last executing test programs: 5m0.847478793s ago: executing program 2 (id=1938): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x4000000) 5m0.808005477s ago: executing program 2 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m0.755145751s ago: executing program 2 (id=1949): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m0.411454819s ago: executing program 2 (id=1970): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 5m0.293575469s ago: executing program 2 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 4m59.840984476s ago: executing program 2 (id=1969): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 4m59.840869165s ago: executing program 32 (id=1969): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m18.821739161s ago: executing program 3 (id=6603): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r1, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4, 0x0) close_range(r0, r1, 0x0) 3m17.975873369s ago: executing program 5 (id=6620): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4c20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m17.975668069s ago: executing program 4 (id=6621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) poll(0x0, 0x0, 0x9) 3m17.968148169s ago: executing program 5 (id=6622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3M2AlSvvX5Ji2sk47Yjj77fp4d577j0vr00WJed9+dp0fPNOFicPH0SeZ9E5iIN4lMVudKL1XXQDAHh+PEopfk9VmKXahpndzpUWBgBcmfrz/4k++AGA/7iPP/3sw8Hh4Y2PiiKPV/r3Z8MsIqb3Z8N6fnA7vo5J3Irr0Y/TiLRQx+9/cHgjukVpN96czmfDMnP6xc/N/oPfIqr8/ejH7vr8/aK2+JdD+XO4HS9GEYPb222p/Xh5ff7bbf7y/HkMe/HWGyv170U/fvkq7sQkbkaZu8z/dr8o3kvfP/zm8/KYMj/rxHCnWldJKfJnelcAAAAAAAAAAAAAAAAAAAAAAHje7RVFVrfvqfr3lENV/5zZcOu0mt8rWqv9feZtf6Cs3ajuD5SiadEzT/FD21/nelEUqVm4zO/Gq10PFgAAAAAAAAAAAAAAAAAAAIDS0b0H10aTya27R/eOx08dtN0A2q/1/9N9DlZGXo/j8Wjr/A13Nj9rtdtAWeuFi6PbjUt6WdYHJ4uRF8p6Lv2InViMfBJ10N6YSz3rpXfrTY/Ho6KZal/k8Sh73Fl5e+N+XJ3qxWLNH6n2hIWl6lfiNJ29p/mi1LNZvQ12LnMft6Z3be3UnymlzYp/59f6HjUjWdViY7NL3m6CtRdYBnk0V1H/4ZdTP52/4blvGVtP/aYDAAAAAAAAAAAAAAAAAACstfzS75rJkwtTO1dWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Y8vn/7dBHhFnR/4WzJvki9Y0QS/uHv3LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wF8BAAD//4oXU2s=") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) 3m17.907033655s ago: executing program 4 (id=6624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000a40)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0xa, 0x2f4, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3m17.906662244s ago: executing program 3 (id=6625): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x200000000000000) 3m17.906462605s ago: executing program 3 (id=6626): syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8c, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x101902) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0x40189206, &(0x7f0000000180)) 3m17.906158935s ago: executing program 5 (id=6627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3m17.850731779s ago: executing program 4 (id=6629): socket$netlink(0x10, 0x3, 0x8000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 3m17.850384459s ago: executing program 3 (id=6630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a3f8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m17.808174442s ago: executing program 5 (id=6632): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 3m17.808003062s ago: executing program 4 (id=6633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76f47792ad6215887d70323030302e752c63616368653d6e6f6e652c"]) 3m17.807593012s ago: executing program 5 (id=6636): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0) 3m17.71614013s ago: executing program 4 (id=6637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x71f}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m17.622887497s ago: executing program 3 (id=6638): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) 3m17.59324224s ago: executing program 5 (id=6639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 3m17.573581962s ago: executing program 33 (id=6639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 3m17.506943397s ago: executing program 4 (id=6641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3m17.506718677s ago: executing program 34 (id=6641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3m17.291031854s ago: executing program 3 (id=6642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) 3m17.290889424s ago: executing program 35 (id=6642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) 27.75819844s ago: executing program 7 (id=13895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @loopback, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) 27.623941271s ago: executing program 7 (id=13899): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="01bbbb86dd"], 0x0) 27.37913045s ago: executing program 7 (id=13906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 27.322845675s ago: executing program 7 (id=13908): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 27.222380053s ago: executing program 7 (id=13912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 26.38622763s ago: executing program 7 (id=13939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xdca) 26.346998233s ago: executing program 36 (id=13939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xdca) 1.656161047s ago: executing program 0 (id=14898): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) 1.502080659s ago: executing program 0 (id=14905): ioperm(0x21, 0x1, 0x81) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.216988952s ago: executing program 1 (id=14923): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000040)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) 1.12392044s ago: executing program 1 (id=14926): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f0000002340)="$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") syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 1.092525992s ago: executing program 1 (id=14932): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x40000000, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x12fc, @remote, 0xfffffff3}}}, &(0x7f00000001c0)=0x84) 776.555778ms ago: executing program 6 (id=14945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 771.986038ms ago: executing program 8 (id=14946): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000001c0)) 742.396031ms ago: executing program 8 (id=14947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 742.090271ms ago: executing program 6 (id=14948): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 660.166327ms ago: executing program 6 (id=14949): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001bc0)=""/117, 0x75}], 0x1}, 0x2}], 0x2, 0x10103, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 646.390418ms ago: executing program 0 (id=14950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310b27bd7000aa4245d106000000180001801400020076657468315f746f5f7465616d00"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 616.436001ms ago: executing program 0 (id=14951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 591.700813ms ago: executing program 6 (id=14952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 573.247354ms ago: executing program 8 (id=14953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 572.779444ms ago: executing program 6 (id=14954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 523.448698ms ago: executing program 8 (id=14955): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$pppl2tp(r1, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, 0xa, 0x0, 0x4}}, 0x26) 523.293818ms ago: executing program 6 (id=14956): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 523.128848ms ago: executing program 8 (id=14957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 522.973558ms ago: executing program 0 (id=14958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 468.056782ms ago: executing program 8 (id=14960): ioperm(0x21, 0x1, 0x81) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 467.952573ms ago: executing program 0 (id=14961): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 232.055281ms ago: executing program 9 (id=14970): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000100)='7', 0x1) 176.130166ms ago: