0 to 2048 [ 127.187892][T10864] loop5: detected capacity change from 0 to 512 [ 127.205108][ T29] audit: type=1400 audit(1752052085.037:1993): avc: denied { map } for pid=10865 comm="syz.3.2568" path="socket:[28855]" dev="sockfs" ino=28855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.229407][ T29] audit: type=1400 audit(1752052085.037:1994): avc: denied { read } for pid=10865 comm="syz.3.2568" path="socket:[28855]" dev="sockfs" ino=28855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.257068][T10860] Alternate GPT is invalid, using primary GPT. [ 127.263665][T10860] loop7: p1 p2 p3 [ 127.270098][T10864] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.284816][T10864] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 127.297955][T10864] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm +}[@: mark_inode_dirty error [ 127.309664][T10864] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 127.322594][T10864] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm +}[@: mark_inode_dirty error [ 127.335624][T10864] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm +}[@: mark inode dirty (error -117) [ 127.349630][T10864] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 127.499085][ T29] audit: type=1326 audit(1752052085.342:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.589128][ T29] audit: type=1326 audit(1752052085.342:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.612926][ T29] audit: type=1326 audit(1752052085.363:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.636591][ T29] audit: type=1326 audit(1752052085.374:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.660198][ T29] audit: type=1326 audit(1752052085.374:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.683919][ T29] audit: type=1326 audit(1752052085.374:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.707644][ T29] audit: type=1326 audit(1752052085.374:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.5.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 127.741611][T10893] pim6reg1: entered promiscuous mode [ 127.747053][T10893] pim6reg1: entered allmulticast mode [ 127.920122][T10905] loop1: detected capacity change from 0 to 2048 [ 127.934772][T10905] EXT4-fs (loop1): shut down requested (0) [ 128.154255][T10925] netlink: 'syz.5.2590': attribute type 4 has an invalid length. [ 128.815230][T10972] loop7: detected capacity change from 0 to 8192 [ 128.823234][T10972] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.991362][T10981] netlink: 'syz.7.2616': attribute type 4 has an invalid length. [ 129.005005][T10981] netlink: 'syz.7.2616': attribute type 4 has an invalid length. [ 129.216527][T10996] loop7: detected capacity change from 0 to 2048 [ 129.277756][T11004] loop5: detected capacity change from 0 to 1024 [ 129.285614][T11004] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.296385][T11004] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.308503][T11004] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 129.316987][T11004] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.323849][T11004] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized [ 129.362673][T11013] loop5: detected capacity change from 0 to 512 [ 129.378398][T11013] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.397920][T11013] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.2630: corrupted inode contents [ 129.410674][T11013] EXT4-fs (loop5): Remounting filesystem read-only [ 129.417322][T11013] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 129.585931][T11036] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 129.658348][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2640'. [ 129.891548][T11065] loop3: detected capacity change from 0 to 2048 [ 129.899605][T11065] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.920385][T11065] EXT4-fs mount: 16 callbacks suppressed [ 129.920400][T11065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.948166][T11072] serio: Serial port ptm0 [ 129.954022][T10249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.020284][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2658'. [ 130.110064][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2664'. [ 130.615798][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2681'. [ 130.751729][T11147] loop5: detected capacity change from 0 to 512 [ 130.769309][T11147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.792001][T11147] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.801792][T11147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.924819][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2694'. [ 131.024794][T11177] lo speed is unknown, defaulting to 1000 [ 131.083838][T11185] netlink: 'syz.6.2702': attribute type 4 has an invalid length. [ 131.096351][T11185] netlink: 'syz.6.2702': attribute type 4 has an invalid length. [ 131.236509][T11197] syzkaller1: entered promiscuous mode [ 131.242147][T11197] syzkaller1: entered allmulticast mode [ 131.338394][T11206] loop6: detected capacity change from 0 to 128 [ 131.741941][T11224] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.749381][T11224] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 131.793655][T11230] loop1: detected capacity change from 0 to 512 [ 131.800974][T11230] EXT4-fs: Ignoring removed orlov option [ 131.807168][T11230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.819120][T11230] EXT4-fs (loop1): 1 truncate cleaned up [ 131.825865][T11230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.860083][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.880138][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 131.880157][ T29] audit: type=1400 audit(1752052089.955:2104): avc: denied { read write } for pid=11235 comm="syz.7.2722" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.881912][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 131.886937][ T29] audit: type=1400 audit(1752052089.955:2105): avc: denied { open } for pid=11235 comm="syz.7.2722" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.910068][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 131.948338][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 131.981613][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 131.989277][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 131.996869][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.004300][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.011755][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.019200][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.026643][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.034043][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.041538][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.049209][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.056809][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.064513][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.071945][ T1048] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 132.080532][T11248] pim6reg1: entered promiscuous mode [ 132.081879][ T1048] hid-generic 0006:0000:0000.0005: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 132.085994][T11248] pim6reg1: entered allmulticast mode [ 132.129422][ T29] audit: type=1400 audit(1752052090.228:2106): avc: denied { name_bind } for pid=11252 comm="syz.7.2727" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 132.195642][ T29] audit: type=1400 audit(1752052090.281:2107): avc: denied { read } for pid=11262 comm="syz.5.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.275190][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2735'. [ 132.292465][T11269] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 132.324804][T11271] loop1: detected capacity change from 0 to 512 [ 132.334157][T11271] ext4: Unknown parameter 'obj_type' [ 132.340060][ T29] audit: type=1400 audit(1752052090.439:2108): avc: denied { mounton } for pid=11270 comm="syz.1.2736" path="/89/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.422470][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.430377][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.438012][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.446987][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.454572][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.462026][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.469544][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.477060][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.484715][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.492153][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.499621][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.507035][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.514547][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.522238][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.529711][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.537124][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.544597][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.552104][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.559541][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.566995][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.574640][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.582082][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.589522][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.597066][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.604516][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.612256][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.619912][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.627448][ T1048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.654110][ T1048] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.744196][T11297] bridge: RTM_NEWNEIGH with invalid ether address [ 132.771593][T11293] loop6: detected capacity change from 0 to 512 [ 132.780055][T11293] EXT4-fs (loop6): orphan cleanup on readonly fs [ 132.788572][T11293] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2746: bg 0: block 248: padding at end of block bitmap is not set [ 132.808273][T11293] Quota error (device loop6): write_blk: dquota write failed [ 132.815756][T11293] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 132.825705][T11293] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2746: Failed to acquire dquot type 1 [ 132.857340][T11293] EXT4-fs (loop6): 1 truncate cleaned up [ 132.864656][T11293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.894805][T11293] netlink: 'syz.6.2746': attribute type 10 has an invalid length. [ 132.904549][T11293] geneve1: entered promiscuous mode [ 132.913945][T11293] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 132.951229][T11293] syz.6.2746 (11293) used greatest stack depth: 9304 bytes left [ 132.978482][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.003741][T11308] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2751'. [ 133.059507][T11315] netlink: 'syz.6.2754': attribute type 1 has an invalid length. [ 133.067446][T11315] netlink: 'syz.6.2754': attribute type 2 has an invalid length. [ 133.076759][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2754'. [ 133.109755][ T29] audit: type=1326 audit(1752052091.260:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe546c2e929 code=0x7ffc0000 [ 133.133430][ T29] audit: type=1326 audit(1752052091.260:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe546c2e929 code=0x7ffc0000 [ 133.172733][ T29] audit: type=1326 audit(1752052091.302:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe546c2d290 