last executing test programs: 2m21.463781021s ago: executing program 32 (id=88): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 2m20.662373972s ago: executing program 33 (id=111): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]) 2m18.899960006s ago: executing program 34 (id=142): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) sendmmsg$sock(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="1f55f2c7c22b372f", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m11.807211048s ago: executing program 6 (id=258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f00000000c0), 0x4) sendmsg$unix(r1, &(0x7f0000000480)={0xfffffffffffffffd, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(r2, 0x0) 2m11.712666988s ago: executing program 6 (id=262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 2m11.650842868s ago: executing program 6 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0) 2m11.531798088s ago: executing program 6 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2eeb6789d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) fallocate(r0, 0x20, 0x0, 0x7000000) 2m11.230454039s ago: executing program 6 (id=284): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m10.736978309s ago: executing program 6 (id=302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2m10.736864399s ago: executing program 35 (id=302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m52.227792421s ago: executing program 2 (id=737): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000280), 0x10) 1m52.132974171s ago: executing program 2 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff38f3811f", 0x5}], 0x1, 0xe7b, 0x0, 0x0) 1m51.826029831s ago: executing program 2 (id=727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r3, 0xc4fc9e906872338b, 0x0, 0x4000, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) 1m51.625771932s ago: executing program 2 (id=733): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2eeb6789d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) fallocate(r0, 0x20, 0x0, 0x7000000) 1m51.384181952s ago: executing program 2 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) 1m50.696578893s ago: executing program 2 (id=754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r2, 0x20, 0x0, 0x8000) 1m50.696446324s ago: executing program 36 (id=754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r2, 0x20, 0x0, 0x8000) 15.671501723s ago: executing program 8 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0x2800, 0x0, 0x0) 15.608510484s ago: executing program 8 (id=3589): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 14.710708965s ago: executing program 8 (id=3619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 14.641809396s ago: executing program 8 (id=3632): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") io_uring_setup(0x5643, &(0x7f00000003c0)={0x0, 0xfaf2, 0x8, 0x0, 0xaf}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 14.342649776s ago: executing program 8 (id=3626): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/255, 0xff}, {0x0}], 0x2}, 0x40}], 0x1, 0x40000006, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 14.202283186s ago: executing program 8 (id=3629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = io_uring_setup(0x46ea, &(0x7f00000007c0)={0x0, 0xdd03, 0x800, 0x1, 0x1bb}) timer_create(0x3, &(0x7f0000000380)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000340)="7c89d954f978213c316333cd26c880fea1b4ec79a9709453fe14", &(0x7f00000004c0)="6d08afd8cfcf06a9ecbf6a943fe9c4578130f7112b4acd3e2444f98304941b91cff78e3a5da78e793b83471cc7986f53700b1b7c94e15921aa8f6d567943a2d3962866a9636f33c5e6e98986623e6b8c42762007d789ddd185b0431467d000177df277ea5653c93740fe37b1b716661027623e7d542d0e5d3feb240f66dc3eb2b9ed1caea4913456899fcb45b4c14c669ca6f27158761691b2a0b5bfea860f8d53f25b0d9baebc7fd9b248f27c1734a32c7b9b8e9035ed26eed17dd7f48acc23f0"}}, &(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 14.162299376s ago: executing program 37 (id=3629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = io_uring_setup(0x46ea, &(0x7f00000007c0)={0x0, 0xdd03, 0x800, 0x1, 0x1bb}) timer_create(0x3, &(0x7f0000000380)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000340)="7c89d954f978213c316333cd26c880fea1b4ec79a9709453fe14", &(0x7f00000004c0)="6d08afd8cfcf06a9ecbf6a943fe9c4578130f7112b4acd3e2444f98304941b91cff78e3a5da78e793b83471cc7986f53700b1b7c94e15921aa8f6d567943a2d3962866a9636f33c5e6e98986623e6b8c42762007d789ddd185b0431467d000177df277ea5653c93740fe37b1b716661027623e7d542d0e5d3feb240f66dc3eb2b9ed1caea4913456899fcb45b4c14c669ca6f27158761691b2a0b5bfea860f8d53f25b0d9baebc7fd9b248f27c1734a32c7b9b8e9035ed26eed17dd7f48acc23f0"}}, &(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 13.334145377s ago: executing program 7 (id=3652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 13.286447088s ago: executing program 7 (id=3653): pselect6(0x0, 0x0, 0x0, &(0x7f0000000380)={0x3fb, 0x0, 0xfffffffffffff000, 0x0, 0x2, 0xffffffffffffffff}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 11.97907469s ago: executing program 7 (id=3674): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000045) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 11.71940899s ago: executing program 7 (id=3676): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") io_uring_setup(0x5643, &(0x7f00000003c0)={0x0, 0xfaf2, 0x8, 0x0, 0xaf}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 11.701065511s ago: executing program 5 (id=3677): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 11.468874161s ago: executing program 5 (id=3682): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x4000810) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 11.187993641s ago: executing program 7 (id=3685): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r0, r2, 0x0) 10.576700222s ago: executing program 5 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in=@empty, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x200000000}, {}, 0x1, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 10.376485963s ago: executing program 5 (id=3695): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") io_uring_setup(0x5643, &(0x7f00000003c0)={0x0, 0xfaf2, 0x8, 0x0, 0xaf}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 10.261834553s ago: executing program 7 (id=3697): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r1, 0x1, 0x1, 0x6, @remote}, 0x14) close(r0) 10.123004733s ago: executing program 38 (id=3697): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r1, 0x1, 0x1, 0x6, @remote}, 0x14) close(r0) 9.377245235s ago: executing program 5 (id=3705): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [{@seclabel}], 0x2c}, 0x84, 0x452, &(0x7f0000001900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x81) getdents(r2, 0x0, 0x0) 8.755983216s ago: executing program 5 (id=3711): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 8.664539436s ago: executing program 39 (id=3711): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 1.505220317s ago: executing program 1 (id=3851): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0xc) shutdown(r0, 0x0) 1.504765628s ago: executing program 3 (id=3852): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 1.461159458s ago: executing program 3 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000040), &(0x7f0000000c40)}, 0x20) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file1\x00', 0xc44, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x266, &(0x7f0000000480)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) 1.441792848s ago: executing program 1 (id=3854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 1.372723628s ago: executing program 1 (id=3856): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.276877698s ago: executing program 1 (id=3859): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x2}, 0x0) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 1.269456348s ago: executing program 4 (id=3860): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1.182888048s ago: executing program 4 (id=3862): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1.180553068s ago: executing program 9 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xe}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.108659688s ago: executing program 9 (id=3864): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff2d1}]}, 0x2c}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.089181928s ago: executing program 3 (id=3865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000d0429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c0002800600270005"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.030545298s ago: executing program 9 (id=3866): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xffffffffffffff9d, 0x2, [@TCA_ROUTE4_ACT={0x0, 0x6, [@m_skbedit={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x5a8}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0xfff}]}, {0x0, 0x6, "59300f325c450310cdfbc0caef7795426d7ed64bd4fcd7d823ba73cbdcdcd2558c20e565f317eab8ef71be0aef8442f3377da1193cf90df758da4cf147fc487f2da6bdcf138b488d8f6772c054ba8a6b728de2f02eaa69da904807e4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 940.664508ms ago: executing program 3 (id=3867): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400c, &(0x7f0000000840), 0x3, 0x44d, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./bus\x00', 0xd0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) 917.638638ms ago: executing program 4 (id=3868): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000193700000000000000060018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) 880.110239ms ago: executing program 9 (id=3869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) 839.546229ms ago: executing program 4 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 817.636009ms ago: executing program 9 (id=3871): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000004c0)={0x6, 0xb, 0x3fc, 0xfc030000}) 774.452589ms ago: executing program 4 (id=3872): socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) select(0x40, &(0x7f00000000c0)={0xb, 0x100000001, 0x8, 0x100000000, 0x0, 0x2c1, 0x9, 0x2}, 0x0, &(0x7f0000000280)={0x3ff, 0x5, 0xfffffffffffffffb, 0x6, 0x45c, 0x4, 0x5, 0x8000000000000001}, &(0x7f0000000300)={0x0, 0xea60}) 659.320869ms ago: executing program 0 (id=3874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xfffffffe}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 659.002489ms ago: executing program 4 (id=3875): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') clock_settime(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 634.439489ms ago: executing program 1 (id=3876): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20000000) 604.091689ms ago: executing program 3 (id=3877): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 597.797349ms ago: executing program 0 (id=3878): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000980)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 567.711759ms ago: executing program 1 (id=3879): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 537.844329ms ago: executing program 0 (id=3880): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f5, 0x6021, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8) 411.08967ms ago: executing program 3 (id=3881): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 336.572699ms ago: executing program 0 (id=3882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 145.32937ms ago: executing program 0 (id=3883): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000740), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 118.98881ms ago: executing program 9 (id=3884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) 0s ago: executing program 0 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) kernel console output (not intermixed with test programs): multicast mode [ 118.473418][T10503] vlan2: left allmulticast mode [ 118.548294][T10507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.725613][T10516] loop9: detected capacity change from 0 to 512 [ 118.760533][T10516] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.769672][T10516] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 118.830485][T10516] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 118.867292][T10516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 118.897986][T10516] System zones: 0-2, 18-18, 34-34 [ 118.919357][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2483'. [ 118.940693][T10516] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.956142][T10516] EXT4-fs (loop9): 1 truncate cleaned up [ 118.962254][T10516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.987618][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.218874][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 119.218892][ T29] audit: type=1400 audit(1733469868.926:7783): avc: denied { read write } for pid=10544 comm="syz.9.2491" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.273783][T10549] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2492'. [ 119.317033][T10548] loop9: detected capacity change from 0 to 512 [ 119.324622][T10548] ext4: Unknown parameter 'fowner>00000000000000060928' [ 119.331714][ T29] audit: type=1400 audit(1733469868.926:7784): avc: denied { open } for pid=10544 comm="syz.9.2491" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.356123][ T29] audit: type=1400 audit(1733469868.976:7785): avc: denied { execmem } for pid=10533 comm="syz.8.