executing program 9 (id=14971): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 175.942936ms ago: executing program 1 (id=14972): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = eventfd(0xa) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 175.840346ms ago: executing program 9 (id=14973): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x8, 0x7, 0x202, 0x8}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 142.262289ms ago: executing program 9 (id=14974): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 121.831581ms ago: executing program 9 (id=14975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 90.929793ms ago: executing program 9 (id=14976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfd1) 74.858275ms ago: executing program 1 (id=14977): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x9d, @empty}, @in={0x2, 0x4e22, @remote}}}, 0x118) 0s ago: executing program 1 (id=14978): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) kernel console output (not intermixed with test programs): FAT (entry 0x0000e1b1) [ 320.715518][T31913] openvswitch: netlink: Message has 6 unknown bytes. [ 320.808872][T31933] loop7: detected capacity change from 0 to 16384 [ 321.227133][T31977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31977 comm=syz.6.12643 [ 321.239920][T31977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31977 comm=syz.6.12643 [ 321.329929][T31993] loop7: detected capacity change from 0 to 16384 [ 321.648135][T32014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32014 comm=syz.1.12659 [ 321.660971][T32014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32014 comm=syz.1.12659 [ 321.673731][T32012] loop8: detected capacity change from 0 to 8192 [ 321.684137][T32012] syz.8.12658: attempt to access beyond end of device [ 321.684137][T32012] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 321.699115][T32012] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 321.706986][T32012] FAT-fs (loop8): Filesystem has been set read-only [ 321.715241][T32012] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 321.728150][T32012] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 321.972806][T32029] openvswitch: netlink: Message has 6 unknown bytes. [ 322.000180][T32033] loop7: detected capacity change from 0 to 16384 [ 322.038995][T32038] loop8: detected capacity change from 0 to 512 [ 322.058070][T32038] EXT4-fs (loop8): orphan cleanup on readonly fs [ 322.067267][T32038] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.12670: bad orphan inode 13 [ 322.085614][T32038] ext4_test_bit(bit=12, block=18) = 1 [ 322.091046][T32038] is_bad_inode(inode)=0 [ 322.095245][T32038] NEXT_ORPHAN(inode)=2130706432 [ 322.100102][T32038] max_ino=32 [ 322.103299][T32038] i_nlink=1 [ 322.107352][T32038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.122913][T32038] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.12670: deleted inode referenced: 12 [ 322.147862][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.193146][T32051] __nla_validate_parse: 6 callbacks suppressed [ 322.193166][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12675'. [ 322.210129][T32050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32050 comm=syz.8.12673 [ 322.222824][T32050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32050 comm=syz.8.12673 [ 322.236619][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12675'. [ 322.288992][T32055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32055 comm=syz.1.12677 [ 322.330580][T32059] loop6: detected capacity change from 0 to 1024 [ 322.341940][T32059] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 322.390370][T32065] netlink: 'syz.8.12686': attribute type 13 has an invalid length. [ 322.405441][T32065] Q6\bY4: entered promiscuous mode [ 322.411401][T32065] Q6\bY4: entered allmulticast mode [ 322.438859][T32065] tunl0: entered promiscuous mode [ 322.443958][T32065] tunl0: entered allmulticast mode [ 322.452957][T32065] gre0: entered promiscuous mode [ 322.457959][T32065] gre0: entered allmulticast mode [ 322.464311][T32065] gretap0: entered promiscuous mode [ 322.469609][T32065] gretap0: entered allmulticast mode [ 322.489608][T32065] gretap0: refused to change device tx_queue_len [ 322.497788][T32065] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.546829][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12694'. [ 322.560577][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12694'. [ 322.602900][T32090] loop8: detected capacity change from 0 to 128 [ 322.608033][T32093] loop7: detected capacity change from 0 to 16384 [ 322.731239][T32112] netlink: 'syz.1.12705': attribute type 13 has an invalid length. [ 322.742902][T32112] lo: entered promiscuous mode [ 322.747920][T32112] lo: entered allmulticast mode [ 322.752866][T32112] tunl0: entered promiscuous mode [ 322.757975][T32112] tunl0: entered allmulticast mode [ 322.763254][T32112] gre0: entered promiscuous mode [ 322.768238][T32112] gre0: entered allmulticast mode [ 322.773380][T32112] gretap0: entered promiscuous mode [ 322.778615][T32112] gretap0: entered allmulticast mode [ 322.801828][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12708'. [ 322.813533][T32112] gretap0: refused to change device tx_queue_len [ 322.820127][T32112] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.836461][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12708'. [ 323.016051][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12723'. [ 323.025307][T32143] loop8: detected capacity change from 0 to 4096 [ 323.033003][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12723'. [ 323.033121][T32147] netlink: 'syz.7.12724': attribute type 13 has an invalid length. [ 323.051920][T32147] lo: entered promiscuous mode [ 323.056991][T32147] lo: entered allmulticast mode [ 323.062163][T32147] tunl0: entered promiscuous mode [ 323.067255][T32147] tunl0: entered allmulticast mode [ 323.072511][T32147] gre0: entered promiscuous mode [ 323.077541][T32147] gre0: entered allmulticast mode [ 323.077871][T32150] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.082731][T32147] gretap0: entered promiscuous mode [ 323.082745][T32147] gretap0: entered allmulticast mode [ 323.104492][T32147] gretap0: refused to change device tx_queue_len [ 323.110836][T32147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 323.191449][T32154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12736'. [ 323.200690][T32154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12736'. [ 323.211839][T32154] netlink: 'syz.1.12736': attribute type 6 has an invalid length. [ 323.391551][T32187] netlink: 'syz.8.12741': attribute type 6 has an invalid length. [ 323.452636][T32198] loop7: detected capacity change from 0 to 16384 [ 323.492155][T32204] program syz.8.12750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.528628][T32207] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.767547][T32236] netlink: 'syz.8.12776': attribute type 1 has an invalid length. [ 324.714704][T32317] loop7: detected capacity change from 0 to 16384 [ 324.728216][T32318] sctp: [Deprecated]: syz.6.12801 (pid 32318) Use of int in max_burst socket option deprecated. [ 324.728216][T32318] Use struct sctp_assoc_value instead [ 325.024761][T32347] loop7: detected capacity change from 0 to 512 [ 325.045278][T32347] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.12817: error while reading EA inode 32 err=-116 [ 325.066573][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 325.066589][ T29] audit: type=1400 audit(1049670.229:28142): avc: denied { setopt } for pid=32352 comm="syz.1.12820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.092713][T32347] EXT4-fs (loop7): Remounting filesystem read-only [ 325.092763][ T29] audit: type=1400 audit(1049670.229:28143): avc: denied { write } for pid=32352 comm="syz.1.12820" path="socket:[101675]" dev="sockfs" ino=101675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.099297][T32347] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 325.124010][ T29] audit: type=1400 audit(1049670.239:28144): avc: denied { read } for pid=32352 comm="syz.1.12820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.167759][T32347] EXT4-fs (loop7): 1 orphan inode deleted [ 325.174568][T32347] EXT4-fs mount: 4 callbacks suppressed [ 325.174603][T32347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.193852][T32347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.240945][ T29] audit: type=1326 audit(1049670.399:28145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.274640][ T29] audit: type=1326 audit(1049670.399:28146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.298163][ T29] audit: type=1326 audit(1049670.399:28147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.321609][ T29] audit: type=1326 audit(1049670.399:28148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.345084][ T29] audit: type=1326 audit(1049670.399:28149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.368521][ T29] audit: type=1326 audit(1049670.399:28150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.392043][ T29] audit: type=1326 audit(1049670.399:28151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32359 comm="syz.8.