code=0x7ffc0000 [ 133.254207][T11326] lo speed is unknown, defaulting to 1000 [ 133.348763][T11326] pimreg: entered allmulticast mode [ 133.399431][T11333] loop3: detected capacity change from 0 to 1024 [ 133.425750][T11333] EXT4-fs: Ignoring removed orlov option [ 133.452870][T11333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.501222][T10249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.570405][ T2523] pimreg (unregistering): left allmulticast mode [ 133.714262][T11399] loop7: detected capacity change from 0 to 1024 [ 133.758794][T11399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.796681][T11399] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 133.890940][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.048330][T11419] SELinux: failed to load policy [ 134.371679][T11439] netlink: 'syz.1.2781': attribute type 1 has an invalid length. [ 134.684894][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 134.723943][T11468] SELinux: ebitmap: truncated map [ 134.729953][T11468] SELinux: failed to load policy [ 134.961294][T11487] loop1: detected capacity change from 0 to 256 [ 134.979591][T11487] FAT-fs (loop1): bogus number of FAT sectors [ 134.983351][T11490] loop5: detected capacity change from 0 to 2048 [ 134.985703][T11487] FAT-fs (loop1): Can't find a valid FAT filesystem [ 135.027095][T11490] EXT4-fs (loop5): failed to initialize system zone (-117) [ 135.034841][T11490] EXT4-fs (loop5): mount failed [ 135.091051][T11501] loop1: detected capacity change from 0 to 2048 [ 135.103938][T11501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.169979][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.184382][T11507] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2818'. [ 135.194851][T11507] netlink: 'syz.5.2818': attribute type 9 has an invalid length. [ 135.202668][T11507] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2818'. [ 135.211824][T11507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2818'. [ 135.230327][T11509] vlan2: entered allmulticast mode [ 135.235574][T11509] bond0: entered allmulticast mode [ 135.240731][T11509] bond_slave_0: entered allmulticast mode [ 135.246664][T11509] bond_slave_1: entered allmulticast mode [ 135.410546][T11523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2815'. [ 135.579745][T11543] loop1: detected capacity change from 0 to 512 [ 135.588213][T11543] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2825: bg 0: block 5: invalid block bitmap [ 135.601844][T11543] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 135.610839][T11543] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2825: invalid indirect mapped block 3 (level 2) [ 135.628464][T11543] EXT4-fs (loop1): 2 truncates cleaned up [ 135.635749][T11543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.687033][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2828'. [ 135.692524][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.707904][T11549] netlink: 'syz.7.2828': attribute type 2 has an invalid length. [ 135.752064][T11554] program syz.1.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.809471][T11562] syzkaller1: entered promiscuous mode [ 135.815072][T11562] syzkaller1: entered allmulticast mode [ 135.822479][T11564] serio: Serial port ptm0 [ 135.830258][T11566] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2835'. [ 135.856879][T11569] loop7: detected capacity change from 0 to 512 [ 135.864547][T11569] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 135.910797][T11577] loop3: detected capacity change from 0 to 128 [ 135.911013][T11577] EXT4-fs: Ignoring removed nobh option [ 135.918246][T11569] EXT4-fs (loop7): 1 truncate cleaned up [ 135.941878][T11577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.951758][T11569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.968295][T11582] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.990690][T11577] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.090046][T11577] loop3: detected capacity change from 128 to 0 [ 136.096696][T11407] kworker/u8:62: attempt to access beyond end of device [ 136.096696][T11407] loop3: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 136.130979][T11407] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4915: inode #12: block 36: comm kworker/u8:62: unable to read itable block [ 136.146419][T11594] SELinux: policydb version 51586048 does not match my version range 15-34 [ 136.155344][T11577] syz.3.2838: attempt to access beyond end of device [ 136.155344][T11577] loop3: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 136.169875][T11594] SELinux: failed to load policy [ 136.174863][T11407] kworker/u8:62: attempt to access beyond end of device [ 136.174863][T11407] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 136.188447][T11407] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 136.199929][T11577] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.2838: reading directory lblock 0 [ 136.228536][T11407] EXT4-fs (loop3): I/O error while writing superblock [ 136.233963][T11577] EXT4-fs (loop3): previous I/O error to superblock detected [ 136.243791][ C0] I/O error, dev loop3, sector 70 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 136.255469][T11598] loop6: detected capacity change from 0 to 128 [ 136.263556][T11577] syz.3.2838: attempt to access beyond end of device [ 136.263556][T11577] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 136.276935][T11577] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 136.287520][T11598] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.301788][T11598] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.335482][T11577] EXT4-fs (loop3): I/O error while writing superblock [ 136.344026][T11593] syz.3.2838: attempt to access beyond end of device [ 136.344026][T11593] loop3: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 136.364766][T11593] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.2838: reading directory lblock 0 [ 136.393997][ T8243] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.412049][T11593] syz.3.2838: attempt to access beyond end of device [ 136.412049][T11593] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 136.425557][T11593] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 136.436056][T11593] EXT4-fs (loop3): I/O error while writing superblock [ 136.483913][T10249] syz-executor: attempt to access beyond end of device [ 136.483913][T10249] loop3: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 136.515990][T11615] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 136.518875][T10249] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 136.556710][T10249] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.568821][T10249] syz-executor: attempt to access beyond end of device [ 136.568821][T10249] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 136.582296][T10249] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 136.657215][T10249] EXT4-fs (loop3): I/O error while writing superblock [ 136.668265][T11628] tipc: Started in network mode [ 136.673286][T11628] tipc: Node identity ac14140f, cluster identity 4711 [ 136.680427][T11628] tipc: New replicast peer: 255.255.255.255 [ 136.686660][T11628] tipc: Enabled bearer , priority 10 [ 136.699014][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 136.699029][ T29] audit: type=1326 audit(1752052095.040:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.746505][ T29] audit: type=1326 audit(1752052095.040:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.770069][ T29] audit: type=1326 audit(1752052095.040:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.793699][ T29] audit: type=1326 audit(1752052095.040:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.817380][ T29] audit: type=1326 audit(1752052095.040:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.840973][ T29] audit: type=1326 audit(1752052095.040:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.864873][ T29] audit: type=1326 audit(1752052095.040:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.879856][T11569] syz.7.2836 (11569) used greatest stack depth: 6064 bytes left [ 136.888643][ T29] audit: type=1326 audit(1752052095.040:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 136.923414][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.005081][T11641] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2868'. [ 137.060332][T11392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.104210][T11392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.149315][T11392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.160932][T11650] Falling back ldisc for ttyS3. [ 137.206003][T11392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.261729][T11392] bridge_slave_1: left allmulticast mode [ 137.267436][T11392] bridge_slave_1: left promiscuous mode [ 137.273607][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.282593][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 137.291712][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 137.301235][T11392] bridge_slave_0: left allmulticast mode [ 137.306978][T11392] bridge_slave_0: left promiscuous mode [ 137.312717][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.416030][T11392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.426371][T11392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.449537][T11392] bond0 (unregistering): Released all slaves [ 137.537687][T11392] hsr_slave_0: left promiscuous mode [ 137.546294][T11392] hsr_slave_1: left promiscuous mode [ 137.552187][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.559674][T11392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.585309][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.592920][T11392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.625310][T11392] veth1_macvtap: left promiscuous mode [ 137.633403][T11392] veth0_macvtap: left promiscuous mode [ 137.647841][T11392] veth1_vlan: left promiscuous mode [ 137.657200][T11392] veth0_vlan: left promiscuous mode [ 137.744142][ T3387] tipc: Node number set to 2886997007 [ 137.825138][T11392] team0 (unregistering): Port device team_slave_1 removed [ 137.846756][T11392] team0 (unregistering): Port device team_slave_0 removed [ 137.892967][T11654] lo speed is unknown, defaulting to 1000 [ 137.998970][ T29] audit: type=1326 audit(1752052096.398:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 138.010786][T11654] chnl_net:caif_netlink_parms(): no params data found [ 138.022631][ T29] audit: type=1326 audit(1752052096.398:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 138.057480][T11710] loop1: detected capacity change from 0 to 128 [ 138.088683][T11710] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.128691][T11710] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.167930][T11720] SELinux: failed to load policy [ 138.177993][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.185337][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.194390][T11654] bridge_slave_0: entered allmulticast mode [ 138.201615][T11654] bridge_slave_0: entered promiscuous mode [ 138.218203][T11728] tipc: Started in network mode [ 138.223115][T11728] tipc: Node identity 4, cluster identity 4711 [ 138.229374][T11728] tipc: Node number set to 4 [ 138.234226][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.241343][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.248625][T11654] bridge_slave_1: entered allmulticast mode [ 138.255622][T11654] bridge_slave_1: entered promiscuous mode [ 138.259587][ T9810] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.270598][T11730] loop6: detected capacity change from 0 to 2048 [ 138.294275][T11654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.305293][T11654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.319948][T11730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.336565][T11730] EXT4-fs (loop6): shut down requested (0) [ 138.344411][T11740] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2898'. [ 138.353655][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2898'. [ 138.365693][T11654] team0: Port device team_slave_0 added [ 138.373692][T11654] team0: Port device team_slave_1 added [ 138.390920][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.431630][T11654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.438796][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.464867][T11654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.477681][T11744] SELinux: failed to load policy [ 138.483494][T11654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.490549][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.516663][T11654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.544722][T11746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2904'. [ 138.565874][T11654] hsr_slave_0: entered promiscuous mode [ 138.575195][T11654] hsr_slave_1: entered promiscuous mode [ 138.584057][T11654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.591712][T11654] Cannot create hsr debugfs directory [ 138.691939][T11764] loop6: detected capacity change from 0 to 1024 [ 138.704386][T11764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.707106][T11767] serio: Serial port ptm0 [ 138.721331][T11764] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 138.733971][T11764] EXT4-fs (loop6): This should not happen!! Data will be lost [ 138.733971][T11764] [ 138.743715][T11764] EXT4-fs (loop6): Total free blocks count 0 [ 138.749819][T11764] EXT4-fs (loop6): Free/Dirty block details [ 138.755730][T11764] EXT4-fs (loop6): free_blocks=0 [ 138.760816][T11764] EXT4-fs (loop6): dirty_blocks=0 [ 138.765885][T11764] EXT4-fs (loop6): Block reservation details [ 138.771930][T11764] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 138.789179][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.867179][T11780] serio: Serial port ptm0 [ 138.907309][T11782] loop1: detected capacity change from 0 to 8192 [ 138.915735][T11782] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.951133][T11654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.962014][T11654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.973078][T11654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.983954][T11654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.048635][T11654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.061941][T11654] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.073384][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.080499][T11383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.095155][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.102316][T11383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.160661][T11800] lo speed is unknown, defaulting to 1000 [ 139.306760][T11654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.429173][ T4864] IPVS: starting estimator thread 0... [ 139.436872][T11827] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2929'. [ 139.450894][T11654] veth0_vlan: entered promiscuous mode [ 139.459398][T11654] veth1_vlan: entered promiscuous mode [ 139.482184][T11654] veth0_macvtap: entered promiscuous mode [ 139.490825][T11654] veth1_macvtap: entered promiscuous mode [ 139.506808][T11654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.518535][T11654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.528492][T11829] IPVS: using max 2208 ests per chain, 110400 per kthread [ 139.531525][T11833] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 139.539358][T11654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.552570][T11654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.561494][T11654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.570284][T11654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.692640][T11849] 9p: Unknown Cache mode or invalid value r [ 139.851823][T11866] hub 9-0:1.0: USB hub found [ 139.865465][T11866] hub 9-0:1.0: 8 ports detected [ 140.430937][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 140.643680][T11919] loop2: detected capacity change from 0 to 128 [ 140.673041][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 140.678394][T11919] EXT4-fs: Ignoring removed nobh option [ 140.723639][T11924] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.763565][T11919] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.820619][T11919] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.908745][T11654] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.935365][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2975'. [ 141.020602][T11959] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 141.044913][T11959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.105341][T11966] bond1: (slave veth5): Enslaving as an active interface with a down link [ 141.125378][T11970] netlink: 'syz.1.2991': attribute type 4 has an invalid length. [ 141.175348][T11959] bond1: (slave dummy0): making interface the new active one [ 141.183605][T11973] netlink: 'syz.1.2991': attribute type 4 has an invalid length. [ 141.193246][T11959] dummy0: entered promiscuous mode [ 141.198506][T11959] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 141.482200][T11985] IPv4: Oversized IP packet from 127.202.26.0 [ 141.539508][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 141.539525][ T29] audit: type=1400 audit(1752052100.125:2224): avc: denied { create } for pid=11988 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.546396][T11991] serio: Serial port ptm0 [ 141.566279][ T29] audit: type=1400 audit(1752052100.125:2225): avc: denied { bind } for pid=11988 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.588078][ T29] audit: type=1400 audit(1752052100.125:2226): avc: denied { write } for pid=11988 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.607181][T11992] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.615062][T11992] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 141.647348][T11997] syzkaller1: entered promiscuous mode [ 141.652934][T11997] syzkaller1: entered allmulticast mode [ 141.666047][T11999] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 141.666047][T11999] [ 141.788738][ T29] audit: type=1326 audit(1752052100.388:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.792303][T12011] loop1: detected capacity change from 0 to 128 [ 141.812509][ T29] audit: type=1326 audit(1752052100.388:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.842325][ T29] audit: type=1326 audit(1752052100.388:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.866033][ T29] audit: type=1326 audit(1752052100.388:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.889716][ T29] audit: type=1326 audit(1752052100.388:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.913475][ T29] audit: type=1326 audit(1752052100.388:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.937076][ T29] audit: type=1326 audit(1752052100.388:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dba09e929 code=0x7ffc0000 [ 141.978972][T12007] loop2: detected capacity change from 0 to 8192 [ 142.030116][T12007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 142.039048][T12007] FAT-fs (loop2): Filesystem has been set read-only [ 142.159061][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.166734][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.174220][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.183112][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.190593][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.198227][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.205690][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.213201][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.220791][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.228217][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.235632][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.243133][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.250585][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.258079][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.268696][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.276167][ T4864] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 142.284434][ T4864] hid-generic 0006:0000:0000.0007: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 142.329030][T11989] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 142.366343][T12033] serio: Serial port ptm0 [ 142.497553][T12043] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.506746][T12043] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 142.523576][T12045] syzkaller1: entered promiscuous mode [ 142.529218][T12045] syzkaller1: entered allmulticast mode [ 142.735725][T12054] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.3020'. [ 142.744984][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3020'. [ 142.946840][T12064] veth1_to_bond: entered allmulticast mode [ 142.953084][T12064] veth1_to_bond: entered promiscuous mode [ 142.961055][T12064] veth1_to_bond: left promiscuous mode [ 142.966658][T12064] veth1_to_bond: left allmulticast mode [ 142.992591][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.000156][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.007657][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.015451][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.022893][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.030556][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.038073][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.045582][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.053192][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.060667][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.068106][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.075633][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.083108][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.090561][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.098257][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.105732][ T4864] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 143.115684][ T4864] hid-generic 0006:0000:0000.0008: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 143.176155][T12076] loop5: detected capacity change from 0 to 128 [ 143.183175][T12076] EXT4-fs: Ignoring removed nobh option [ 143.192338][T12076] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.206987][T12076] ext4 filesystem being mounted at /535/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.235253][ T4898] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.372059][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3034'. [ 143.496115][T12091] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 143.513210][T12091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.541497][T12091] bond2: (slave veth5): Enslaving as an active interface with a down link [ 143.561096][T12091] bond2: (slave dummy0): making interface the new active one [ 143.570068][T12091] dummy0: entered promiscuous mode [ 143.575405][T12091] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 143.606629][T12094] xt_hashlimit: max too large, truncated to 1048576 [ 143.691572][T12110] loop7: detected capacity change from 0 to 1764 [ 