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.539468][ T29] audit: type=1400 audit(1733469869.206:7786): avc: denied { setopt } for pid=10552 comm="syz.5.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.559303][ T29] audit: type=1400 audit(1733469869.206:7787): avc: denied { create } for pid=10552 comm="syz.5.2495" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.580646][ T29] audit: type=1400 audit(1733469869.206:7788): avc: denied { map } for pid=10552 comm="syz.5.2495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.604961][ T29] audit: type=1400 audit(1733469869.206:7789): avc: denied { read write } for pid=10552 comm="syz.5.2495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.629934][ T29] audit: type=1400 audit(1733469869.206:7790): avc: denied { create } for pid=10555 comm="syz.7.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.650750][ T29] audit: type=1326 audit(1733469869.206:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.0.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 119.674253][ T29] audit: type=1326 audit(1733469869.216:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.0.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 119.820504][T10576] bond2: entered promiscuous mode [ 119.825659][T10576] bond2: entered allmulticast mode [ 119.858931][T10574] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2502'. [ 119.875990][T10576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.911701][T10576] bond2 (unregistering): Released all slaves [ 120.334637][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2522'. [ 120.343734][T10620] IPVS: Error joining to the multicast group [ 120.581783][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'. [ 120.639694][T10637] team0 (unregistering): Port device team_slave_0 removed [ 120.675365][T10637] team0 (unregistering): Port device team_slave_1 removed [ 120.936410][T10648] bridge0: entered promiscuous mode [ 120.956772][T10650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2532'. [ 120.958473][T10647] bridge0: left promiscuous mode [ 121.845769][T10683] xt_hashlimit: max too large, truncated to 1048576 [ 121.903688][T10621] syz.9.2509 (10621) used greatest stack depth: 7320 bytes left [ 121.978308][T10687] loop9: detected capacity change from 0 to 8192 [ 121.987966][T10687] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.197970][T10703] loop9: detected capacity change from 0 to 128 [ 122.239632][T10701] loop5: detected capacity change from 0 to 4096 [ 122.268541][T10701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.345790][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.408843][T10707] loop8: detected capacity change from 0 to 2048 [ 122.489903][T10707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.584620][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.623034][T10728] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2572'. [ 122.869892][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2578'. [ 124.183326][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2605'. [ 124.199920][T10809] team0 (unregistering): Port device team_slave_0 removed [ 124.210480][T10809] team0 (unregistering): Port device team_slave_1 removed [ 124.290005][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 124.290024][ T29] audit: type=1326 audit(1733469873.996:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.329526][ T29] audit: type=1326 audit(1733469873.996:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.353247][ T29] audit: type=1326 audit(1733469874.036:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.376960][ T29] audit: type=1326 audit(1733469874.036:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.400928][ T29] audit: type=1326 audit(1733469874.036:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.424456][ T29] audit: type=1326 audit(1733469874.036:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.447978][ T29] audit: type=1326 audit(1733469874.036:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.471727][ T29] audit: type=1326 audit(1733469874.036:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.495297][ T29] audit: type=1326 audit(1733469874.036:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 124.518848][ T29] audit: type=1326 audit(1733469874.036:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 125.068923][T10854] loop5: detected capacity change from 0 to 512 [ 125.113215][T10854] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.192972][T10854] EXT4-fs (loop5): 1 truncate cleaned up [ 125.199046][T10854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.298505][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.404270][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2640'. [ 125.424848][T10886] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 125.681781][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2665'. [ 125.704419][T10916] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 125.813750][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2659'. [ 125.847406][T10928] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 125.895935][ T3373] IPVS: starting estimator thread 0... [ 125.993224][T10931] IPVS: using max 2304 ests per chain, 115200 per kthread [ 126.733567][T10994] loop5: detected capacity change from 0 to 128 [ 126.768640][T10994] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.813982][T10994] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.885887][ T3373] IPVS: starting estimator thread 0... [ 126.912434][ T55] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.982884][T11011] IPVS: using max 2304 ests per chain, 115200 per kthread [ 127.314467][T11045] loop5: detected capacity change from 0 to 2048 [ 127.326919][T11045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.345706][T11045] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.385302][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.399628][T11052] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 127.672502][T11069] loop8: detected capacity change from 0 to 128 [ 127.698908][T11069] syz.8.2725: attempt to access beyond end of device [ 127.698908][T11069] loop8: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 127.776370][T11069] syz.8.2725: attempt to access beyond end of device [ 127.776370][T11069] loop8: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 127.789881][T11069] Buffer I/O error on dev loop8, logical block 148, lost async page write [ 127.842724][T11069] syz.8.2725: attempt to access beyond end of device [ 127.842724][T11069] loop8: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 127.856230][T11069] Buffer I/O error on dev loop8, logical block 149, lost async page write [ 127.872743][T11069] syz.8.2725: attempt to access beyond end of device [ 127.872743][T11069] loop8: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 127.886275][T11069] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 127.906056][T11069] syz.8.2725: attempt to access beyond end of device [ 127.906056][T11069] loop8: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 127.919556][T11069] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 127.930277][T11069] syz.8.2725: attempt to access beyond end of device [ 127.930277][T11069] loop8: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 127.943859][T11069] Buffer I/O error on dev loop8, logical block 152, lost async page write [ 127.954691][T11069] syz.8.2725: attempt to access beyond end of device [ 127.954691][T11069] loop8: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 128.004293][ T4227] kworker/u8:8: attempt to access beyond end of device [ 128.004293][ T4227] loop8: rw=1, sector=233, nr_sectors = 808 limit=128 [ 128.041499][T11084] loop7: detected capacity change from 0 to 1024 [ 128.057057][T11084] EXT4-fs: inline encryption not supported [ 128.069879][T11084] ext4: Unknown parameter 'noacl' [ 128.395795][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2739'. [ 128.404853][T11102] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2739'. [ 128.720498][T11098] loop9: detected capacity change from 0 to 512 [ 128.745276][T11098] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 128.762838][T11098] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 128.774815][T11098] EXT4-fs (loop9): 1 truncate cleaned up [ 128.824304][T11098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.902524][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.008419][T11137] netlink: 'syz.0.2753': attribute type 3 has an invalid length. [ 129.308693][T11158] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2762'. [ 129.403472][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 129.403491][ T29] audit: type=1400 audit(1733469879.116:8313): avc: denied { read } for pid=11167 comm="syz.8.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.484884][ T29] audit: type=1400 audit(1733469879.196:8314): avc: denied { name_bind } for pid=11176 comm="syz.9.2769" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 129.506758][ T29] audit: type=1400 audit(1733469879.196:8315): avc: denied { node_bind } for pid=11176 comm="syz.9.2769" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 129.561898][ T29] audit: type=1400 audit(1733469879.266:8316): avc: denied { create } for pid=11181 comm="syz.9.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.612086][ T29] audit: type=1400 audit(1733469879.296:8317): avc: denied { write } for pid=11181 comm="syz.9.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.671303][ T29] audit: type=1326 audit(1733469879.366:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c0eaff19 code=0x7ffc0000 [ 129.695013][ T29] audit: type=1326 audit(1733469879.366:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c0eaff19 code=0x7ffc0000 [ 129.718764][ T29] audit: type=1326 audit(1733469879.366:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c0eaff19 code=0x7ffc0000 [ 129.742382][ T29] audit: type=1326 audit(1733469879.366:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c0eaff19 code=0x7ffc0000 [ 129.765948][ T29] audit: type=1326 audit(1733469879.366:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c0eaff19 code=0x7ffc0000 [ 129.796842][T11188] loop9: detected capacity change from 0 to 1024 [ 129.803714][T11188] EXT4-fs: inline encryption not supported [ 129.809743][T11188] ext4: Unknown parameter 'noacl' [ 129.909944][T11196] loop9: detected capacity change from 0 to 4096 [ 129.920576][T11196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.937809][T11196] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #15: comm syz.9.2778: corrupted inode contents [ 129.949973][T11196] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #15: comm syz.9.2778: mark_inode_dirty error [ 129.962986][T11196] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #15: comm syz.9.2778: corrupted inode contents [ 129.985358][T11196] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.2778: mark_inode_dirty error [ 130.023019][T11196] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #15: comm syz.9.2778: corrupted inode contents [ 130.043554][T11196] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.2778: mark_inode_dirty error [ 130.063464][T11196] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #15: comm syz.9.2778: corrupted inode contents [ 130.091395][T11196] EXT4-fs error (device loop9): ext4_truncate:4240: inode #15: comm syz.9.2778: mark_inode_dirty error [ 130.122750][T11196] EXT4-fs error (device loop9): ext4_evict_inode:267: comm syz.9.2778: couldn't truncate inode 15 (err -117) [ 130.126098][T11209] loop7: detected capacity change from 0 to 128 [ 130.141937][T11209] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.156361][T11209] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.191519][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.207604][ T55] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.371625][T11220] netlink: 'syz.8.2789': attribute type 3 has an invalid length. [ 130.380360][T11222] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 130.453870][T11227] loop9: detected capacity change from 0 to 128 [ 130.482461][T11227] syz.9.2794: attempt to access beyond end of device [ 130.482461][T11227] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 130.528947][T11232] netlink: 'syz.8.2796': attribute type 13 has an invalid length. [ 130.559779][T11232] gretap0: refused to change device tx_queue_len [ 130.576999][T11227] syz.9.2794: attempt to access beyond end of device [ 130.576999][T11227] loop9: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 130.581604][T11232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.590551][T11227] Buffer I/O error on dev loop9, logical block 148, lost async page write [ 130.674885][T11227] Buffer I/O error on dev loop9, logical block 149, lost async page write [ 130.716132][T11227] Buffer I/O error on dev loop9, logical block 150, lost async page write [ 130.754081][T11227] Buffer I/O error on dev loop9, logical block 151, lost async page write [ 130.781398][T11227] Buffer I/O error on dev loop9, logical block 152, lost async page write [ 130.794276][T11237] loop5: detected capacity change from 0 to 4096 [ 130.813843][T11237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.880905][T11237] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.2797: corrupted inode contents [ 130.922052][T11237] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #15: comm syz.5.2797: mark_inode_dirty error [ 130.991545][T11237] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.2797: corrupted inode contents [ 131.018172][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2802'. [ 131.027252][T11251] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2802'. [ 131.030427][T11237] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2797: mark_inode_dirty error [ 131.099881][T11237] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.2797: corrupted inode contents [ 131.146221][T11237] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2797: mark_inode_dirty error [ 131.173463][T11237] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.2797: corrupted inode contents [ 131.206772][T11237] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.2797: mark_inode_dirty error [ 131.229427][T11211] loop7: detected capacity change from 0 to 512 [ 131.243928][T11237] EXT4-fs error (device loop5): ext4_evict_inode:267: comm syz.5.2797: couldn't truncate inode 15 (err -117) [ 131.265307][T11211] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 131.276851][T11211] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 131.313616][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.326657][T11211] EXT4-fs (loop7): 1 truncate cleaned up [ 131.333573][T11211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.390224][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 131.492362][T11283] loop8: detected capacity change from 0 to 512 [ 131.500890][T11279] TCP: out of memory -- consider tuning tcp_mem [ 131.556523][ T3866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.556866][T11283] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002] [ 131.601849][T11283] System zones: 0-2, 18-18, 34-35 [ 131.611219][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2821'. [ 131.620349][T11286] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2821'. [ 131.645225][T11283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.701999][T11283] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.011503][T11311] loop7: detected capacity change from 0 to 512 [ 132.071786][T11311] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2832: corrupted in-inode xattr: invalid ea_ino [ 132.109251][T11311] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2832: couldn't read orphan inode 15 (err -117) [ 132.150111][T11311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.322078][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2836'. [ 132.382094][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.446170][ T3866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.487810][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2839'. [ 132.574213][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2839'. [ 132.610303][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 133.382517][T11384] uprobe: syz.9.2863:11384 failed to unregister, leaking uprobe [ 133.449034][T11392] loop5: detected capacity change from 0 to 128 [ 133.508028][T11398] hub 8-0:1.0: USB hub found [ 133.512777][T11398] hub 8-0:1.0: 8 ports detected [ 133.734292][T11416] syz.0.2878[11416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.734367][T11416] syz.0.2878[11416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.772836][T11416] syz.0.2878[11416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.036372][T11455] Cannot find del_set index 4 as target [ 134.386762][T11477] binfmt_misc: register: failed to install interpreter file ./file0 [ 134.593604][T11495] __nla_validate_parse: 4 callbacks suppressed [ 134.593622][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2913'. [ 134.725501][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2919'. [ 134.740771][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 134.740785][ T29] audit: type=1400 audit(1733469884.456:8583): avc: denied { mac_admin } for pid=11504 comm="syz.8.2918" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.768848][T11506] SELinux: Context Ü is not valid (left unmapped). [ 134.842206][ T29] audit: type=1400 audit(1733469884.546:8584): avc: denied { setopt } for pid=11514 comm="syz.8.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.866329][T11515] Cannot find del_set index 0 as target [ 134.940005][ T29] audit: type=1400 audit(1733469884.646:8585): avc: denied { create } for pid=11522 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.019101][ T29] audit: type=1400 audit(1733469884.676:8586): avc: denied { connect } for pid=11522 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.039163][ T29] audit: type=1400 audit(1733469884.696:8587): avc: denied { append } for pid=11526 comm="syz.9.2929" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.138871][ T29] audit: type=1400 audit(1733469884.836:8588): avc: denied { bind } for pid=11529 comm="syz.9.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.158604][ T29] audit: type=1400 audit(1733469884.846:8589): avc: denied { listen } for pid=11529 comm="syz.9.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.259362][T11537] pimreg: entered allmulticast mode [ 135.308408][T11537] pimreg: left allmulticast mode [ 135.410948][ T29] audit: type=1400 audit(1733469885.116:8590): avc: denied { read } for pid=11549 comm="syz.8.2939" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.458822][ T29] audit: type=1400 audit(1733469885.156:8591): avc: denied { open } for pid=11549 comm="syz.8.2939" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.482929][ T29] audit: type=1400 audit(1733469885.156:8592): avc: denied { ioctl } for pid=11549 comm="syz.8.2939" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.609014][T11558] sd 0:0:1:0: device reset [ 135.640068][T11560] loop7: detected capacity change from 0 to 1024 [ 135.673653][T11560] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 135.725770][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2947'. [ 135.991437][T11597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.079482][T11603] syz.5.2964[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.079563][T11603] syz.5.2964[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.095233][T11599] macvtap0: entered promiscuous mode [ 136.115190][T11603] syz.5.2964[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.153095][T11599] macvtap0: left promiscuous mode [ 136.429885][T11617] syz.5.2970[11617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.429985][T11617] syz.5.2970[11617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.480307][T11620] ip6t_rpfilter: unknown options [ 136.509261][T11617] syz.5.2970[11617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.534040][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2972'. [ 136.670702][T11631] netlink: 'syz.0.2976': attribute type 3 has an invalid length. [ 136.839709][T11653] bond_slave_1: mtu less than device minimum [ 137.087350][T11670] tipc: Started in network mode [ 137.092261][T11670] tipc: Node identity 1, cluster identity 4711 [ 137.098792][T11670] tipc: Node number set to 1 [ 137.160832][T11674] vlan3: entered allmulticast mode [ 137.175378][T11674] bond0: entered allmulticast mode [ 137.180558][T11674] bond_slave_0: entered allmulticast mode [ 137.186466][T11674] bond_slave_1: entered allmulticast mode [ 137.209869][T11674] bond0: left allmulticast mode [ 137.214956][T11674] bond_slave_0: left allmulticast mode [ 137.220529][T11674] bond_slave_1: left allmulticast mode [ 137.480490][T11695] rdma_op ffff888118331180 conn xmit_rdma 0000000000000000 [ 137.613066][T11701] loop5: detected capacity change from 0 to 128 [ 137.629136][T11701] EXT4-fs: Ignoring removed i_version option [ 137.662424][T11701] EXT4-fs: Ignoring removed orlov option [ 137.675895][T11701] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.703975][T11701] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.808030][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'. [ 137.829971][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x1 [ 137.837446][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.844939][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.852375][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.859861][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.867410][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.874860][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x4 [ 137.882287][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.889856][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x2 [ 137.897284][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.904848][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.912287][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.919792][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.927328][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x4 [ 137.934812][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.942388][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.949967][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.957426][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.964849][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.972361][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.979803][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.987254][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 137.994760][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.002175][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.009618][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.017067][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.024521][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.031983][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.039474][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.046894][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.054390][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.061798][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.069297][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.076725][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.084151][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.091553][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.099040][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.106512][ T3350] hid-generic 0088:0007:0000.000A: unknown main item tag 0x0 [ 138.154738][ T3350] hid-generic 0088:0007:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.196418][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.298813][T11726] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.347942][T11731] syz.9.3019[11731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.626270][T11745] sd 0:0:1:0: device reset [ 138.648676][T11747] vhci_hcd: invalid port number 0 [ 138.800905][T11753] tipc: Started in network mode [ 138.805940][T11753] tipc: Node identity 1, cluster identity 4711 [ 138.812176][T11753] tipc: Node number set to 1 [ 138.988199][T11765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.995514][T11765] IPv6: NLM_F_CREATE should be set when creating new route [ 139.002788][T11765] IPv6: NLM_F_CREATE should be set when creating new route [ 139.050694][T11765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.132393][T11773] loop9: detected capacity change from 0 to 1024 [ 139.150487][T11772] vlan2: entered allmulticast mode [ 139.164439][T11772] bond0: entered allmulticast mode [ 139.169642][T11772] bond_slave_0: entered allmulticast mode [ 139.175445][T11772] bond_slave_1: entered allmulticast mode [ 139.181232][T11772] geneve1: entered allmulticast mode [ 139.197742][T11773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.289276][T11772] bond0: left allmulticast mode [ 139.294263][T11772] bond_slave_0: left allmulticast mode [ 139.299797][T11772] bond_slave_1: left allmulticast mode [ 139.305445][T11772] geneve1: left allmulticast mode [ 139.312968][T11781] vhci_hcd: invalid port number 0 [ 139.366521][T11784] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3040'. [ 139.384194][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.477934][T11793] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3043'. [ 139.487507][T11794] loop5: detected capacity change from 0 to 128 [ 139.509141][T11796] loop9: detected capacity change from 0 to 128 [ 139.521881][T11794] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.538349][T11796] EXT4-fs: Ignoring removed i_version option [ 139.542357][T11801] netlink: 'syz.0.3048': attribute type 4 has an invalid length. [ 139.552175][T11801] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3048'. [ 139.571973][T11796] EXT4-fs: Ignoring removed orlov option [ 139.578533][T11794] ext4 filesystem being mounted at /575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.587210][T11796] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.648715][T11801] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 139.693021][T11796] ext4 filesystem being mounted at /479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.701432][T11806] netlink: 'syz.8.3050': attribute type 1 has an invalid length. [ 139.753549][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.844526][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 139.844559][ T29] audit: type=1400 audit(1733469889.556:8691): avc: denied { ioctl } for pid=11810 comm="syz.7.3052" path="socket:[30210]" dev="sockfs" ino=30210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.895203][T11806] bond2: entered allmulticast mode [ 139.900979][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3051'. [ 139.901432][T11806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.910261][ T29] audit: type=1400 audit(1733469889.596:8692): avc: denied { bind } for pid=11813 comm="syz.0.