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 325.528105][T32378] loop7: detected capacity change from 0 to 16384 [ 325.621964][T32390] loop8: detected capacity change from 0 to 512 [ 325.635783][T32390] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.12838: error while reading EA inode 32 err=-116 [ 325.653651][T32390] EXT4-fs (loop8): Remounting filesystem read-only [ 325.660196][T32390] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 325.670577][T32390] EXT4-fs (loop8): 1 orphan inode deleted [ 325.678175][T32390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.692679][T32390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.910503][T32416] sctp: [Deprecated]: syz.8.12845 (pid 32416) Use of int in max_burst socket option deprecated. [ 325.910503][T32416] Use struct sctp_assoc_value instead [ 325.979807][T32422] loop6: detected capacity change from 0 to 512 [ 326.000145][T32422] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.12854: error while reading EA inode 32 err=-116 [ 326.015576][T32422] EXT4-fs (loop6): Remounting filesystem read-only [ 326.022121][T32422] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 326.046688][T32422] EXT4-fs (loop6): 1 orphan inode deleted [ 326.054406][T32422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.074488][T32422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.718531][T32450] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 326.862779][T32477] smc: net device bond0 applied user defined pnetid SYZ2 [ 326.871002][T32477] smc: net device bond0 erased user defined pnetid SYZ2 [ 327.249457][T32539] loop6: detected capacity change from 0 to 256 [ 327.280125][T32541] loop6: detected capacity change from 0 to 1024 [ 327.288209][T32541] EXT4-fs: Ignoring removed bh option [ 327.305225][T32541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.320434][T32546] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 327.326722][T32541] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 327.342436][T32541] EXT4-fs (loop6): Remounting filesystem read-only [ 327.360678][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.613352][T32563] sctp: [Deprecated]: syz.6.12913 (pid 32563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.613352][T32563] Use struct sctp_sack_info instead [ 327.620479][T32564] loop7: detected capacity change from 0 to 512 [ 327.645350][T32564] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.12912: error while reading EA inode 32 err=-116 [ 327.659299][T32564] EXT4-fs (loop7): Remounting filesystem read-only [ 327.665868][T32564] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 327.676419][T32564] EXT4-fs (loop7): 1 orphan inode deleted [ 327.682606][T32564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.695185][T32564] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.906503][T32600] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.921512][T32600] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 327.937713][T32602] __nla_validate_parse: 14 callbacks suppressed [ 327.937739][T32602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12936'. [ 328.322697][T32641] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 328.336909][T32641] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 328.387947][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 328.397246][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 328.422619][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 328.448104][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 328.490951][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 328.500732][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12954'. [ 329.123084][T32685] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 329.130495][T32685] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 329.257078][ T3405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3405 comm=kworker/1:5 [ 329.270157][T32706] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 329.296476][T32709] netlink: 'syz.8.12992': attribute type 1 has an invalid length. [ 329.629670][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12999'. [ 329.638877][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12999'. [ 329.659691][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12999'. [ 329.992910][ T328] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 330.068374][ T340] netlink: 'syz.0.13024': attribute type 1 has an invalid length. [ 330.085292][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12394 comm=kworker/1:7 [ 330.098512][ T342] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 330.157463][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 330.157480][ T29] audit: type=1326 audit(1049675.311:28466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.8.13029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x0 [ 330.231836][ T29] audit: type=1326 audit(1049675.391:28467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.6.13031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 330.255170][ T29] audit: type=1326 audit(1049675.391:28468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.6.13031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 330.280362][ T29] audit: type=1326 audit(1049675.391:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.6.13031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 330.303664][ T29] audit: type=1326 audit(1049675.391:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.6.13031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 330.327002][ T29] audit: type=1326 audit(1049675.391:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.6.13031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 330.365553][ T29] audit: type=1400 audit(1049675.521:28472): avc: denied { read } for pid=361 comm="syz.0.13034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 330.405709][ T364] loop6: detected capacity change from 0 to 1024 [ 330.415918][ T364] EXT4-fs: Ignoring removed orlov option [ 330.425082][ T368] netlink: '+}[@': attribute type 21 has an invalid length. [ 330.433194][ T364] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 330.453632][ T364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.468307][ T29] audit: type=1400 audit(1049675.631:28473): avc: denied { mounton } for pid=363 comm="syz.6.13035" path="/1350/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.603961][ T29] audit: type=1326 audit(1049675.762:28474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.0.13045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 330.627391][ T29] audit: type=1326 audit(1049675.762:28475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.0.13045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 330.734167][ T398] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 331.004057][ T416] netlink: '+}[@': attribute type 21 has an invalid length. [ 331.244823][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.466384][ T496] 9pnet_fd: Insufficient options for proto=fd [ 331.745866][ T551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=551 comm=syz.7.13117 [ 331.902179][ T570] 9pnet_fd: Insufficient options for proto=fd [ 332.033443][ T582] loop7: detected capacity change from 0 to 128 [ 332.051493][ T582] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.107565][T18664] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.478508][ T628] loop7: detected capacity change from 0 to 4096 [ 332.489766][ T628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.586612][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.705452][ T650] syzkaller1: entered promiscuous mode [ 332.711095][ T650] syzkaller1: entered allmulticast mode [ 333.072107][ T677] netlink: '': attribute type 1 has an invalid length. [ 333.285296][ T694] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 333.294035][ T694] SELinux: failed to load policy [ 333.527719][ T710] loop7: detected capacity change from 0 to 512 [ 333.548520][ T710] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 333.557514][ T710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 333.568286][ T710] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.13189: corrupted in-inode xattr: e_value size too large [ 333.583641][ T710] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.13189: couldn't read orphan inode 15 (err -117) [ 333.596203][ T710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.672330][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.937458][ T761] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 333.970165][ T766] loop8: detected capacity change from 0 to 256 [ 333.984101][ T766] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 333.992050][ T766] FAT-fs (loop8): Filesystem has been set read-only [ 334.073189][ T782] __nla_validate_parse: 12 callbacks suppressed [ 334.073207][ T782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13222'. [ 334.594963][ T826] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 334.594963][ T826] program syz.1.13241 not setting count and/or reply_len properly [ 334.950468][ T847] block device autoloading is deprecated and will be removed. [ 335.027216][ T855] loop8: detected capacity change from 0 to 512 [ 335.039517][ T855] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 335.047648][ T855] EXT4-fs (loop8): orphan cleanup on readonly fs [ 335.075892][ T855] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.13255: corrupted inode contents [ 335.093406][ T855] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.13255: mark_inode_dirty error [ 335.106864][ T855] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.13255: corrupted inode contents [ 335.120368][ T855] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.13255: mark_inode_dirty error [ 335.132310][ T855] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.13255: corrupted inode contents [ 335.145793][ T855] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 335.154756][ T855] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.13255: corrupted inode contents [ 335.175176][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 335.175190][ T29] audit: type=1400 audit(1049680.334:28662): avc: denied { read } for pid=871 comm="syz.0.13261" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 335.175625][ T855] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.13255: mark_inode_dirty error [ 335.181430][ T29] audit: type=1400 audit(1049680.334:28663): avc: denied { open } for pid=871 comm="syz.0.13261" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 335.182489][ T29] audit: type=1400 audit(1049680.344:28664): avc: denied { create } for pid=871 comm="syz.0.13261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.237357][ T855] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 335.270870][ T855] EXT4-fs (loop8): 1 truncate cleaned up [ 335.276904][ T6869] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 335.286772][ T6869] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 335.303045][ T855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.319173][ T29] audit: type=1400 audit(1049680.464:28665): avc: denied { write } for pid=871 comm="syz.0.13261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.339488][ T29] audit: type=1400 audit(1049680.474:28666): avc: denied { mount } for pid=854 comm="syz.8.13255" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.378509][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.393909][ T29] audit: type=1400 audit(1049680.534:28667): avc: denied { unmount } for pid=18718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.413583][ T29] audit: type=1400 audit(1049680.544:28668): avc: denied { read } for pid=871 comm="syz.0.13261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.433683][ T29] audit: type=1400 audit(1049680.554:28669): avc: denied { ioctl } for pid=871 comm="syz.0.13261" path="socket:[104144]" dev="sockfs" ino=104144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.459529][ T29] audit: type=1400 audit(1049680.554:28670): avc: denied { module_request } for pid=871 comm="syz.0.13261" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 335.590816][ T906] SELinux: failed to load policy [ 335.714343][ T928] IPVS: Error connecting to the multicast addr [ 335.734375][ T935] loop7: detected capacity change from 0 to 512 [ 335.762068][ T935] EXT4-fs (loop7): orphan cleanup on readonly fs [ 335.769693][ T935] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13291: Failed to acquire dquot type 1 [ 335.812665][ T945] veth0: entered promiscuous mode [ 335.834878][ T947] loop8: detected capacity change from 0 to 128 [ 335.842188][ T935] EXT4-fs (loop7): 1 truncate cleaned up [ 335.845580][ T947] EXT4-fs: Ignoring removed nobh option [ 335.853495][ T943] veth0: left promiscuous mode [ 335.862819][ T935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.891566][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.902475][ T947] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.912188][ T957] loop7: detected capacity change from 0 to 512 [ 335.923408][ T957] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 335.935490][ T957] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 335.959815][ T957] EXT4-fs (loop7): 1 truncate cleaned up [ 335.973855][ T957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.029378][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.038202][ T966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.046547][ T966] bond3: entered promiscuous mode [ 336.048064][T18718] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.053686][ T966] bond0: (slave bond3): Enslaving as an active interface with an up link [ 336.085579][ T973] netlink: 'syz.7.13307': attribute type 1 has an invalid length. [ 336.093470][ T973] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.13307'. [ 336.146424][ T977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13308'. [ 336.156358][ T977] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13308'. [ 336.202501][ T985] batadv_slave_1: entered promiscuous mode [ 336.243632][ T984] batadv_slave_1: left promiscuous mode [ 336.268392][ T1001] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 336.274961][ T1001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.282683][ T1001] vhci_hcd vhci_hcd.0: Device attached [ 336.297389][ T1005] syzkaller1: entered promiscuous mode [ 336.302948][ T1005] syzkaller1: entered allmulticast mode [ 336.313805][ T1006] vhci_hcd: connection closed [ 336.316157][ T6894] vhci_hcd: stop threads [ 336.325797][ T6894] vhci_hcd: release socket [ 336.330420][ T6894] vhci_hcd: disconnect device [ 336.338132][ T1013] loop8: detected capacity change from 0 to 512 [ 336.359006][ T1013] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 336.384485][ T1013] EXT4-fs (loop8): mount failed [ 336.575922][ T1044] netlink: 76 bytes leftover after parsing attributes in process `syz.8.13337'. [ 336.606483][ T1046] loop8: detected capacity change from 0 to 512 [ 336.615885][ T1046] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.13338: casefold flag without casefold feature [ 336.629763][ T1046] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13338: couldn't read orphan inode 15 (err -117) [ 336.642492][ T1046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.777758][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.956929][ T1075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13351'. [ 337.010158][ T1077] loop6: detected capacity change from 0 to 8192 [ 337.361713][ T1123] loop7: detected capacity change from 0 to 1024 [ 337.370184][ T1123] EXT4-fs: inline encryption not supported [ 337.376177][ T1123] EXT4-fs: Ignoring removed i_version option [ 337.389363][ T1123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.411093][ T1123] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 337.449026][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.490109][ T1140] loop1: detected capacity change from 0 to 1024 [ 337.497803][ T1140] EXT4-fs: inline encryption not supported [ 337.503694][ T1140] EXT4-fs: Ignoring removed i_version option [ 337.519366][ T1140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.549095][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.577547][ T1151] loop6: detected capacity change from 0 to 256 [ 337.645067][ T1160] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.13387'. [ 337.738689][ T1162] loop6: detected capacity change from 0 to 8192 [ 337.860797][ T1169] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 337.868434][ T1169] FAT-fs (loop6): Filesystem has been set read-only [ 337.905984][ T1162] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 337.946871][ T1162] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 337.955922][ T1162] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 338.038303][T18683] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 338.473323][ T1212] bond4: entered promiscuous mode [ 338.478530][ T1212] bond4: entered allmulticast mode [ 338.484052][ T1212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.502980][ T1218] netlink: 'syz.1.13410': attribute type 1 has an invalid length. [ 338.503482][ T1212] bond4 (unregistering): Released all slaves [ 338.758019][ T1259] loop1: detected capacity change from 0 to 512 [ 338.773266][ T1264] netlink: 7 bytes leftover after parsing attributes in process `syz.8.13433'. [ 338.788531][ T1264] netlink: 7 bytes leftover after parsing attributes in process `syz.8.13433'. [ 338.877711][ T1287] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13439'. [ 339.211544][ T1346] loop6: detected capacity change from 0 to 764 [ 339.220297][ T1346] Symlink component flag not implemented [ 339.227600][ T1346] Symlink component flag not implemented (129) [ 339.234742][ T1346] rock: directory entry would overflow storage [ 339.241000][ T1346] rock: sig=0x4f50, size=4, remaining=3 [ 339.246677][ T1346] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 339.333302][ T1363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13472'. [ 339.342753][ T1363] netlink: 328 bytes leftover after parsing attributes in process `syz.1.13472'. [ 339.371207][ T1365] netlink: 340 bytes leftover after parsing attributes in process `syz.1.13473'. [ 339.380778][ T1365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13473'. [ 339.815151][ T1380] loop8: detected capacity change from 0 to 512 [ 339.852688][ T1380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.885258][ T1390] 9pnet_fd: Insufficient options for proto=fd [ 339.962188][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.019843][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13494'. [ 340.028871][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13494'. [ 340.048719][ T1415] loop8: detected capacity change from 0 to 128 [ 340.063801][ T1415] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.155307][T18718] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.184218][ T1436] netlink: 7 bytes leftover after parsing attributes in process `syz.6.13507'. [ 340.193296][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 340.193307][ T29] audit: type=1400 audit(1049685.356:28962): avc: denied { write } for pid=1433 comm="syz.0.13505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.221630][ T1436] netlink: 7 bytes leftover after parsing attributes in process `syz.6.13507'. [ 340.261682][ T1442] bond2: entered promiscuous mode [ 340.266766][ T1442] bond2: entered allmulticast mode [ 340.272263][ T1442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.287248][ T1442] bond2 (unregistering): Released all slaves [ 340.320845][ T29] audit: type=1400 audit(1049685.486:28963): avc: denied { ioctl } for pid=1425 comm="syz.7.13500" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.477105][ T1471] loop6: detected capacity change from 0 to 1024 [ 340.492356][ T29] audit: type=1326 audit(1049685.656:28964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.516347][ T29] audit: type=1326 audit(1049685.656:28965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.539982][ T29] audit: type=1326 audit(1049685.656:28966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.563980][ T29] audit: type=1326 audit(1049685.656:28967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.588062][ T29] audit: type=1326 audit(1049685.656:28968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.595929][ T1471] EXT4-fs: Ignoring removed nobh option [ 340.611437][ T29] audit: type=1326 audit(1049685.656:28969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.617009][ T1471] EXT4-fs: Ignoring removed bh option [ 340.656635][ T29] audit: type=1326 audit(1049685.656:28970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.680007][ T29] audit: type=1326 audit(1049685.656:28971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 340.726675][ T1471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.762579][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.803106][ T1486] bond4: entered promiscuous mode [ 340.808293][ T1486] bond4: entered allmulticast mode [ 340.813647][ T1486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.832852][ T1486] bond4 (unregistering): Released all slaves [ 341.154961][ T1518] loop8: detected capacity change from 0 to 8192 [ 341.378579][ T1530] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 341.386205][ T1530] FAT-fs (loop8): Filesystem has been set read-only [ 341.410853][ T1518] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 341.427095][ T1518] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 341.574407][ T1561] loop8: detected capacity change from 0 to 128 [ 341.586092][ T1561] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.616270][T18718] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.728430][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13564'. [ 341.773904][ T1583] loop7: detected capacity change from 0 to 256 [ 341.824728][ T1576] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 341.832587][ T1576] FAT-fs (loop7): Filesystem has been set read-only [ 342.003340][ T1606] loop7: detected capacity change from 0 to 1024 [ 342.012425][ T1608] veth0: entered promiscuous mode [ 342.012696][ T1606] EXT4-fs: Ignoring removed orlov option [ 342.025040][ T1607] veth0: left promiscuous mode [ 342.040676][ T1606] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 342.079527][ T1606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.188401][ T1616] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 342.195023][ T1616] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.202843][ T1616] vhci_hcd vhci_hcd.0: Device attached [ 342.212856][ T1617] loop6: detected capacity change from 0 to 128 [ 342.222044][ T1617] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.234219][ T1618] vhci_hcd: connection closed [ 342.236249][ T6871] vhci_hcd: stop threads [ 342.246544][ T6871] vhci_hcd: release socket [ 342.250966][ T6871] vhci_hcd: disconnect device [ 342.258939][T18683] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.280288][ T1622] loop6: detected capacity change from 0 to 1024 [ 342.288568][ T1622] EXT4-fs: inline encryption not supported [ 342.294464][ T1622] EXT4-fs: Ignoring removed i_version option [ 342.318285][ T1622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.340897][ T1622] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 342.371452][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.712083][ T1627] bond4: entered promiscuous mode [ 342.717222][ T1627] bond4: entered allmulticast mode [ 342.722535][ T1627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.747837][ T1627] bond4 (unregistering): Released all slaves [ 342.770693][ T1637] loop8: detected capacity change from 0 to 764 [ 342.780449][ T1637] Symlink component flag not implemented [ 342.788040][ T1637] Symlink component flag not implemented (129) [ 