143.703152][T12110] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 143.722840][T12116] loop2: detected capacity change from 0 to 2048 [ 143.729584][T12113] bond1: (slave dummy0): Releasing active interface [ 143.736560][T12113] dummy0: left promiscuous mode [ 143.749722][T12116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.753143][T12113] bridge_slave_0: left allmulticast mode [ 143.767624][T12113] bridge_slave_0: left promiscuous mode [ 143.773414][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.785691][T12113] bridge_slave_1: left allmulticast mode [ 143.791494][T12113] bridge_slave_1: left promiscuous mode [ 143.797325][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.814302][T12113] bond0: (slave bond_slave_0): Releasing backup interface [ 143.826521][T12113] bond0: (slave bond_slave_1): Releasing backup interface [ 143.861314][T12113] team0: Port device team_slave_0 removed [ 143.873702][T11654] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.875343][T12113] team0: Port device team_slave_1 removed [ 143.892597][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.900653][T12113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.921893][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.929465][T12113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.952004][T12113] bond0: (slave geneve1): Releasing backup interface [ 143.970518][T12113] bond1: (slave veth5): Releasing active interface [ 144.025420][T12147] lo speed is unknown, defaulting to 1000 [ 144.445627][T12197] syzkaller1: entered promiscuous mode [ 144.451330][T12197] syzkaller1: entered allmulticast mode [ 144.528104][T12206] netlink: 'syz.5.3053': attribute type 1 has an invalid length. [ 144.561451][T12206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.591453][T12206] bond0: (slave veth9): Enslaving as an active interface with a down link [ 144.610674][T12206] bridge0: port 3(dummy0) entered disabled state [ 144.617741][T12206] dummy0: left allmulticast mode [ 144.624202][T12206] dummy0: left promiscuous mode [ 144.629193][T12206] bridge0: port 3(dummy0) entered disabled state [ 144.638359][T12206] bond0: (slave dummy0): making interface the new active one [ 144.648256][T12206] dummy0: entered promiscuous mode [ 144.654564][T12206] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.694300][T12212] xt_hashlimit: max too large, truncated to 1048576 [ 144.715910][T12135] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.756073][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3058'. [ 144.800837][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 144.813468][T12228] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3063'. [ 144.831503][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 144.913255][T12244] xt_hashlimit: max too large, truncated to 1048576 [ 144.945333][T12238] loop5: detected capacity change from 0 to 2048 [ 144.982682][T12254] veth1_macvtap: left promiscuous mode [ 144.988499][T12254] macsec0: entered promiscuous mode [ 145.001383][T12238] Alternate GPT is invalid, using primary GPT. [ 145.007890][T12238] loop5: p1 p2 p3 [ 145.024578][T12258] loop7: detected capacity change from 0 to 512 [ 145.035160][T12258] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 145.056123][T12258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 145.065822][T12258] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.3080: corrupted in-inode xattr: e_value size too large [ 145.080197][T12258] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3080: couldn't read orphan inode 15 (err -117) [ 145.093059][T12258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.109222][T12260] tipc: Started in network mode [ 145.114153][T12260] tipc: Node identity 36681d22bc15, cluster identity 4711 [ 145.121702][T12260] tipc: Enabled bearer , priority 0 [ 145.131176][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.160672][T12263] loop1: detected capacity change from 0 to 1764 [ 145.172195][T12271] tipc: Disabling bearer [ 145.184088][T12263] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 145.234923][T12279] loop6: detected capacity change from 0 to 512 [ 145.288710][T12288] xt_hashlimit: max too large, truncated to 1048576 [ 145.304965][T12279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.347978][T12279] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.358586][T12293] loop5: detected capacity change from 0 to 512 [ 145.379919][T12293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.427284][T12299] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 145.427284][T12299] [ 145.448429][T12293] EXT4-fs (loop5): 1 truncate cleaned up [ 145.455410][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.464932][T12293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.508005][T12304] lo speed is unknown, defaulting to 1000 [ 145.583317][T12309] loop2: detected capacity change from 0 to 1764 [ 145.596069][ T4898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.610642][T12309] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 145.663880][T12320] netlink: 'syz.5.3102': attribute type 1 has an invalid length. [ 145.671811][T12320] netlink: 'syz.5.3102': attribute type 2 has an invalid length. [ 145.685849][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 145.758935][T12330] vlan2: entered allmulticast mode [ 145.764249][T12330] bond0: entered allmulticast mode [ 145.769423][T12330] bond_slave_0: entered allmulticast mode [ 145.775309][T12330] bond_slave_1: entered allmulticast mode [ 145.794403][T12334] loop1: detected capacity change from 0 to 512 [ 145.803414][T12328] loop5: detected capacity change from 0 to 512 [ 145.815980][T12328] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3106: iget: bad extended attribute block 1 [ 145.857484][T12334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.886824][T12328] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3106: couldn't read orphan inode 15 (err -117) [ 145.893960][T12334] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.913437][T12328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.927505][T12328] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.003359][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.078741][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.093489][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.101046][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.108515][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.116032][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.123545][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.130959][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.138431][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.145934][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.153477][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.160914][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.168346][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.195571][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.203047][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.210515][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.217991][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.225485][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.233039][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.240493][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.247987][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.255418][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.262818][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.270419][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.277871][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.285352][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.292760][ T3387] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.350567][ T3387] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz1] on syz0 [ 146.431229][T12364] loop1: detected capacity change from 0 to 128 [ 146.455097][T12364] EXT4-fs: Ignoring removed nobh option [ 146.469872][T12364] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.484203][T12364] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.508327][T12367] loop6: detected capacity change from 0 to 1764 [ 146.523748][T12367] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 146.539783][T12364] loop1: detected capacity change from 128 to 0 [ 146.547424][T12364] syz.1.3118: attempt to access beyond end of device [ 146.547424][T12364] loop1: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 146.576166][T12364] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.3118: reading directory lblock 0 [ 146.619207][T12364] syz.1.3118: attempt to access beyond end of device [ 146.619207][T12364] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 146.632563][T12364] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 146.674101][T12364] EXT4-fs (loop1): I/O error while writing superblock [ 146.691625][T12372] syz.1.3118: attempt to access beyond end of device [ 146.691625][T12372] loop1: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 146.710987][T12372] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.3118: reading directory lblock 0 [ 146.733991][T12372] syz.1.3118: attempt to access beyond end of device [ 146.733991][T12372] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 146.747359][T12372] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 146.777470][T12372] EXT4-fs (loop1): I/O error while writing superblock [ 146.807732][ T9810] syz-executor: attempt to access beyond end of device [ 146.807732][ T9810] loop1: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 146.834476][ T9810] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 146.866901][T11392] kworker/u8:53: attempt to access beyond end of device [ 146.866901][T11392] loop1: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 146.891916][T11392] kworker/u8:53: attempt to access beyond end of device [ 146.891916][T11392] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 146.910503][T11392] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4915: inode #12: block 36: comm kworker/u8:53: unable to read itable block [ 146.939418][T11392] kworker/u8:53: attempt to access beyond end of device [ 146.939418][T11392] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 146.953038][T11392] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 146.986691][T11392] EXT4-fs (loop1): I/O error while writing superblock [ 147.006552][ T9810] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.019942][ T9810] syz-executor: attempt to access beyond end of device [ 147.019942][ T9810] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 147.033520][ T9810] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 147.043386][ T9810] EXT4-fs (loop1): I/O error while writing superblock [ 147.224517][T11347] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.256924][T12383] loop7: detected capacity change from 0 to 164 [ 147.274001][T11347] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.284615][T12383] syz.7.3126: attempt to access beyond end of device [ 147.284615][T12383] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.349198][T11347] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.368927][T12392] netlink: 'syz.7.3127': attribute type 1 has an invalid length. [ 147.387745][T11347] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.413780][T12392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.439545][T12392] bond1: (slave veth13): Enslaving as an active interface with a down link [ 147.452954][T12386] lo speed is unknown, defaulting