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.920116][T11806] bond1: (slave bond2): making interface the new active one [ 139.944027][T11806] bond1: (slave bond2): Enslaving as an active interface with an up link [ 140.069144][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3046'. [ 140.168294][T11826] netlink: 'syz.8.3058': attribute type 1 has an invalid length. [ 140.180137][T11820] vlan3: entered allmulticast mode [ 140.189952][ T29] audit: type=1400 audit(1733469889.906:8693): avc: denied { ioctl } for pid=11827 comm="syz.0.3059" path="socket:[30255]" dev="sockfs" ino=30255 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.221547][T11820] bond0: entered allmulticast mode [ 140.226817][T11820] bond_slave_0: entered allmulticast mode [ 140.232567][T11820] bond_slave_1: entered allmulticast mode [ 140.238398][T11820] geneve1: entered allmulticast mode [ 140.248433][T11820] bond0: left allmulticast mode [ 140.253389][T11820] bond_slave_0: left allmulticast mode [ 140.259049][T11820] bond_slave_1: left allmulticast mode [ 140.264732][T11820] geneve1: left allmulticast mode [ 140.276924][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.301826][T11826] bond3: entered promiscuous mode [ 140.326141][T11830] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.336489][T11832] team0: Port device team_slave_1 removed [ 140.363183][ T6420] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.375053][T11832] bond3: (slave team_slave_1): making interface the new active one [ 140.383062][T11832] team_slave_1: entered promiscuous mode [ 140.390280][T11832] bond3: (slave team_slave_1): Enslaving as an active interface with an up link [ 140.436530][T11838] loop9: detected capacity change from 0 to 512 [ 140.462647][T11842] pimreg: entered allmulticast mode [ 140.483332][T11845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.494621][T11842] pimreg: left allmulticast mode [ 140.558398][T11838] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.3061: corrupted in-inode xattr: invalid ea_ino [ 140.573344][T11854] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 140.605287][T11854] bond3: entered allmulticast mode [ 140.611498][T11854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.624004][T11838] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3061: couldn't read orphan inode 15 (err -117) [ 140.638945][T11864] loop8: detected capacity change from 0 to 128 [ 140.655084][T11838] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.671155][T11864] EXT4-fs: Ignoring removed i_version option [ 140.678756][T11854] bond2: (slave bond3): making interface the new active one [ 140.687768][T11864] EXT4-fs: Ignoring removed orlov option [ 140.693901][T11854] bond2: (slave bond3): Enslaving as an active interface with an up link [ 140.734606][T11864] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.764441][T11864] ext4 filesystem being mounted at /605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.784886][T11870] bpf_get_probe_write_proto: 2 callbacks suppressed [ 140.784907][T11870] syz.7.3077[11870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.802899][T11870] syz.7.3077[11870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.805559][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3072'. [ 140.814532][T11870] syz.7.3077[11870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.842083][T11871] vlan3: entered allmulticast mode [ 140.863780][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.864354][T11871] bond0: entered allmulticast mode [ 140.873072][T11874] sd 0:0:1:0: device reset [ 140.877896][T11871] bond_slave_0: entered allmulticast mode [ 140.877918][T11871] bond_slave_1: entered allmulticast mode [ 140.894103][T11871] geneve1: entered allmulticast mode [ 140.902195][T11871] bond0: left allmulticast mode [ 140.907164][T11871] bond_slave_0: left allmulticast mode [ 140.912743][T11871] bond_slave_1: left allmulticast mode [ 140.918221][T11871] geneve1: left allmulticast mode [ 140.949399][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.983578][ T4609] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.996603][T11880] sd 0:0:1:0: device reset [ 141.001752][ T29] audit: type=1326 audit(1733469890.706:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.025398][ T29] audit: type=1326 audit(1733469890.706:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.049111][ T29] audit: type=1326 audit(1733469890.706:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.072748][ T29] audit: type=1326 audit(1733469890.706:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff31d8ee880 code=0x7ffc0000 [ 141.096430][ T29] audit: type=1326 audit(1733469890.706:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.120032][ T29] audit: type=1326 audit(1733469890.706:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.143602][ T29] audit: type=1326 audit(1733469890.706:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31d8eff19 code=0x7ffc0000 [ 141.335373][T11903] SELinux: policydb version 109 does not match my version range 15-33 [ 141.343946][T11903] SELinux: failed to load policy [ 141.358094][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3089'. [ 141.559756][T11920] loop8: detected capacity change from 0 to 512 [ 141.588484][T11923] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.628027][T11920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.682760][T11920] ext4 filesystem being mounted at /610/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.797921][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.809626][T11943] loop9: detected capacity change from 0 to 128 [ 141.833370][T11943] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 141.870751][T11943] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.894018][T11943] ext2 filesystem being mounted at /486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.000031][T11956] loop7: detected capacity change from 0 to 128 [ 142.044739][T11956] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.096390][T11956] ext4 filesystem being mounted at /536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.174519][ T6420] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.190265][ T3866] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.210262][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'. [ 142.220881][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'. [ 142.294110][T11963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.742410][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3126'. [ 142.818564][T11982] Cannot find del_set index 4 as target [ 142.824731][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3126'. [ 142.829388][T11984] loop5: detected capacity change from 0 to 512 [ 142.854237][T11984] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.883817][T11988] loop7: detected capacity change from 0 to 128 [ 142.885705][T11987] loop8: detected capacity change from 0 to 512 [ 142.891757][T11984] EXT4-fs (loop5): 1 orphan inode deleted [ 142.902220][T11984] EXT4-fs (loop5): 1 truncate cleaned up [ 142.908534][T11987] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 142.909955][T11988] EXT4-fs: Ignoring removed i_version option [ 142.919344][T11984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.925001][T11988] EXT4-fs: Ignoring removed orlov option [ 142.938538][T11987] EXT4-fs (loop8): 1 truncate cleaned up [ 142.948541][T11987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.952447][T11988] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.974970][T11988] ext4 filesystem being mounted at /539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.020302][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.044483][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3122'. [ 143.069771][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.168498][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.237956][ T3866] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.298246][T12012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.723483][T12032] block device autoloading is deprecated and will be removed. [ 143.745272][T12032] bio_check_eod: 6 callbacks suppressed [ 143.745290][T12032] syz.8.3143: attempt to access beyond end of device [ 143.745290][T12032] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.002185][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88812d18b400: rx timeout, send abort [ 144.010708][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88812d18b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.089214][T12047] loop9: detected capacity change from 0 to 1024 [ 144.111277][T12047] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 144.177131][T12047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.253977][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3154'. [ 144.274710][T12047] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.9.3150: corrupted in-inode xattr: bad magic number in in-inode xattr [ 144.403929][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.755959][T12079] syzkaller0: entered promiscuous mode [ 144.761481][T12079] syzkaller0: entered allmulticast mode [ 144.950929][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 144.950948][ T29] audit: type=1326 audit(1733469894.656:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 144.980707][ T29] audit: type=1326 audit(1733469894.656:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.071253][ T29] audit: type=1326 audit(1733469894.726:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.095517][ T29] audit: type=1326 audit(1733469894.726:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.119261][ T29] audit: type=1326 audit(1733469894.726:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.142790][ T29] audit: type=1326 audit(1733469894.726:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.166467][ T29] audit: type=1326 audit(1733469894.726:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.190188][ T29] audit: type=1326 audit(1733469894.726:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.213834][ T29] audit: type=1326 audit(1733469894.726:8801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.237358][ T29] audit: type=1326 audit(1733469894.726:8802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 145.261511][T12112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.282845][T12159] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 146.334856][T12161] wireguard0: entered promiscuous mode [ 146.340470][T12161] wireguard0: entered allmulticast mode [ 146.535882][T12182] loop8: detected capacity change from 0 to 256 [ 146.813794][T12200] geneve0: entered allmulticast mode [ 146.855488][T12206] loop8: detected capacity change from 0 to 1024 [ 146.897651][T12206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.932547][T12206] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.8.3221: corrupted in-inode xattr: bad magic number in in-inode xattr [ 147.031380][T12206] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #14: comm syz.8.3221: attempt to clear invalid blocks 1634560256 len 1 [ 147.155702][T12227] loop5: detected capacity change from 0 to 512 [ 147.163260][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.215989][T12227] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 147.224044][T12227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 147.254177][T12227] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.278887][T12227] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.301135][T12227] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.315799][T12227] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 147.333504][T12227] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.3229: bad orphan inode 16 [ 147.367798][T12227] ext4_test_bit(bit=15, block=18) = 1 [ 147.373322][T12227] is_bad_inode(inode)=0 [ 147.377538][T12227] NEXT_ORPHAN(inode)=0 [ 147.381700][T12227] max_ino=32 [ 147.385035][T12227] i_nlink=2 [ 147.436980][T12227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.529013][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.928161][T12295] netlink: 'syz.5.3257': attribute type 1 has an invalid length. [ 147.946973][T12298] wireguard0: entered promiscuous mode [ 147.952471][T12298] wireguard0: entered allmulticast mode [ 148.045573][T12295] bond3: entered allmulticast mode [ 148.072496][T12295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.108673][T12295] bond2: (slave bond3): making interface the new active one [ 148.133361][T12295] bond2: (slave bond3): Enslaving as an active interface with an up link [ 148.245410][T12313] tipc: Started in network mode [ 148.250326][T12313] tipc: Node identity ac14140f, cluster identity 4711 [ 148.292900][T12313] tipc: New replicast peer: 255.255.255.255 [ 148.299013][T12313] tipc: Enabled bearer , priority 10 [ 148.307910][T12321] __nla_validate_parse: 2 callbacks suppressed [ 148.307928][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3271'. [ 148.419430][T12331] loop5: detected capacity change from 0 to 128 [ 148.489040][T12337] loop7: detected capacity change from 0 to 16384 [ 148.501168][T12335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.683340][T12346] loop7: detected capacity change from 16384 to 16383 [ 148.712167][T12337] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 148.739613][T12353] syz.5.3284[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.739693][T12353] syz.5.3284[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.758048][T12337] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.779025][T12337] Buffer I/O error on dev loop7, logical block 449, async page read [ 148.790451][T12356] netlink: 'syz.5.3284': attribute type 5 has an invalid length. [ 148.800688][T12353] syz.5.3284[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.816151][T12337] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.837133][T12337] Buffer I/O error on dev loop7, logical block 449, async page read [ 148.911755][T12336] I/O error, dev loop7, sector 1792 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 148.921768][T12336] Buffer I/O error on dev loop7, logical block 224, lost async page write [ 148.930406][T12336] Buffer I/O error on dev loop7, logical block 225, lost async page write [ 148.938998][T12336] Buffer I/O error on dev loop7, logical block 226, lost async page write [ 148.947867][T12336] Buffer I/O error on dev loop7, logical block 227, lost async page write [ 148.956482][T12336] Buffer I/O error on dev loop7, logical block 228, lost async page write [ 148.965339][T12336] Buffer I/O error on dev loop7, logical block 229, lost async page write [ 148.973901][T12336] Buffer I/O error on dev loop7, logical block 230, lost async page write [ 148.982461][T12336] Buffer I/O error on dev loop7, logical block 231, lost async page write [ 149.005058][T12362] loop5: detected capacity change from 0 to 128 [ 149.021353][T12336] I/O error, dev loop7, sector 2816 op 0x1:(WRITE) flags 0x800 phys_seg 97 prio class 0 [ 149.055927][T12362] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 149.063958][T12362] FAT-fs (loop5): Filesystem has been set read-only [ 149.093036][T12362] syz.5.3289: attempt to access beyond end of device [ 149.093036][T12362] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 149.138882][T12362] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 149.146890][T12362] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 149.169686][T12362] syz.5.3289: attempt to access beyond end of device [ 149.169686][T12362] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.212849][T12362] syz.5.3289: attempt to access beyond end of device [ 149.212849][T12362] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.412833][ T3350] tipc: Node number set to 2886997007 [ 149.639313][T12408] loop9: detected capacity change from 0 to 128 [ 149.652584][T12410] loop5: detected capacity change from 0 to 256 [ 149.684300][T12408] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.701626][T12415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.703734][T12408] ext4 filesystem being mounted at /527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.780041][ T6420] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.034423][T12436] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 150.145916][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 150.145944][ T29] audit: type=1400 audit(1733469899.856:8980): avc: denied { setopt } for pid=12442 comm="syz.0.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.234138][T12447] netem: incorrect ge model size [ 150.239118][T12447] netem: change failed [ 150.428480][ T29] audit: type=1326 audit(1733469900.136:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 150.452207][ T29] audit: type=1326 audit(1733469900.136:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 150.476374][ T29] audit: type=1326 audit(1733469900.136:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 150.499989][ T29] audit: type=1326 audit(1733469900.136:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 150.523528][ T29] audit: type=1326 audit(1733469900.136:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 150.547282][ T29] audit: type=1400 audit(1733469900.166:8986): avc: denied { map } for pid=12458 comm="syz.9.3333" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.571505][ T29] audit: type=1400 audit(1733469900.166:8987): avc: denied { execute } for pid=12458 comm="syz.9.3333" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.672864][T12474] loop9: detected capacity change from 0 to 512 [ 150.717376][T12474] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 150.725377][T12474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 150.741063][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3343'. [ 150.766353][T12474] System zones: 0-1, 15-15, 18-18, 34-34 [ 150.792413][ T29] audit: type=1326 audit(1733469900.496:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.0.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 150.816033][T12474] EXT4-fs (loop9): orphan cleanup on readonly fs [ 150.822490][T12474] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 150.840058][T12474] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 150.854777][T12474] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 150.892373][T12474] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.3339: bad orphan inode 16 [ 150.934283][T12474] ext4_test_bit(bit=15, block=18) = 1 [ 150.939915][T12474] is_bad_inode(inode)=0 [ 150.944217][T12474] NEXT_ORPHAN(inode)=0 [ 150.948340][T12474] max_ino=32 [ 150.951549][T12474] i_nlink=2 [ 150.990559][T12474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.128357][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.408865][T12528] syz.9.3364[12528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.408943][T12528] syz.9.3364[12528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.450977][T12528] syz.9.3364[12528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.641125][T12545] loop9: detected capacity change from 0 to 128 [ 151.689451][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.706742][T12545] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 151.716974][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.728441][T12545] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 151.736428][T12545] FAT-fs (loop9): Filesystem has been set read-only [ 151.751658][T12545] syz.9.3371: attempt to access beyond end of device [ 151.751658][T12545] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 151.767660][T12545] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 151.775548][T12545] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 151.785340][T12545] syz.9.3371: attempt to access beyond end of device [ 151.785340][T12545] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.798705][T12545] syz.9.3371: attempt to access beyond end of device [ 151.798705][T12545] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.814023][T12545] syz.9.3371: attempt to access beyond end of device [ 151.814023][T12545] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.827992][T12545] syz.9.3371: attempt to access beyond end of device [ 151.827992][T12545] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.864271][T12550] loop7: detected capacity change from 0 to 16384 [ 152.087119][T12555] loop7: detected capacity change from 16384 to 16383 [ 152.102045][T12550] I/O error, dev loop7, sector 9992 op 0x0:(READ) flags 0x80700 phys_seg 11 prio class 0 [ 152.158968][T12550] I/O error, dev loop7, sector 9992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.196801][T12550] I/O error, dev loop7, sector 9992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.297040][T12549] I/O error, dev loop7, sector 5424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 152.350698][T12549] I/O error, dev loop7, sector 6448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 152.475429][T12566] pim6reg: entered allmulticast mode [ 152.517684][T12570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.524961][T12570] IPv6: NLM_F_CREATE should be set when creating new route [ 152.532274][T12570] IPv6: NLM_F_CREATE should be set when creating new route [ 152.541416][T12566] pim6reg: left allmulticast mode [ 152.605758][T12572] tipc: Started in network mode [ 152.610693][T12572] tipc: Node identity ac14140f, cluster identity 4711 [ 152.647225][T12572] tipc: New replicast peer: 255.255.255.255 [ 152.653398][T12572] tipc: Enabled bearer , priority 10 [ 153.188028][T12606] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.730791][T12629] loop9: detected capacity change from 0 to 1764 [ 153.760838][T12631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3409'. [ 153.787142][T12629] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 153.794794][ T4384] tipc: Node number set to 2886997007 [ 153.923408][T12638] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3412'. [ 154.022849][T12638] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3412'. [ 154.124519][T12638] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3412'. [ 154.336092][T12659] loop7: detected capacity change from 0 to 128 [ 154.363070][T12659] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.433311][T12659] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.906315][ T4225] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.981740][T12683] loop5: detected capacity change from 0 to 1024 [ 155.019534][T12679] tipc: New replicast peer: 255.255.255.255 [ 155.025685][T12679] tipc: Enabled bearer , priority 10 [ 155.039831][T12683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.180056][T12689] EXT4-fs (loop5): shut down requested (0) [ 155.314594][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.390831][T12697] loop5: detected capacity change from 0 to 512 [ 155.416332][T12697] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.3435: bad orphan inode 13 [ 155.433103][T12697] ext4_test_bit(bit=12, block=4) = 1 [ 155.438426][T12697] is_bad_inode(inode)=0 [ 155.442607][T12697] NEXT_ORPHAN(inode)=0 [ 155.446772][T12697] max_ino=32 [ 155.450073][T12697] i_nlink=1 [ 155.543553][T12697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.628818][T12697] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.3435: Unrecognised inode hash code 20 [ 155.640343][T12697] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3435: Corrupt directory, running e2fsck is recommended [ 155.682769][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 155.682788][ T29] audit: type=1400 audit(1733469905.386:9139): avc: denied { execute } for pid=12706 comm="syz.0.3439" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 155.702978][T12697] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 13: comm syz.5.3435: path /660/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 155.753878][T12697] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.3435: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 155.835916][ T29] audit: type=1400 audit(1733469905.546:9140): avc: denied { module_load } for pid=12713 comm="syz.9.3443" path="/sys/kernel/notes" dev="sysfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 155.861751][T12714] Invalid ELF header magic: != ELF [ 155.905902][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.927906][ T29] audit: type=1326 audit(1733469905.616:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12716 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 155.951492][ T29] audit: type=1326 audit(1733469905.616:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12716 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 155.975153][ T29] audit: type=1326 audit(1733469905.616:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020f8fff19 code=0x7ffc0000 [ 155.998806][ T29] audit: type=1326 audit(1733469905.616:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12716 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 156.022502][ T29] audit: type=1326 audit(1733469905.616:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020f8fff19 code=0x7ffc0000 [ 156.046335][ T29] audit: type=1326 audit(1733469905.616:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12716 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 156.106845][ T29] audit: type=1326 audit(1733469905.636:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.8.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 156.130518][ T29] audit: type=1326 audit(1733469905.636:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.8.