342.796064][ T1637] rock: directory entry would overflow storage [ 342.802344][ T1637] rock: sig=0x4f50, size=4, remaining=3 [ 342.809327][ T1637] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 342.843035][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.969376][ T1672] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13612'. [ 343.028139][ T1682] netlink: 'syz.0.13605': attribute type 1 has an invalid length. [ 343.038271][ T1686] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 343.044822][ T1686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.052645][ T1686] vhci_hcd vhci_hcd.0: Device attached [ 343.060696][ T1687] vhci_hcd: connection closed [ 343.060928][ T6861] vhci_hcd: stop threads [ 343.070078][ T6861] vhci_hcd: release socket [ 343.074621][ T6861] vhci_hcd: disconnect device [ 343.740019][ T1690] bond4: entered promiscuous mode [ 343.745123][ T1690] bond4: entered allmulticast mode [ 343.750390][ T1690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.760401][ T1690] bond4 (unregistering): Released all slaves [ 343.836383][ T1707] loop1: detected capacity change from 0 to 128 [ 343.853896][ T1707] EXT4-fs: Ignoring removed nobh option [ 343.861836][ T1707] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.903889][ T1709] loop6: detected capacity change from 0 to 512 [ 343.922574][ T1709] EXT4-fs (loop6): orphan cleanup on readonly fs [ 343.929435][ T1709] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.13616: Failed to acquire dquot type 1 [ 343.942568][ T1709] EXT4-fs (loop6): 1 truncate cleaned up [ 343.948994][ T1709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.978330][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.996031][ T1724] loop7: detected capacity change from 0 to 512 [ 344.003426][T13602] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.015708][ T1730] loop6: detected capacity change from 0 to 128 [ 344.015882][ T1726] loop8: detected capacity change from 0 to 512 [ 344.030018][ T1724] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.13623: casefold flag without casefold feature [ 344.045470][ T1730] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.058372][ T1724] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.13623: couldn't read orphan inode 15 (err -117) [ 344.078921][ T1724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.100147][ T1726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 344.112714][ T1736] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 344.112736][ T1736] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 344.112806][ T1736] vhci_hcd vhci_hcd.0: Device attached [ 344.113870][ T1739] vhci_hcd: connection closed [ 344.116191][ T6894] vhci_hcd: stop threads [ 344.142545][ T6894] vhci_hcd: release socket [ 344.147006][ T6894] vhci_hcd: disconnect device [ 344.147327][ T1743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1743 comm=syz.0.13628 [ 344.177298][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.187534][T18683] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.282592][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.321393][ T1749] bond2: entered promiscuous mode [ 344.326508][ T1749] bond2: entered allmulticast mode [ 344.331909][ T1749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.346596][ T1749] bond2 (unregistering): Released all slaves [ 344.547126][ T1777] loop7: detected capacity change from 0 to 512 [ 344.566387][ T1777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 344.613720][T18664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.687554][ T1804] loop1: detected capacity change from 0 to 512 [ 344.696824][ T1804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.713455][ T1804] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 344.730861][ T1804] EXT4-fs (loop1): 1 truncate cleaned up [ 344.737194][ T1804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.738260][ T1801] bond2: entered promiscuous mode [ 344.756444][ T1801] bond2: entered allmulticast mode [ 344.765895][ T1801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.787224][ T1801] bond2 (unregistering): Released all slaves [ 344.832198][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.854497][ T1820] __nla_validate_parse: 1 callbacks suppressed [ 344.854512][ T1820] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13659'. [ 344.855061][ T1822] loop6: detected capacity change from 0 to 1024 [ 344.879336][ T1822] EXT4-fs: inline encryption not supported [ 344.885313][ T1822] EXT4-fs: Ignoring removed i_version option [ 344.916586][ T1822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.966245][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.021954][ T1851] loop6: detected capacity change from 0 to 512 [ 345.028908][ T1851] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.061877][ T1851] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 345.119807][ T1851] EXT4-fs (loop6): 1 truncate cleaned up [ 345.137455][ T1851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.167632][ T1863] bond4: entered promiscuous mode [ 345.172778][ T1863] bond4: entered allmulticast mode [ 345.184237][ T1863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.211096][ T1863] bond4 (unregistering): Released all slaves [ 345.230156][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.260875][ T1874] netlink: 116 bytes leftover after parsing attributes in process `syz.6.13682'. [ 345.315481][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 345.315494][ T29] audit: type=1326 audit(1049690.489:29037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.8.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 345.361007][ T29] audit: type=1326 audit(1049690.519:29038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.8.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 345.385643][ T29] audit: type=1326 audit(1049690.519:29039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.8.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 345.408808][ T29] audit: type=1326 audit(1049690.519:29040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.8.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 345.433780][ T29] audit: type=1326 audit(1049690.519:29041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.8.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 345.526101][ T1899] syzkaller1: entered promiscuous mode [ 345.531710][ T1899] syzkaller1: entered allmulticast mode [ 345.561731][ T29] audit: type=1326 audit(1049690.729:29042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 345.586539][ T29] audit: type=1326 audit(1049690.729:29043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 345.610860][ T29] audit: type=1326 audit(1049690.779:29044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 345.635534][ T29] audit: type=1326 audit(1049690.779:29045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 345.658939][ T29] audit: type=1326 audit(1049690.779:29046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 345.729595][ T1910] bond4: entered promiscuous mode [ 345.734720][ T1910] bond4: entered allmulticast mode [ 345.740127][ T1910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.762147][ T1910] bond4 (unregistering): Released all slaves [ 345.861833][ T1932] loop8: detected capacity change from 0 to 512 [ 345.870387][ T1935] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.874620][ T1932] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 345.907794][ T1932] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 345.927055][ T1932] EXT4-fs (loop8): 1 truncate cleaned up [ 346.048142][ T1960] bond2: entered promiscuous mode [ 346.053467][ T1960] bond2: entered allmulticast mode [ 346.065741][ T1960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.085228][ T1960] bond2 (unregistering): Released all slaves [ 346.315509][ T2014] geneve2: entered promiscuous mode [ 346.320791][ T2014] geneve2: entered allmulticast mode [ 346.984090][ T2086] netlink: 'syz.8.13776': attribute type 5 has an invalid length. [ 347.078913][ T2095] 9pnet: Could not find request transport: f [ 347.159366][ T2105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13782'. [ 347.311495][ T2124] netlink: 'syz.6.13794': attribute type 4 has an invalid length. [ 347.320859][ T2124] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.13794'. [ 347.820696][ T2171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13815'. [ 347.829742][ T2171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13815'. [ 347.843426][ T6894] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.859257][ T2174] rdma_op ffff88812b30d580 conn xmit_rdma 0000000000000000 [ 347.868743][ T6894] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.890001][ T6894] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.900644][ T6894] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.055129][ T2196] loop8: detected capacity change from 0 to 1024 [ 348.065212][ T2194] geneve2: entered promiscuous mode [ 348.070450][ T2194] geneve2: entered allmulticast mode [ 348.323065][ T2217] loop8: detected capacity change from 0 to 512 [ 348.335454][ T2217] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 348.373360][ T2217] EXT4-fs (loop8): 1 truncate cleaned up [ 348.525925][ T2246] geneve2: entered promiscuous mode [ 348.531228][ T2246] geneve2: entered allmulticast mode [ 348.563871][ T2254] loop8: detected capacity change from 0 to 512 [ 348.585456][ T2254] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.13853: casefold flag without casefold feature [ 348.606723][ T2254] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13853: couldn't read orphan inode 15 (err -117) [ 348.631764][ T2260] atomic_op ffff88811845ad28 conn xmit_atomic 0000000000000000 [ 348.919125][ T2295] loop7: detected capacity change from 0 to 1024 [ 350.162731][ T2461] netlink: 'syz.7.13899': attribute type 10 has an invalid length. [ 350.204519][ T2461] syz_tun: entered promiscuous mode [ 350.214997][ T2464] netlink: 'syz.7.13899': attribute type 10 has an invalid length. [ 350.232724][ T2461] syz_tun: entered allmulticast mode [ 350.265422][ T2461] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 350.323371][ T2464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.356775][ T2464] team0: Port device bond0 added [ 350.484217][ T2484] loop7: detected capacity change from 0 to 128 [ 350.497248][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 350.497265][ T29] audit: type=1400 audit(1049695.661:29264): avc: denied { mount } for pid=2483 comm="syz.7.13908" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 350.560028][ T29] audit: type=1400 audit(1049695.692:29265): avc: denied { read } for pid=2483 comm="syz.7.13908" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.564550][T18664] FAT-fs (loop7): error, invalid access to FAT (entry 0xffff0000) [ 350.584769][ T29] audit: type=1400 audit(1049695.692:29266): avc: denied { open } for pid=2483 comm="syz.7.13908" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.591153][T18664] FAT-fs (loop7): Filesystem has been set read-only [ 350.622838][ T29] audit: type=1400 audit(1049695.702:29267): avc: denied { mounton } for pid=2483 comm="syz.7.13908" path="/1488/file0/file0" dev="loop7" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 350.647341][ T29] audit: type=1400 audit(1049695.702:29268): avc: denied { ioctl } for pid=2483 comm="syz.7.13908" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.677810][ T2493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13909'. [ 350.722710][ T2496] loop6: detected capacity change from 0 to 512 [ 350.731332][T18664] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 350.737787][ T2496] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 350.739035][T18664] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 350.758717][ T29] audit: type=1400 audit(1049695.732:29269): avc: denied { unmount } for pid=18664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 350.801146][ T2496] EXT4-fs (loop6): 1 truncate cleaned up [ 350.945104][ T29] audit: type=1400 audit(1049696.112:29270): avc: denied { create } for pid=2511 comm="syz.6.13919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 351.010013][ T29] audit: type=1400 audit(1049696.112:29271): avc: denied { connect } for pid=2511 comm="syz.6.13919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 351.029777][ T29] audit: type=1400 audit(1049696.112:29272): avc: denied { ioctl } for pid=2511 comm="syz.6.13919" path="socket:[109254]" dev="sockfs" ino=109254 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 351.120763][ T29] audit: type=1400 audit(1049696.202:29273): avc: denied { mac_admin } for pid=2510 comm="syz.0.13920" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.205706][ T2525] loop6: detected capacity change from 0 to 1764 [ 351.368067][T29357] bond0: (slave syz_tun): Releasing backup interface [ 351.383480][T29357] syz_tun (unregistering): left allmulticast mode [ 351.685720][ T2555] chnl_net:caif_netlink_parms(): no params data found [ 351.727308][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.734540][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.743114][ T2555] bridge_slave_0: entered allmulticast mode [ 351.769145][ T2555] bridge_slave_0: entered promiscuous mode [ 351.777402][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.784525][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.793447][ T2555] bridge_slave_1: entered allmulticast mode [ 351.800125][ T2555] bridge_slave_1: entered promiscuous mode [ 351.826651][ T2555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.838969][ T2555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.852664][ T2584] hub 9-0:1.0: USB hub found [ 351.860640][ T2584] hub 9-0:1.0: 8 ports detected [ 351.867461][ T2555] team0: Port device team_slave_0 added [ 351.874125][ T2555] team0: Port device team_slave_1 added [ 351.894257][ T2555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.901275][ T2555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.927232][ T2555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.938730][ T2555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.945728][ T2555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.971739][ T2555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.005461][ T2555] hsr_slave_0: entered promiscuous mode [ 352.011820][ T2555] hsr_slave_1: entered promiscuous mode [ 352.018993][ T2555] debugfs: 'hsr0' already exists in 'hsr' [ 352.024861][ T2555] Cannot create hsr debugfs directory [ 352.152017][ T2601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13955'. [ 352.158443][ T2555] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 352.182789][ T2555] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 352.197716][ T2555] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 352.204954][ T2603] sctp: [Deprecated]: syz.8.13956 (pid 2603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.204954][ T2603] Use struct sctp_sack_info instead [ 352.231386][ T2555] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.273856][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.280976][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.288401][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.295552][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.353194][ T2555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.371490][ T2555] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.387340][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.404949][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.412053][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.559752][ T2555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.661203][ T2659] loop6: detected capacity change from 0 to 512 [ 352.694668][ T2659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13975: bg 0: block 248: padding at end of block bitmap is not set [ 352.712653][ T2659] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.13975: Failed to acquire dquot type 1 [ 352.726547][ T2659] EXT4-fs (loop6): 1 truncate cleaned up [ 352.735975][ T2659] EXT4-fs (loop6): shut down requested (1) [ 352.764576][ T2672] netlink: 'syz.6.13977': attribute type 10 has an invalid length. [ 352.800458][ T2672] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.807990][ T2672] bridge_slave_1: left allmulticast mode [ 352.813703][ T2672] bridge_slave_1: left promiscuous mode [ 352.819456][ T2672] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.835918][ T2672] bridge_slave_1: entered