to 1000 [ 147.511711][T12392] team0: Port device dummy0 removed [ 147.524704][T12392] bond1: (slave dummy0): making interface the new active one [ 147.534372][T12392] dummy0: entered promiscuous mode [ 147.542104][T12392] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 147.557604][T12400] veth1_macvtap: left promiscuous mode [ 147.563297][T12400] macsec0: entered promiscuous mode [ 147.587035][T11347] bridge_slave_1: left allmulticast mode [ 147.592922][T11347] bridge_slave_1: left promiscuous mode [ 147.598812][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.636947][T11347] bridge_slave_0: left allmulticast mode [ 147.642960][T11347] bridge_slave_0: left promiscuous mode [ 147.648735][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.684115][T12402] netlink: 664 bytes leftover after parsing attributes in process `syz.7.3129'. [ 147.806320][T11347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.816765][T11347] bond_slave_0: left allmulticast mode [ 147.824355][T11347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.834589][T11347] bond_slave_1: left allmulticast mode [ 147.841409][T11347] bond0 (unregistering): Released all slaves [ 147.850617][T11347] bond1 (unregistering): Released all slaves [ 147.860904][T11347] bond2 (unregistering): (slave veth5): Releasing active interface [ 147.870961][T11347] bond2 (unregistering): (slave dummy0): Releasing active interface [ 147.881946][T11347] bond2 (unregistering): Released all slaves [ 147.899390][T12404] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3130'. [ 147.951269][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3131'. [ 147.960771][T12408] loop7: detected capacity change from 0 to 512 [ 147.972836][T11347] hsr_slave_0: left promiscuous mode [ 147.980797][T12408] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3132: iget: bad extended attribute block 1 [ 147.996103][T11347] hsr_slave_1: left promiscuous mode [ 148.001974][T11347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.009491][T11347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.019407][T12408] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3132: couldn't read orphan inode 15 (err -117) [ 148.032036][T12408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.046433][T11347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.053964][T11347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.061761][T12408] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.082418][T11347] veth1_macvtap: left promiscuous mode [ 148.088037][T11347] veth0_macvtap: left promiscuous mode [ 148.093820][T11347] veth1_vlan: left promiscuous mode [ 148.100990][T11347] veth0_vlan: left promiscuous mode [ 148.197280][T11347] team0 (unregistering): Port device team_slave_1 removed [ 148.215173][T11347] team0 (unregistering): Port device team_slave_0 removed [ 148.268335][T12386] chnl_net:caif_netlink_parms(): no params data found [ 148.280529][T12420] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 148.353705][T12429] loop6: detected capacity change from 0 to 1024 [ 148.361248][T12429] EXT4-fs: Ignoring removed orlov option [ 148.376539][T12429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.389218][T12427] bond0: (slave dummy0): Releasing active interface [ 148.400410][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 148.400429][ T29] audit: type=1400 audit(1752052107.345:2304): avc: denied { map } for pid=12428 comm="syz.6.3140" path="/307/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.409648][T12427] dummy0: left promiscuous mode [ 148.429579][ T29] audit: type=1400 audit(1752052107.345:2305): avc: denied { execute } for pid=12428 comm="syz.6.3140" path="/307/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.480203][T12427] bridge_slave_0: left allmulticast mode [ 148.485951][T12427] bridge_slave_0: left promiscuous mode [ 148.491722][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.509654][T12427] bridge_slave_1: left allmulticast mode [ 148.515385][T12427] bridge_slave_1: left promiscuous mode [ 148.521213][T12427] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.530920][T12427] : (slave bond_slave_0): Releasing backup interface [ 148.538240][T12427] bond_slave_0: left promiscuous mode [ 148.543699][T12427] bond_slave_0: left allmulticast mode [ 148.552154][T12427] : (slave bond_slave_1): Releasing backup interface [ 148.559370][T12427] bond_slave_1: left promiscuous mode [ 148.564920][T12427] bond_slave_1: left allmulticast mode [ 148.575211][T12427] team0: Port device team_slave_0 removed [ 148.584252][T12427] team0: Port device team_slave_1 removed [ 148.592971][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.609171][T12427] bond0: (slave veth9): Releasing active interface [ 148.618725][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.626051][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.627777][T12441] loop6: detected capacity change from 0 to 1024 [ 148.635515][T12386] bridge_slave_0: entered allmulticast mode [ 148.647708][T12386] bridge_slave_0: entered promiscuous mode [ 148.658493][T12441] EXT4-fs: Ignoring removed orlov option [ 148.665572][T12434] : renamed from pim6reg1 [ 148.672531][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.679794][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.682538][T12441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.688519][T12386] bridge_slave_1: entered allmulticast mode [ 148.707740][T12386] bridge_slave_1: entered promiscuous mode [ 148.729735][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.746104][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.781723][T12386] team0: Port device team_slave_0 added [ 148.796429][T12386] team0: Port device team_slave_1 added [ 148.802223][ T8243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.840934][T12386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.847952][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.874101][T12386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.888126][T12386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.895123][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.921157][T12386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.965405][T11347] IPVS: stop unused estimator thread 0... [ 148.976475][T12386] hsr_slave_0: entered promiscuous mode [ 148.982787][T12386] hsr_slave_1: entered promiscuous mode [ 148.990599][T12386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.003161][T12386] Cannot create hsr debugfs directory [ 149.015697][T12456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3148'. [ 149.028101][T12457] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 149.176650][T12473] loop6: detected capacity change from 0 to 128 [ 149.183406][T12473] EXT4-fs: Ignoring removed nobh option [ 149.191183][T12473] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.203779][T12473] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.257441][T12473] loop6: detected capacity change from 128 to 0 [ 149.264712][T12473] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.3154: reading directory lblock 0 [ 149.276583][T12473] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.284898][T12473] EXT4-fs (loop6): I/O error while writing superblock [ 149.292742][T12473] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.3154: reading directory lblock 0 [ 149.307060][T12473] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.315913][T12473] EXT4-fs (loop6): I/O error while writing superblock [ 149.365735][ T8243] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 149.392297][T12477] bridge_slave_0: left allmulticast mode [ 149.398029][T12477] bridge_slave_0: left promiscuous mode [ 149.403818][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.411906][T11347] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4915: inode #12: block 36: comm kworker/u8:11: unable to read itable block [ 149.426429][T11347] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.435053][T11347] EXT4-fs (loop6): I/O error while writing superblock [ 149.436465][T12477] bridge_slave_1: left allmulticast mode [ 149.443748][ T8243] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.447755][T12477] bridge_slave_1: left promiscuous mode [ 149.462713][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.472204][ T8243] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.481228][ T8243] EXT4-fs (loop6): I/O error while writing superblock [ 149.482080][T12477] bond0: (slave bond_slave_0): Releasing backup interface [ 149.501500][T12484] loop5: detected capacity change from 0 to 512 [ 149.509356][T12477] bond_slave_0: left allmulticast mode [ 149.517938][T12477] bond0: (slave bond_slave_1): Releasing backup interface [ 149.518676][T12484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3159: bg 0: block 5: invalid block bitmap [ 149.539450][T12477] bond_slave_1: left allmulticast mode [ 149.546425][T12484] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 149.555485][T12484] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3159: invalid indirect mapped block 3 (level 2) [ 149.570166][T12484] EXT4-fs (loop5): 2 truncates cleaned up [ 149.570803][T12477] team0: Port device team_slave_0 removed [ 149.576606][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.605925][T12477] team0: Port device team_slave_1 removed [ 149.615588][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.623092][T12477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.643847][ T4898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.663429][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.671052][T12477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.701622][T12386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.738694][T12386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.749252][T12386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.758543][T12386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.778923][T12496] loop2: detected capacity change from 0 to 512 [ 149.788134][T12499] loop5: detected capacity change from 0 to 256 [ 149.794799][T12495] loop7: detected capacity change from 0 to 512 [ 149.801423][T12496] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3163: iget: bad extended attribute block 1 [ 149.802463][T12499] FAT-fs (loop5): bogus number of FAT sectors [ 149.820314][T12499] FAT-fs (loop5): Can't find a valid FAT filesystem [ 149.831055][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.837542][T12496] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3163: couldn't read orphan inode 15 (err -117) [ 149.855425][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.858351][T12495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.865202][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.881735][T11383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.886941][T12496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.901900][T12386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.912440][T12386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.924574][T12495] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.944360][T12496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.976866][T11347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.010562][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.017734][T11383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.057665][T11347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.097127][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.121937][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.143644][T11347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.239700][T11347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.312033][T12546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.321401][T12509] lo