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 156.333281][T12749] syz.5.3459[12749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.333428][T12749] syz.5.3459[12749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.341744][T12745] loop8: detected capacity change from 0 to 1024 [ 156.353539][T12749] syz.5.3459[12749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.362521][T12745] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.363148][T12745] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 156.394821][T12745] EXT4-fs (loop8): orphan cleanup on readonly fs [ 156.403018][T12745] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 156.422120][T12745] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #3: comm syz.8.3456: mark_inode_dirty error [ 156.433940][T12745] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3456: Invalid block bitmap block 3 in block_group 0 [ 156.448414][T12745] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3456: Invalid block bitmap block 3 in block_group 0 [ 156.462258][T12745] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3456: Invalid block bitmap block 3 in block_group 0 [ 156.482010][T12745] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 156.532495][T12745] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #3: comm syz.8.3456: mark_inode_dirty error [ 156.579182][T12745] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm syz.8.3456: lblock 6 mapped to illegal pblock 1 (length 1) [ 156.596684][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3465'. [ 156.622965][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.634430][T12745] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 48: comm syz.8.3456: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.642779][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.657753][T12745] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3456: Failed to acquire dquot type 0 [ 156.701480][T12745] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 49: comm syz.8.3456: lblock 1 mapped to illegal pblock 49 (length 1) [ 156.743271][T12745] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3456: Failed to acquire dquot type 0 [ 156.769979][T12745] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 156.829651][T12745] EXT4-fs error (device loop8): ext4_evict_inode:256: inode #15: comm syz.8.3456: mark_inode_dirty error [ 156.857538][T12785] loop9: detected capacity change from 0 to 1024 [ 156.869677][T12785] EXT4-fs: Ignoring removed orlov option [ 156.875480][T12785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.883730][T12745] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 156.894032][T12745] EXT4-fs (loop8): 1 orphan inode deleted [ 156.900335][T12745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.959290][T12785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 156.975787][T12785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.016880][ T4609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.032911][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.126316][T12799] Invalid ELF header magic: != ELF [ 157.280553][T12814] syz.5.3484[12814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.280696][T12814] syz.5.3484[12814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.336472][T12814] syz.5.3484[12814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.988862][T12856] loop7: detected capacity change from 0 to 512 [ 158.043185][T12856] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.3505: bad orphan inode 11 [ 158.067116][T12856] ext4_test_bit(bit=10, block=4) = 1 [ 158.072509][T12856] is_bad_inode(inode)=0 [ 158.076851][T12856] NEXT_ORPHAN(inode)=2080374784 [ 158.081773][T12856] max_ino=32 [ 158.085051][T12856] i_nlink=0 [ 158.089912][T12856] EXT4-fs (loop7): 1 truncate cleaned up [ 158.096209][T12856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.157880][ T3866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.286484][T12882] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3515'. [ 158.317503][T12879] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3515'. [ 158.378532][T12888] tipc: Enabling of bearer rejected, already enabled [ 158.420657][T12891] netlink: 'syz.5.3518': attribute type 13 has an invalid length. [ 158.482624][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.502606][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.530616][T12891] gretap0: refused to change device tx_queue_len [ 158.552465][T12891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.665645][T12903] netlink: 'syz.7.3525': attribute type 10 has an invalid length. [ 158.673538][T12903] netlink: 'syz.7.3525': attribute type 19 has an invalid length. [ 158.681361][T12903] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3525'. [ 158.726077][T12905] batman_adv: batadv0: Adding interface: geneve2 [ 158.732534][T12905] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 159.536978][T12944] loop8: detected capacity change from 0 to 2048 [ 159.600252][T12944] loop8: p1 < > p4 [ 159.622752][T12944] loop8: p4 size 8388608 extends beyond EOD, truncated [ 159.981189][T12964] loop9: detected capacity change from 0 to 2048 [ 160.055944][T12964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.085634][T12972] syz.0.3552[12972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.085813][T12972] syz.0.3552[12972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.129040][T12972] syz.0.3552[12972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.229816][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 160.233070][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.281694][T12981] loop7: detected capacity change from 0 to 1024 [ 160.325042][T12981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.442854][T12995] EXT4-fs (loop7): shut down requested (0) [ 160.840625][T13013] loop9: detected capacity change from 0 to 1024 [ 160.856827][ T3866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.899700][T13013] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.941728][T13013] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 160.972884][T13013] EXT4-fs (loop9): orphan cleanup on readonly fs [ 161.056836][T13013] EXT4-fs error (device loop9): ext4_map_blocks:705: inode #3: block 3: comm syz.9.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 161.091589][T13013] __quota_error: 438 callbacks suppressed [ 161.091605][T13013] Quota error (device loop9): write_blk: dquota write failed [ 161.104842][T13013] Quota error (device loop9): find_free_dqentry: Can't write quota data block 3 [ 161.114329][T13013] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 161.145454][T13013] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.3569: Failed to acquire dquot type 0 [ 161.204960][T13013] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 3: comm syz.9.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 161.248686][T13013] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 161.292509][T13013] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.3569: Failed to acquire dquot type 0 [ 161.324281][T13013] EXT4-fs error (device loop9): ext4_free_blocks:6589: comm syz.9.3569: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.369826][T13013] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 3: comm syz.9.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 161.419402][T13013] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 161.455728][ T29] audit: type=1326 audit(1733469911.156:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 161.462942][T13013] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.3569: Failed to acquire dquot type 0 [ 161.479331][ T29] audit: type=1326 audit(1733469911.156:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 161.514095][ T29] audit: type=1326 audit(1733469911.156:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 161.523392][T13060] syz.7.3590[13060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.537750][ T29] audit: type=1326 audit(1733469911.156:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 161.537799][ T29] audit: type=1326 audit(1733469911.156:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec83fff19 code=0x7ffc0000 [ 161.543198][T13058] syz.7.3590[13058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.600689][T13058] syz.7.3590[13058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.602826][T13013] EXT4-fs (loop9): 1 orphan inode deleted [ 161.612588][T13058] syz.7.3590[13058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.635488][T13060] syz.7.3590[13060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.647813][T13013] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.672422][T13060] syz.7.3590[13060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.675530][T13065] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3593'. [ 161.778240][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.052302][T13093] xt_CT: No such helper "snmp_trap" [ 162.288703][T13120] Invalid ELF header magic: != ELF [ 162.405113][T13129] loop8: detected capacity change from 0 to 512 [ 162.436001][T13129] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.454228][T13129] EXT4-fs (loop8): orphan cleanup on readonly fs [ 162.474488][T13129] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #3: comm syz.8.3632: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 162.539942][T13129] EXT4-fs error (device loop8): ext4_quota_enable:7115: comm syz.8.3632: Bad quota inode: 3, type: 0 [ 162.577893][T13129] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 162.592598][T13129] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 162.631495][T13129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.684197][ T4609] EXT4-fs error (device loop8): ext4_readdir:261: inode #12: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 162.736776][T13140] loop5: detected capacity change from 0 to 1024 [ 162.738013][ T4609] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 162.758813][ T4609] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 162.792700][T13140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.806689][T11371] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.844569][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.936432][T13153] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3634'. [ 162.958701][T13155] loop5: detected capacity change from 0 to 512 [ 162.969685][T13150] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3634'. [ 162.986609][T13155] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.024767][T13155] EXT4-fs (loop5): 1 truncate cleaned up [ 163.032197][T13155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.057288][T13164] syz.0.3636[13164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.057380][T13164] syz.0.3636[13164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.069234][T13164] syz.0.3636[13164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.122135][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.376113][T13186] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.3644'. [ 163.453033][T13156] chnl_net:caif_netlink_parms(): no params data found [ 163.488349][T13194] bridge0: port 3(vlan2) entered blocking state [ 163.494786][T13194] bridge0: port 3(vlan2) entered disabled state [ 163.503349][T13194] vlan2: entered allmulticast mode [ 163.509473][T13194] vlan2: left allmulticast mode [ 163.595359][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.602477][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.625661][T13156] bridge_slave_0: entered allmulticast mode [ 163.632385][T13156] bridge_slave_0: entered promiscuous mode [ 163.639232][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.646391][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.653801][T13156] bridge_slave_1: entered allmulticast mode [ 163.660464][T13156] bridge_slave_1: entered promiscuous mode [ 163.681524][T13209] xt_CT: No such helper "snmp_trap" [ 163.701336][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.724341][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.757108][T13156] team0: Port device team_slave_0 added [ 163.765532][T13156] team0: Port device team_slave_1 added [ 163.792924][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.799935][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.826016][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.839043][T13216] syz.5.3654[13216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.839213][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.857823][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.883876][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.914292][T13156] hsr_slave_0: entered promiscuous mode [ 163.920561][T13156] hsr_slave_1: entered promiscuous mode [ 163.926834][T13156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.935847][T13156] Cannot create hsr debugfs directory [ 164.146346][T13234] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3662'. [ 164.406541][T13156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.446069][T13156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.481237][T13156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.516821][T13156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.680539][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.749645][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.794407][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.801511][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.841772][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.848959][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.920301][T13156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.930807][T13156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.150853][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.170801][T13309] loop9: detected capacity change from 0 to 1024 [ 165.314305][T13323] loop7: detected capacity change from 0 to 512 [ 165.343720][T13323] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.381199][T13309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.395595][T13323] EXT4-fs (loop7): orphan cleanup on readonly fs [ 165.401978][T13323] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #3: comm syz.7.3676: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 165.476088][T13323] EXT4-fs error (device loop7): ext4_quota_enable:7115: comm