speed is unknown, defaulting to 1000 [ 150.618581][T11347] bond0 (unregistering): Released all slaves [ 150.634737][T11347] bond1 (unregistering): Released all slaves [ 150.653141][T12386] veth0_vlan: entered promiscuous mode [ 150.662034][T12559] syzkaller1: entered promiscuous mode [ 150.667738][T12559] syzkaller1: entered allmulticast mode [ 150.688523][T11347] IPVS: stopping backup sync thread 12420 ... [ 150.717249][T11347] hsr_slave_0: left promiscuous mode [ 150.723516][T11347] hsr_slave_1: left promiscuous mode [ 150.731859][T11347] veth0_macvtap: left promiscuous mode [ 150.737511][T11347] veth1_vlan: left promiscuous mode [ 150.743588][T11347] veth0_vlan: left promiscuous mode [ 150.838034][T12386] veth1_vlan: entered promiscuous mode [ 150.857384][T12509] chnl_net:caif_netlink_parms(): no params data found [ 150.867434][T12386] veth0_macvtap: entered promiscuous mode [ 150.881202][T12386] veth1_macvtap: entered promiscuous mode [ 150.910866][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.918114][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.925373][T12509] bridge_slave_0: entered allmulticast mode [ 150.931827][T12509] bridge_slave_0: entered promiscuous mode [ 150.939291][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.946522][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.953817][T12509] bridge_slave_1: entered allmulticast mode [ 150.960768][T12509] bridge_slave_1: entered promiscuous mode [ 150.974012][T12386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.990352][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.000924][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.016067][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.030850][T12386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.039712][T12386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.048553][T12386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.057377][T12386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.068145][T12509] team0: Port device team_slave_0 added [ 151.074918][T12509] team0: Port device team_slave_1 added [ 151.092072][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.099128][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.125186][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.136566][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.143785][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.169854][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.211191][T12509] hsr_slave_0: entered promiscuous mode [ 151.217369][T12509] hsr_slave_1: entered promiscuous mode [ 151.250213][T12574] loop2: detected capacity change from 0 to 1024 [ 151.283230][T12574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.357233][T12582] loop4: detected capacity change from 0 to 512 [ 151.382956][T12574] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3188: Allocating blocks 449-513 which overlap fs metadata [ 151.403076][T12582] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3178: iget: bad extended attribute block 1 [ 151.418021][T12582] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3178: couldn't read orphan inode 15 (err -117) [ 151.431883][T12573] EXT4-fs (loop2): pa ffff8881075fe770: logic 48, phys. 177, len 21 [ 151.434653][T12582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.439980][T12573] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 151.456008][T12582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.491674][T11654] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.559898][T12597] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 151.678393][T12509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 151.709598][T12509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 151.727469][T12615] netlink: 'syz.2.3197': attribute type 4 has an invalid length. [ 151.764524][T12509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 151.774796][T12509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 151.788570][T12622] SELinux: ebitmap: truncated map [ 151.795280][T12622] SELinux: failed to load policy [ 151.842972][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.856644][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.866499][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.873622][T11375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.888513][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.895659][T11347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.964468][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.070512][T12509] veth0_vlan: entered promiscuous mode [ 152.078433][T12509] veth1_vlan: entered promiscuous mode [ 152.093729][T12509] veth0_macvtap: entered promiscuous mode [ 152.101154][T12509] veth1_macvtap: entered promiscuous mode [ 152.112277][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.124004][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.133508][T12509] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.142349][T12509] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.151119][T12509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.159955][T12509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.207710][ T29] audit: type=1400 audit(1752052111.354:2306): avc: denied { ioctl } for pid=12654 comm="syz.4.3212" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.304366][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3167'. [ 152.313383][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3167'. [ 152.351738][ T29] audit: type=1400 audit(1752052111.501:2307): avc: denied { audit_write } for pid=12662 comm="syz.5.3215" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 152.370374][T12668] loop8: detected capacity change from 0 to 512 [ 152.373290][ T29] audit: type=1107 audit(1752052111.501:2308): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 152.444153][T11407] bridge_slave_1: left allmulticast mode [ 152.445343][T12668] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.3199: iget: bad extended attribute block 1 [ 152.449879][T11407] bridge_slave_1: left promiscuous mode [ 152.468295][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.491301][T12668] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3199: couldn't read orphan inode 15 (err -117) [ 152.504209][T11407] bridge_slave_0: left allmulticast mode [ 152.509971][T11407] bridge_slave_0: left promiscuous mode [ 152.515778][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.616530][T11407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.627075][T11407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.644942][T12675] loop4: detected capacity change from 0 to 8192 [ 152.652364][T11407] bond0 (unregistering): (slave team0): Releasing backup interface [ 152.662326][T11407] bond0 (unregistering): Released all slaves [ 152.671120][T12675] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.689824][T11407] bond1 (unregistering): Released all slaves [ 152.758689][T11407] tipc: Left network mode [ 152.788377][T11407] hsr_slave_0: left promiscuous mode [ 152.800277][T12699] SELinux: syz.7.3221 (12699) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 152.830755][T11407] hsr_slave_1: left promiscuous mode [ 152.842229][T11407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.850456][T11407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.924609][T11407] team0 (unregistering): Port device team_slave_1 removed [ 152.936826][T11407] team0 (unregistering): Port device team_slave_0 removed [ 153.035693][ T29] audit: type=1326 audit(1752052112.227:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.079128][T12710] Falling back ldisc for ttyS3. [ 153.084392][ T29] audit: type=1326 audit(1752052112.259:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.108133][ T29] audit: type=1326 audit(1752052112.259:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.131914][ T29] audit: type=1326 audit(1752052112.259:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.155681][ T29] audit: type=1326 audit(1752052112.259:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.179315][ T29] audit: type=1326 audit(1752052112.259:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.202988][ T29] audit: type=1326 audit(1752052112.259:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.226606][ T29] audit: type=1326 audit(1752052112.259:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.250238][ T29] audit: type=1326 audit(1752052112.259:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a8e929 code=0x7ffc0000 [ 153.395622][T12736] loop5: detected capacity change from 0 to 8192 [ 153.416250][T12736] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.618950][ T29] audit: type=1400 audit(1752052112.837:2318): avc: denied { read } for pid=12760 comm="syz.4.3247" path="socket:[36969]" dev="sockfs" ino=36969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.679981][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3252'. [ 153.697451][ T29] audit: type=1326 audit(1752052112.911:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.4.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d425ee929 code=0x7ffc0000 [ 153.721199][ T29] audit: type=1326 audit(1752052112.911:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.4.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d425ee929 code=0x7ffc0000 [ 153.744893][ T29] audit: type=1326 audit(1752052112.911:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.4.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d425ee929 code=0x7ffc0000 [ 153.768796][ T29] audit: type=1326 audit(1752052112.911:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.4.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d425ee929 code=0x7ffc0000 [ 153.907249][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3257'. [ 153.964964][T12793] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 153.979685][T12789] tipc: Started in network mode [ 153.984686][T12789] tipc: Node identity ac14140f, cluster identity 4711 [ 154.000644][T12789] tipc: New replicast peer: 255.255.255.83 [ 154.006661][T12789] tipc: Enabled bearer , priority 10 [ 154.024730][T12791] loop2: detected capacity change from 0 to 8192 [ 154.033190][T12791] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.072356][T12801] loop5: detected capacity change from 0 to 164 [ 154.088957][T12801] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.107204][T12801] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.140585][T12801] Symlink component flag not implemented [ 154.146418][T12801] Symlink component flag not implemented [ 154.170623][T12801] Symlink component flag not implemented (7) [ 154.176764][T12801] Symlink component flag not implemented (116) [ 154.241305][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3267'. [ 154.250381][T12810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3267'. [ 154.259508][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3267'. [ 154.270619][T12810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3267'. [ 154.279777][T12810] netlink: 'syz.7.3267': attribute type 6 has an invalid length. [ 154.445846][T12828] netlink: zone id is out of range [ 154.451069][T12828] netlink: zone id is out of range [ 154.456275][T12828] netlink: zone id is out of range [ 154.461401][T12828] netlink: zone id is out of range [ 154.466577][T12828] netlink: zone id is out of range [ 154.541735][T12840] loop2: detected capacity change from 0 to 512 [ 154.568518][T12840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 154.576645][T12840] System zones: 1-12 [ 154.587059][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3286'. [ 154.609359][T12840] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3281: error while reading EA inode 32 err=-116 [ 154.645135][T12840] EXT4-fs (loop2): Remounting filesystem read-only [ 154.651760][T12840] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 154.662088][T12840] EXT4-fs (loop2): 1 orphan inode deleted [ 154.726248][T12861] netlink: zone id is out of range [ 154.731638][T12861] netlink: zone id is out of range [ 154.736793][T12861] netlink: zone id is out of range [ 154.742267][T12861] netlink: zone id is out of range [ 154.747498][T12861] netlink: zone id is out of range [ 154.756401][T12867] loop8: detected capacity change from 0 to 164 [ 154.780073][T12867] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.781175][T12870] loop4: detected capacity change from 0 to 1024 [ 154.803659][T12867] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.826334][T12867] Symlink component flag not implemented [ 154.832098][T12867] Symlink component flag not implemented [ 154.839284][T12879] sg_write: data in/out 969/154 bytes for SCSI command 0x0-- guessing data in; [ 154.839284][T12879] program syz.2.3299 not setting count and/or reply_len properly [ 154.846048][T12867] Symlink component flag not implemented (7) [ 154.862458][T12867] Symlink component flag not implemented (116) [ 154.917379][T12870] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3297: Allocating blocks 449-513 which overlap fs metadata [ 154.945254][T12889] loop8: detected capacity change from 0 to 512 [ 154.948898][T12869] EXT4-fs (loop4): pa ffff8881075fe700: logic 48, phys. 177, len 21 [ 154.959751][T12869] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 154.971990][T12889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 154.972017][T12889] System zones: 1-12 [ 154.972626][T12889] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.3303: error while reading EA inode 32 err=-116 [ 154.972785][T12889] EXT4-fs (loop8): Remounting filesystem read-only [ 154.972803][T12889] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 154.972832][T12889] EXT4-fs (loop8): 1 orphan inode deleted [ 155.084508][ T3394] tipc: Node number set to 2886997007 [ 155.303470][T12916] loop5: detected capacity change from 0 to 2048 [ 155.392391][T12916] EXT4-fs (loop5): shut down requested (0) [ 155.426539][T12916] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 155.450951][T12916] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 155.482176][T12916] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 155.576234][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3324'. [ 155.880669][T12973] loop5: detected capacity change from 0 to 1024 [ 155.933868][T12973] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3340: Allocating blocks 449-513 which overlap fs metadata [ 155.990570][T12972] EXT4-fs (loop5): pa ffff8881075fe770: logic 48, phys. 177, len 21 [ 155.998843][T12972] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 156.063140][T12987] xt_hashlimit: max too large, truncated to 1048576 [ 156.124525][T12995] serio: Serial port ptm0 [ 156.141383][T12998] loop4: detected capacity change from 0 to 2048 [ 156.164706][T12998] EXT4-fs (loop4): shut down requested (0) [ 156.172267][T12998] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 156.183875][T12998] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 156.193394][T12998] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 156.264621][T13007] syzkaller0: entered promiscuous mode [ 156.270177][T13007] syzkaller0: entered allmulticast mode [ 156.359274][T13022] loop4: detected capacity change from 0 to 128 [ 156.414292][T13022] bio_check_eod: 10 callbacks suppressed [ 156.414313][T13022] syz.4.3362: attempt to access beyond end of device [ 156.414313][T13022] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 156.565189][T13034] sg_write: data in/out 969/154 bytes for SCSI command 0x0-- guessing data in; [ 156.565189][T13034] program syz.8.3368 not setting count and/or reply_len properly [ 156.621002][T13039] serio: Serial port ptm0 [ 156.930359][T13051] loop8: detected capacity change from 0 to 8192 [ 156.938673][T13051] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.220540][T13070] loop8: detected capacity change from 0 to 1024 [ 157.245912][T13074] loop5: detected capacity change from 0 to 512 [ 157.258064][T13074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 157.260912][T13070] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.3383: Allocating blocks 449-513 which overlap fs metadata [ 157.266316][T13074] System zones: 1-12 [ 157.284763][T13074] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3385: error while reading EA inode 32 err=-116 [ 157.296082][T13069] EXT4-fs (loop8): pa ffff8881075fe700: logic 48, phys. 177, len 21 [ 157.297445][T13074] EXT4-fs (loop5): Remounting filesystem read-only [ 157.305095][T13069] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, [ 157.311618][T13074] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 157.312753][T13074] EXT4-fs (loop5): 1 orphan inode deleted [ 157.320067][T13069] free 0, pa_free 4 [ 157.356997][T13078] loop2: detected capacity change from 0 to 2048 [ 157.392549][T13086] loop8: detected capacity change from 0 to 1024 [ 157.403587][T13086] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 157.419402][T13086] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.430495][T13086] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.450381][T13086] JBD2: no valid journal superblock found [ 157.456169][T13086] EXT4-fs (loop8): Could not load journal inode [ 157.554509][T13100] geneve2: entered promiscuous mode [ 157.679492][T13112] serio: Serial port ptm0 [ 157.740819][T13121] -1: renamed from syzkaller0 [ 157.758073][T13125] program syz.2.3408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.924702][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 157.924722][ T29] audit: type=1400 audit(1752052117.362:2637): avc: denied { create } for pid=13149 comm="syz.5.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.968542][ T29] audit: type=1400 audit(1752052117.393:2638): avc: denied { ioctl } for pid=13149 comm="syz.5.3419" path="socket:[37963]" dev="sockfs" ino=37963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.007638][ T29] audit: type=1400 audit(1752052117.456:2639): avc: denied { name_connect } for pid=13153 comm="syz.5.3422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 158.021365][T13158] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 158.035905][T13158] netlink: 'syz.2.3423': attribute type 4 has an invalid length. [ 158.038076][T13155] pim6reg1: entered promiscuous mode [ 158.043685][T13158] __nla_validate_parse: 2 callbacks suppressed [ 158.043701][T13158] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3423'. [ 158.049009][T13155] pim6reg1: entered allmulticast mode [ 158.061181][T13158] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 158.077604][T13158] netlink: 'syz.2.3423': attribute type 4 has an invalid length. [ 158.085433][T13158] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3423'. [ 158.131286][ T29] audit: type=1400 audit(1752052117.582:2640): avc: denied { create } for pid=13163 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.152343][ T29] audit: type=1400 audit(1752052117.582:2641): avc: denied { setopt } for pid=13163 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.172428][ T29] audit: type=1400 audit(1752052117.582:2642): avc: denied { bind } for pid=13163 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.192027][ T29] audit: type=1400 audit(1752052117.582:2643): avc: denied { listen } for pid=13163 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.211804][ T29] audit: type=1400 audit(1752052117.582:2644): avc: denied { connect } for pid=13163 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.231611][ T29] audit: type=1400 audit(1752052117.582:2645): avc: denied { write } for pid=13163 comm="syz.4.3425" path="socket:[37991]" dev="sockfs" ino=37991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.285643][ T29] audit: type=1400 audit(1752052117.751:2646): avc: denied { bind } for pid=13170 comm="syz.4.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.325374][T11383] dummy0: left promiscuous mode [ 158.618966][T13182] loop7: detected capacity change from 0 to 1024 [ 158.641089][T13182] EXT4-fs mount: 20 callbacks suppressed [ 158.641123][T13182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.703562][T13182] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3431: Allocating blocks 449-513 which overlap fs metadata [ 158.743842][T13179] EXT4-fs (loop7): pa ffff8881075fe7e0: logic 48, phys. 177, len 21 [ 158.752080][T13179] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 158.786199][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.825250][T13194] SELinux: failed to load policy [ 159.007937][T13216] loop2: detected capacity change from 0 to 1024 [ 159.016420][T13216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.029262][T13216] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.040257][T13216] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.059019][T13216] JBD2: no valid journal superblock found [ 159.064807][T13216] EXT4-fs (loop2): Could not load journal inode [ 159.220878][T13237] veth1_macvtap: left promiscuous mode [ 159.230099][T13237] macsec0: entered allmulticast mode [ 159.239739][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3455'. [ 159.252869][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3455'. [ 159.301091][T13249] sctp: [Deprecated]: syz.8.3461 (pid 13249) Use of int in max_burst socket option deprecated. [ 159.301091][T13249] Use struct sctp_assoc_value instead [ 159.328775][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.336272][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.350345][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.357960][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.365466][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.372962][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.380416][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.387825][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.395325][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.402786][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.410285][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.417814][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.440629][T13258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.450723][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 159.463508][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.471016][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.478510][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.485938][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.493485][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.501009][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.508469][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.515933][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.523462][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.531064][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.538563][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.546082][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.553544][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.561073][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.568500][ T3415] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 159.578743][T13254] bond1 (unregistering): Released all slaves [ 159.599174][ T3415] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.777859][T13283] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 159.777882][T13283] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 160.278781][T13320] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3490'. [ 160.336114][T13325] syzkaller0: entered allmulticast mode [ 160.354151][T13325] syzkaller0 (unregistering): left allmulticast mode [ 160.419680][T13327] vlan0: entered allmulticast mode [ 160.419701][T13327] dummy0: entered allmulticast mode [ 160.599238][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.611192][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.631419][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3502'. [ 160.728711][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'. [ 160.757220][T13355] xt_hashlimit: size too large, truncated to 1048576 [ 160.805769][T13356] hsr0: entered promiscuous mode [ 160.810809][T13356] hsr0: entered allmulticast mode [ 160.815967][T13356] hsr_slave_0: entered allmulticast mode [ 160.821697][T13356] hsr_slave_1: entered allmulticast mode [ 161.022919][T13371] loop8: detected capacity change from 0 to 2048 [ 161.035514][T13371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.048219][T13371] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.074770][T12509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.271949][T13399] loop5: detected capacity change from 0 to 1024 [ 161.278980][T13399] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.289962][T13399] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.300560][T13399] JBD2: no valid journal superblock found [ 161.306337][T13399] EXT4-fs (loop5): Could not load journal inode [ 161.762886][T13444] loop8: detected capacity change from 0 to 256 [ 161.766866][T13446] loop4: detected capacity change from 0 to 512 [ 161.770985][T13444] FAT-fs (loop8): bogus number of FAT sectors [ 161.781738][T13444] FAT-fs (loop8): Can't find a valid FAT filesystem [ 161.845732][T13446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.858764][T13446] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.907210][T12386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.989241][T13463] SELinux: failed to load policy [ 162.250100][T13487] unsupported nla_type 65024 [ 162.329433][T13500] vlan2: entered allmulticast mode [ 162.334704][T13500] dummy0: entered allmulticast mode [ 162.392854][T13512] loop5: detected capacity change from 0 to 512 [ 162.400241][T13512] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.407652][T13512] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 162.418281][T13512] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 162.426428][T13512] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.433531][T13512] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3574: Invalid block bitmap block 0 in block_group 0 [ 162.447426][T13512] EXT4-fs (loop5): Remounting filesystem read-only [ 162.454496][T13512] EXT4-fs (loop5): 1 orphan inode deleted [ 162.460760][T13512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.484636][ T4898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.547674][T13521] loop5: detected capacity change from 0 to 256 [ 162.554941][T13521] FAT-fs (loop5): bogus number of FAT sectors [ 162.561100][T13521] FAT-fs (loop5): Can't find a valid FAT filesystem [ 162.682200][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 162.682218][ T29] audit: type=1400 audit(1752052122.379:2716): avc: denied { cpu } for pid=13528 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.896749][T13552] loop5: detected capacity change from 0 to 764 [ 162.903781][T13552] iso9660: Unknown parameter '017777777777777777777770xffffffffffffffff|\Fx@ OȎ' [ 162.950779][T13556] loop8: detected capacity change from 0 to 1024 [ 162.965204][T13556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.977857][T13556] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.992603][T13556] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: comm syz.8.3593: lblock 0 mapped to illegal pblock 0 (length 5) [ 163.009569][T13556] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 163.021713][T13564] vlan2: entered allmulticast mode [ 163.021976][T13556] EXT4-fs (loop8): This should not happen!! Data will be lost [ 163.021976][T13556] [ 163.027397][T13564] dummy0: entered allmulticast mode [ 163.048112][T13563] pim6reg1: entered promiscuous mode [ 163.053534][T13563] pim6reg1: entered allmulticast mode [ 163.060106][T12509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.148096][ T29] audit: type=1400 audit(1752052122.863:2717): avc: denied { mac_admin } for pid=13576 comm="syz.2.3603" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.337471][T13606] loop5: detected capacity change from 0 to 512 [ 163.349588][T13607] __nla_validate_parse: 5 callbacks suppressed [ 163.349602][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 163.359091][T13606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.365958][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 163.380161][T13606] ext4 filesystem being mounted at /663/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.413817][ T29] audit: type=1400 audit(1752052123.147:2718): avc: denied { getopt } for pid=13605 comm="syz.5.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.433759][ T29] audit: type=1400 audit(1752052123.147:2719): avc: denied { ioctl } for pid=13605 comm="syz.5.3611" path="/663/bus/file1" dev="loop5" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.469720][ T4898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.511445][T13617] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3625'. [ 163.607349][ T29] audit: type=1326 audit(1752052123.347:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.631122][ T29] audit: type=1326 audit(1752052123.347:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.664393][ T29] audit: type=1326 audit(1752052123.347:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.688231][ T29] audit: type=1326 audit(1752052123.347:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.712727][ T29] audit: type=1326 audit(1752052123.347:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.736287][ T29] audit: type=1326 audit(1752052123.347:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.7.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0f0e929 code=0x7ffc0000 [ 163.789418][T13636] loop7: detected capacity change from 0 to 512 [ 163.821424][T13636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.834560][T13636] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.863057][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.092440][T13661] loop4: detected capacity change from 0 to 512 [ 164.099617][T13662] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3631'. [ 164.108837][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3631'. [ 164.123958][T13661] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.3632: bad orphan inode 15 [ 164.176523][T13661] ext4_test_bit(bit=14, block=5) = 0 [ 164.182399][T13661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.258352][T12386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.273494][T13670] loop8: detected capacity change from 0 to 512 [ 164.293844][T13670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.308402][T13670] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.320086][T13670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.470131][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3645'. [ 164.486738][T13691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3645'. [ 164.656582][T13704] loop4: detected capacity change from 0 to 1024 [ 164.666845][T13704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.680200][T13704] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.695875][T13704] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 164.712610][T13704] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 164.725044][T13704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.725044][T13704] [ 164.734702][T13704] EXT4-fs (loop4): Total free blocks count 0 [ 164.740706][T13704] EXT4-fs (loop4): Free/Dirty block details [ 164.746727][T13704] EXT4-fs (loop4): free_blocks=4293918720 [ 164.752485][T13704] EXT4-fs (loop4): dirty_blocks=80 [ 164.757609][T13704] EXT4-fs (loop4): Block reservation details [ 164.763643][T13704] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 164.787034][T12386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.813407][T13709] loop4: detected capacity change from 0 to 512 [ 164.821924][T13709] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.829236][T13709] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 164.844826][T13709] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 164.858961][T13709] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.866570][T13709] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3650: Invalid block bitmap block 0 in block_group 0 [ 164.880496][T13709] EXT4-fs (loop4): Remounting filesystem read-only [ 164.887327][T13709] EXT4-fs (loop4): 1 orphan inode deleted [ 164.894129][T13709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.926466][T12386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.943382][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3652'. [ 164.953218][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3652'. [ 164.968541][T13720] vlan2: entered allmulticast mode [ 164.975118][T13720] dummy0: entered allmulticast mode [ 165.209149][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3668'. [ 165.271287][T13756] sd 0:0:1:0: device reset [ 165.577492][T13740] ================================================================== [ 165.585669][T13740] BUG: KCSAN: data-race in do_select / pollwake [ 165.591981][T13740] [ 165.594338][T13740] write to 0xffffc900041e79e0 of 4 bytes by interrupt on cpu 1: [ 165.602031][T13740] pollwake+0xb6/0x100 [ 165.606147][T13740] __wake_up+0x66/0xb0 [ 165.610276][T13740] bpf_ringbuf_notify+0x22/0x30 [ 165.615168][T13740] irq_work_run+0xe2/0x2d0 [ 165.619619][T13740] __sysvec_irq_work+0x22/0x170 [ 165.624684][T13740] sysvec_irq_work+0x66/0x80 [ 165.629327][T13740] asm_sysvec_irq_work+0x1a/0x20 [ 165.634324][T13740] _raw_spin_unlock_irq+0x2f/0x50 [ 165.639403][T13740] get_signal+0xc22/0xf70 [ 165.643794][T13740] arch_do_signal_or_restart+0x96/0x480 [ 165.649379][T13740] exit_to_user_mode_loop+0x7a/0x100 [ 165.654719][T13740] do_syscall_64+0x1d6/0x200 [ 165.659362][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.665377][T13740] [ 165.667730][T13740] read to 0xffffc900041e79e0 of 4 bytes by task 13740 on cpu 0: [ 165.675390][T13740] do_select+0xe48/0xf50 [ 165.679686][T13740] core_sys_select+0x3d7/0x6e0 [ 165.684504][T13740] __se_sys_pselect6+0x216/0x280 [ 165.689516][T13740] __x64_sys_pselect6+0x78/0x90 [ 165.694430][T13740] x64_sys_call+0x1caa/0x2fb0 [ 165.699155][T13740] do_syscall_64+0xd2/0x200 [ 165.703721][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.709660][T13740] [ 165.712016][T13740] value changed: 0x00000000 -> 0x00000001 [ 165.717748][T13740] [ 165.720089][T13740] Reported by Kernel Concurrency Sanitizer on: [ 165.726283][T13740] CPU: 0 UID: 0 PID: 13740 Comm: syz.5.3664 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 165.738918][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.749097][T13740] ==================================================================