syz.7.3676: Bad quota inode: 3, type: 0 [ 165.507940][T13338] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 165.537450][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.578492][T13323] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 165.593264][T13323] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 165.605820][T13323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.780572][T13156] veth0_vlan: entered promiscuous mode [ 165.796516][T13156] veth1_vlan: entered promiscuous mode [ 165.844882][T13156] veth0_macvtap: entered promiscuous mode [ 165.851170][ T3866] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 165.881149][T13156] veth1_macvtap: entered promiscuous mode [ 165.912643][ T3866] EXT4-fs error (device loop7): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 165.925799][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.936442][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.946468][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.957076][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.967018][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.977499][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.987714][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.998321][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.006322][ T3866] EXT4-fs error (device loop7): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 166.008272][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.030180][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.043700][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.052020][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.062501][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.072410][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.082956][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.092942][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.103408][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.113313][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.123781][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.133639][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.144110][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.154674][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.197186][ T4426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.210266][T13156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.219151][T13156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.228010][T13156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.236922][T13156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.295344][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 166.295358][ T29] audit: type=1400 audit(1733469916.006:9707): avc: denied { mounton } for pid=13156 comm="syz-executor" path="/root/syzkaller.QKhT59/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 166.367571][ T29] audit: type=1400 audit(1733469916.056:9708): avc: denied { mounton } for pid=13156 comm="syz-executor" path="/root/syzkaller.QKhT59/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 166.394902][ T29] audit: type=1400 audit(1733469916.056:9709): avc: denied { mounton } for pid=13156 comm="syz-executor" path="/root/syzkaller.QKhT59/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 166.422927][ T29] audit: type=1400 audit(1733469916.066:9710): avc: denied { mounton } for pid=13156 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 166.645307][T13412] loop5: detected capacity change from 0 to 512 [ 166.655067][T13412] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.763719][T13412] EXT4-fs (loop5): orphan cleanup on readonly fs [ 166.770503][T13412] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.3695: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 166.878015][T13412] EXT4-fs error (device loop5): ext4_quota_enable:7115: comm syz.5.3695: Bad quota inode: 3, type: 0 [ 166.940287][T13412] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 166.955047][T13412] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 167.047429][T13412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.085240][T13415] syzkaller0: entered promiscuous mode [ 167.090759][T13415] syzkaller0: entered allmulticast mode [ 167.168605][ T29] audit: type=1326 audit(1733469916.866:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.192264][ T29] audit: type=1326 audit(1733469916.866:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.216121][ T29] audit: type=1326 audit(1733469916.866:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.239936][ T29] audit: type=1326 audit(1733469916.866:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.263662][ T29] audit: type=1326 audit(1733469916.866:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.287256][ T29] audit: type=1326 audit(1733469916.866:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 167.647913][ T3673] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 167.709244][ T3673] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 167.741206][ T3673] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 167.839243][T13472] loop9: detected capacity change from 0 to 512 [ 167.848023][T13432] chnl_net:caif_netlink_parms(): no params data found [ 167.892632][T13472] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 167.918150][T13476] rdma_op ffff888102600580 conn xmit_rdma 0000000000000000 [ 167.936098][T12288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.974314][T13472] EXT4-fs (loop9): 1 truncate cleaned up [ 167.980378][T13472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.094967][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.142475][T13432] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.149687][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.164335][T13432] bridge_slave_0: entered allmulticast mode [ 168.175816][T13432] bridge_slave_0: entered promiscuous mode [ 168.185816][T13432] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.193033][T13432] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.289962][T13432] bridge_slave_1: entered allmulticast mode [ 168.333120][T13432] bridge_slave_1: entered promiscuous mode [ 168.418858][ T1576] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.505974][T13432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.517952][ T1576] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.569356][T13432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.635650][ T1576] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.707612][T13432] team0: Port device team_slave_0 added [ 168.726898][ T1576] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.741434][T13432] team0: Port device team_slave_1 added [ 168.797786][T13432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.804860][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.830873][T13432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.851643][T13432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.858677][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.884801][T13432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.009289][ T1576] bridge_slave_1: left allmulticast mode [ 169.015072][ T1576] bridge_slave_1: left promiscuous mode [ 169.020917][ T1576] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.085518][ T1576] bridge_slave_0: left allmulticast mode [ 169.091343][ T1576] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.220685][ T1576] bond1 (unregistering): (slave gretap1): Releasing active interface [ 169.291644][ T1576] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 169.465657][ T1576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.477077][ T1576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.488905][ T1576] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 169.498397][ T1576] veth1_vlan: left allmulticast mode [ 169.538656][ T1576] bond0 (unregistering): Released all slaves [ 169.557516][ T1576] bond1 (unregistering): Released all slaves [ 169.591592][ T1576] bond2 (unregistering): (slave bond3): Releasing backup interface [ 169.610169][ T1576] bond2 (unregistering): Released all slaves [ 169.631486][ T1576] bond3 (unregistering): Released all slaves [ 169.670872][T13562] bridge0: port 3(vlan0) entered blocking state [ 169.677322][T13562] bridge0: port 3(vlan0) entered disabled state [ 169.687296][T13562] vlan0: entered allmulticast mode [ 169.694530][T13562] vlan0: left allmulticast mode [ 169.741277][T13432] hsr_slave_0: entered promiscuous mode [ 169.754101][T13432] hsr_slave_1: entered promiscuous mode [ 169.765916][T13432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.802793][ T1576] IPVS: stopping backup sync thread 10928 ... [ 169.825334][T13432] Cannot create hsr debugfs directory [ 169.908094][ T1576] hsr_slave_0: left promiscuous mode [ 169.933152][ T1576] hsr_slave_1: left promiscuous mode [ 169.945368][ T1576] veth1_macvtap: left promiscuous mode [ 169.950871][ T1576] veth0_macvtap: left promiscuous mode [ 169.956460][ T1576] veth1_vlan: left promiscuous mode [ 169.961884][ T1576] veth0_vlan: left promiscuous mode [ 170.263160][T13511] chnl_net:caif_netlink_parms(): no params data found [ 170.316175][T13637] af_packet: tpacket_rcv: packet too big, clamped from 32834 to 3966. macoff=82 [ 170.356285][T13432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.486642][T13432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.518721][T13667] netlink: 'syz.0.3741': attribute type 10 has an invalid length. [ 170.558747][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.565932][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.577375][T13667] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.584498][T13667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.591786][T13667] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.598931][T13667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.610246][T13667] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.657155][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.664350][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.681209][T13511] bridge_slave_0: entered allmulticast mode [ 170.687873][T13511] bridge_slave_0: entered promiscuous mode [ 170.700953][T13432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.741113][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.748286][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.768958][T13683] loop9: detected capacity change from 0 to 1764 [ 170.775616][T13511] bridge_slave_1: entered allmulticast mode [ 170.782102][T13511] bridge_slave_1: entered promiscuous mode [ 170.823060][T13432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.858169][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.907985][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.954652][T13698] bpf_get_probe_write_proto: 5 callbacks suppressed [ 170.954734][T13698] syz.0.3751[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.988740][T13698] syz.0.3751[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.022466][T13432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.029857][T13698] syz.0.3751[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.090879][T13511] team0: Port device team_slave_0 added [ 171.149992][T13432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.167998][T13511] team0: Port device team_slave_1 added [ 171.209317][T13432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.284475][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.291472][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.317490][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.344368][T13432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.371663][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.378692][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.396782][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 171.396799][ T29] audit: type=1326 audit(1733469921.096:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff01e60c129 code=0x7ffc0000 [ 171.404776][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.445645][ T29] audit: type=1326 audit(1733469921.166:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 171.526424][ T29] audit: type=1326 audit(1733469921.166:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 171.637910][T13432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.674964][T13511] hsr_slave_0: entered promiscuous mode [ 171.699154][T13511] hsr_slave_1: entered promiscuous mode [ 171.721881][T13511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.745104][T13511] Cannot create hsr debugfs directory [ 171.762107][T13432] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.837171][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.844290][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.856671][T13776] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3772'. [ 171.876142][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.883268][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.954899][T13776] 0ªX¹¦À: renamed from caif0 [ 171.961388][T13776] 0ªX¹¦À: entered allmulticast mode [ 171.966684][T13776] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 172.020557][T13785] geneve0: entered allmulticast mode [ 172.046643][T13432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.132915][ T29] audit: type=1326 audit(1733469921.836:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.217038][ T29] audit: type=1326 audit(1733469921.846:9799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.240898][ T29] audit: type=1326 audit(1733469921.856:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.264533][ T29] audit: type=1326 audit(1733469921.856:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.288094][ T29] audit: type=1326 audit(1733469921.856:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.311764][ T29] audit: type=1326 audit(1733469921.856:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.335491][ T29] audit: type=1326 audit(1733469921.856:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.4.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01e66ff19 code=0x7ffc0000 [ 172.422447][T13432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.580287][T13511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.610993][T13432] veth0_vlan: entered promiscuous mode [ 172.623039][T13511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.640456][T13511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.659288][T13511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.672936][T13432] veth1_vlan: entered promiscuous mode [ 172.709330][T13432] veth0_macvtap: entered promiscuous mode [ 172.765483][T13432] veth1_macvtap: entered promiscuous mode [ 172.806182][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.816889][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.826842][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.837334][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.847318][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.857841][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.867967][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.878565][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.888406][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.898886][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.908759][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.919220][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.984364][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.002887][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.031545][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.042302][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.052183][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.062735][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.072586][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.083099][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.093135][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.103680][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.113711][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.124222][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.134092][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.144618][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.155505][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.181743][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.205906][T13432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.214719][T13432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.223560][T13432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.232283][T13432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.256091][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.263216][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.282618][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.289720][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.541424][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.849140][T13511] veth0_vlan: entered promiscuous mode [ 173.866004][T13511] veth1_vlan: entered promiscuous mode [ 173.890733][T13511] veth0_macvtap: entered promiscuous mode [ 173.918462][T13511] veth1_macvtap: entered promiscuous mode [ 173.926364][T13935] loop9: detected capacity change from 0 to 256 [ 174.065174][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.075715][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.085593][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.096054][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.105968][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.116591][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.126881][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.137456][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.147403][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.157913][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.167815][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.178292][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.188144][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.198624][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.210296][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.219475][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.229991][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.239910][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.250436][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.260516][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.270985][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.281006][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.291482][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.301373][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.311947][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.321881][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.332350][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.342357][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.352835][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.363758][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.394982][T13511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.403830][T13511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.412538][T13511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.421399][T13511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.721551][T13987] loop9: detected capacity change from 0 to 512 [ 174.763174][T13987] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 174.784848][T13987] EXT4-fs (loop9): orphan cleanup on readonly fs [ 174.791345][T13987] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.3814: bad orphan inode 15 [ 174.803746][T13987] ext4_test_bit(bit=14, block=18) = 1 [ 174.809179][T13987] is_bad_inode(inode)=0 [ 174.813412][T13987] NEXT_ORPHAN(inode)=1023 [ 174.817757][T13987] max_ino=32 [ 174.821214][T13987] i_nlink=0 [ 174.892838][T13987] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2977: inode #15: comm syz.9.3814: corrupted xattr block 19: e_value size too large [ 174.912489][T13987] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 174.922753][T13987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.958570][ T6420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.001191][T14020] geneve0: entered allmulticast mode [ 175.450037][T14102] syz.1.3847[14102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.463629][T14104] loop9: detected capacity change from 0 to 1024 [ 175.514170][T14104] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.553709][T14104] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 175.589970][T14122] loop3: detected capacity change from 0 to 256 [ 175.629000][T14122] FAT-fs (loop3): Directory bread(block 64) failed [ 175.654153][T14122] FAT-fs (loop3): Directory bread(block 65) failed [ 175.676155][T14131] netlink: 'syz.1.3856': attribute type 1 has an invalid length. [ 175.680682][T14122] FAT-fs (loop3): Directory bread(block 66) failed [ 175.683948][T14131] netlink: 'syz.1.3856': attribute type 4 has an invalid length. [ 175.683965][T14131] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3856'. [ 175.724716][T14122] FAT-fs (loop3): Directory bread(block 67) failed [ 175.731390][T14122] FAT-fs (loop3): Directory bread(block 68) failed [ 175.759287][T14122] FAT-fs (loop3): Directory bread(block 69) failed [ 175.770590][T14122] FAT-fs (loop3): Directory bread(block 70) failed [ 175.781444][T14122] FAT-fs (loop3): Directory bread(block 71) failed [ 175.806769][T14122] FAT-fs (loop3): Directory bread(block 72) failed [ 175.832947][T14122] FAT-fs (loop3): Directory bread(block 73) failed [ 175.872277][T14156] loop4: detected capacity change from 0 to 128 [ 175.890404][T14122] syz.3.3853: attempt to access beyond end of device [ 175.890404][T14122] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 175.940519][T14156] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.997018][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.004307][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.021618][T14156] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.060796][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3866'. [ 176.106156][T13156] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.117509][T14190] loop3: detected capacity change from 0 to 512 [ 176.152726][T14190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.249714][T14190] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.3867: bad orphan inode 131083 [ 176.265246][T14190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.439522][T14233] bridge: RTM_NEWNEIGH with invalid ether address [ 176.443004][T13511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.640868][T14258] loop3: detected capacity change from 0 to 512 [ 176.727308][T14258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.739967][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 176.739981][ T29] audit: type=1326 audit(1733469926.436:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 176.769701][ T29] audit: type=1326 audit(1733469926.436:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 176.793411][ T29] audit: type=1326 audit(1733469926.436:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 176.817031][ T29] audit: type=1326 audit(1733469926.436:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b8b9ff19 code=0x7ffc0000 [ 176.867032][T14258] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.975620][T14282] ================================================================== [ 176.983755][T14282] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 176.990917][T14282] [ 176.993259][T14282] write to 0xffff888104f6cba4 of 4 bytes by task 14258 on cpu 1: [ 177.000997][T14282] xas_set_mark+0x131/0x150 [ 177.005546][T14282] __folio_start_writeback+0x1e8/0x430 [ 177.011039][T14282] ext4_bio_write_folio+0x591/0x9d0 [ 177.016256][T14282] mpage_process_page_bufs+0x486/0x5d0 [ 177.021818][T14282] mpage_prepare_extent_to_map+0x788/0xb80 [ 177.027638][T14282] ext4_do_writepages+0xa20/0x2130 [ 177.032773][T14282] ext4_writepages+0x159/0x2e0 [ 177.037545][T14282] do_writepages+0x1d8/0x480 [ 177.042154][T14282] file_write_and_wait_range+0x168/0x2f0 [ 177.047797][T14282] generic_buffers_fsync_noflush+0x46/0x120 [ 177.053710][T14282] ext4_sync_file+0x1ff/0x6c0 [ 177.058409][T14282] vfs_fsync_range+0x116/0x130 [ 177.063203][T14282] ext4_buffered_write_iter+0x326/0x370 [ 177.068783][T14282] ext4_file_write_iter+0x383/0xf20 [ 177.074011][T14282] iter_file_splice_write+0x5f1/0x980 [ 177.079402][T14282] direct_splice_actor+0x160/0x2c0 [ 177.084537][T14282] splice_direct_to_actor+0x302/0x670 [ 177.089930][T14282] do_splice_direct+0xd7/0x150 [ 177.094716][T14282] do_sendfile+0x398/0x660 [ 177.099140][T14282] __x64_sys_sendfile64+0x110/0x150 [ 177.104346][T14282] x64_sys_call+0xfbd/0x2dc0 [ 177.108943][T14282] do_syscall_64+0xc9/0x1c0 [ 177.113487][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.119409][T14282] [ 177.121735][T14282] read to 0xffff888104f6cba4 of 4 bytes by task 14282 on cpu 0: [ 177.129396][T14282] xas_find_marked+0x60a/0x660 [ 177.134168][T14282] find_get_entry+0x54/0x390 [ 177.138770][T14282] filemap_get_folios_tag+0x9e/0x210 [ 177.144067][T14282] mpage_prepare_extent_to_map+0x329/0xb80 [ 177.149880][T14282] ext4_do_writepages+0x6ea/0x2130 [ 177.155004][T14282] ext4_writepages+0x159/0x2e0 [ 177.159774][T14282] do_writepages+0x1d8/0x480 [ 177.164406][T14282] file_write_and_wait_range+0x168/0x2f0 [ 177.170066][T14282] generic_buffers_fsync_noflush+0x46/0x120 [ 177.175997][T14282] ext4_sync_file+0x1ff/0x6c0 [ 177.180692][T14282] vfs_fsync_range+0x116/0x130 [ 177.185480][T14282] ext4_buffered_write_iter+0x326/0x370 [ 177.191044][T14282] ext4_file_write_iter+0x383/0xf20 [ 177.196266][T14282] iter_file_splice_write+0x5f1/0x980 [ 177.201660][T14282] direct_splice_actor+0x160/0x2c0 [ 177.206814][T14282] splice_direct_to_actor+0x302/0x670 [ 177.212202][T14282] do_splice_direct+0xd7/0x150 [ 177.217329][T14282] do_sendfile+0x398/0x660 [ 177.221752][T14282] __x64_sys_sendfile64+0x110/0x150 [ 177.226960][T14282] x64_sys_call+0xfbd/0x2dc0 [ 177.231570][T14282] do_syscall_64+0xc9/0x1c0 [ 177.236090][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.242005][T14282] [ 177.244331][T14282] value changed: 0x0a000021 -> 0x04000021 [ 177.250050][T14282] [ 177.252387][T14282] Reported by Kernel Concurrency Sanitizer on: [ 177.258638][T14282] CPU: 0 UID: 0 PID: 14282 Comm: syz.3.3881 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 177.269431][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.279509][T14282] ================================================================== [ 177.312838][T14280] Falling back ldisc for ttyS3. [ 177.565003][T13511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.