promiscuous mode [ 352.841855][ T2672] bridge_slave_1: entered allmulticast mode [ 352.848451][ T2672] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 352.868873][ T2555] veth0_vlan: entered promiscuous mode [ 352.882398][ T2555] veth1_vlan: entered promiscuous mode [ 352.898083][ T2555] veth0_macvtap: entered promiscuous mode [ 352.906882][ T2555] veth1_macvtap: entered promiscuous mode [ 352.917942][ T2555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.930804][ T2555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.941657][ T6863] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.960162][ T6863] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.971997][ T6863] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.992621][ T6863] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.015670][ T2679] loop6: detected capacity change from 0 to 1024 [ 353.025009][ T2679] EXT4-fs: Ignoring removed bh option [ 353.032588][ T2680] netlink: 'syz.9.13942': attribute type 10 has an invalid length. [ 353.034038][ T2679] EXT4-fs: inline encryption not supported [ 353.047374][ T2680] team0: Port device dummy0 added [ 353.056310][ T2680] netlink: 'syz.9.13942': attribute type 10 has an invalid length. [ 353.064750][ T2679] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.078389][ T2679] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.13988: lblock 2 mapped to illegal pblock 2 (length 1) [ 353.093232][ T2680] team0: Port device dummy0 removed [ 353.100328][ T2679] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.13988: lblock 0 mapped to illegal pblock 48 (length 1) [ 353.109847][ T2680] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 353.125995][ T2679] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.13988: Failed to acquire dquot type 0 [ 353.138887][ T2679] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 353.148494][ T2679] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.13988: mark_inode_dirty error [ 353.160127][ T2679] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 353.171773][ T2679] EXT4-fs (loop6): 1 orphan inode deleted [ 353.188870][ T6863] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 353.212477][ T6863] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 353.224582][ T2679] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.13988: lblock 0 mapped to illegal pblock 16 (length 1) [ 353.269586][ T2679] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.13988: Invalid inode table block 1 in block_group 0 [ 353.289989][ T2679] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 353.305250][ T2679] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.13988: mark_inode_dirty error [ 353.351713][ T2688] openvswitch: netlink: Message has 6 unknown bytes. [ 353.358727][ T2686] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.13988: Invalid inode table block 1 in block_group 0 [ 353.382779][ T2686] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 353.392753][ T2686] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.13988: mark_inode_dirty error [ 353.414736][ T2690] netlink: 'syz.9.13982': attribute type 10 has an invalid length. [ 353.426478][ T2692] netlink: 'syz.8.13983': attribute type 1 has an invalid length. [ 353.435971][ T2690] syz_tun: entered promiscuous mode [ 353.444735][ T2690] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 353.453796][ T6863] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm kworker/u8:18: Invalid inode table block 1 in block_group 0 [ 353.463840][ T2690] netlink: 'syz.9.13982': attribute type 10 has an invalid length. [ 353.477282][ T2690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.494976][ T2690] team0: Port device bond0 added [ 353.703310][ T2715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13993'. [ 354.020846][ T2737] sctp: [Deprecated]: syz.9.14001 (pid 2737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.020846][ T2737] Use struct sctp_sack_info instead [ 354.151017][ T6894] tipc: Subscription rejected, illegal request [ 354.174788][ T2745] loop8: detected capacity change from 0 to 1024 [ 354.181939][ T2745] EXT4-fs: Ignoring removed oldalloc option [ 354.191511][ T2745] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 354.325169][ T2757] loop8: detected capacity change from 0 to 1024 [ 354.355496][ T2757] EXT4-fs: Ignoring removed bh option [ 354.376717][ T2757] EXT4-fs: inline encryption not supported [ 354.396873][ T2757] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.441942][ T2757] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.14012: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.479618][ T2757] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.14012: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.521952][ T2766] loop9: detected capacity change from 0 to 512 [ 354.545301][ T2757] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.14012: Failed to acquire dquot type 0 [ 354.580542][ T2766] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.14016: invalid block [ 354.605835][ T2757] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 354.620334][ T2766] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.14016: invalid indirect mapped block 4294967295 (level 1) [ 354.635555][ T2757] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.14012: mark_inode_dirty error [ 354.646986][ T2766] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.14016: invalid indirect mapped block 4294967295 (level 1) [ 354.662725][ T2757] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 354.673290][ T2766] EXT4-fs (loop9): 2 truncates cleaned up [ 354.681364][ T2757] EXT4-fs (loop8): 1 orphan inode deleted [ 354.701232][ T6861] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.713273][ T2757] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 16: comm syz.8.14012: lblock 0 mapped to illegal pblock 16 (length 1) [ 354.730259][ T6861] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 0 [ 354.745723][ T2757] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz.8.14012: Invalid inode table block 1 in block_group 0 [ 354.789232][ T2757] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 354.804320][ T2757] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.14012: mark_inode_dirty error [ 354.826451][ T2777] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz.8.14012: Invalid inode table block 1 in block_group 0 [ 354.861468][ T2777] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 354.873512][ T2783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14021'. [ 354.883887][ T2777] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.14012: mark_inode_dirty error [ 354.951620][ T6863] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm kworker/u8:18: Invalid inode table block 1 in block_group 0 [ 355.063315][ T3391] kernel write not supported for file /3192/sched (pid: 3391 comm: kworker/1:3) [ 355.277805][ T2829] openvswitch: netlink: Message has 6 unknown bytes. [ 355.542266][ T2852] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 355.542266][ T2852] program syz.1.14053 not setting count and/or reply_len properly [ 355.706042][ T2863] ip6gretap1: entered promiscuous mode [ 355.711743][ T2863] ip6gretap1: entered allmulticast mode [ 355.725889][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 355.725971][ T29] audit: type=1326 audit(1049700.894:29425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 355.766102][ T29] audit: type=1326 audit(1049700.934:29426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 355.790891][ T29] audit: type=1326 audit(1049700.934:29427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 355.814252][ T29] audit: type=1326 audit(1049700.934:29428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 355.839035][ T29] audit: type=1326 audit(1049700.934:29429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 355.879405][ T2868] loop1: detected capacity change from 0 to 1024 [ 355.886182][ T2868] EXT4-fs: Ignoring removed oldalloc option [ 355.895671][ T2868] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 355.911273][ T29] audit: type=1326 audit(1049701.084:29430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2866 comm="syz.6.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 355.935936][ T29] audit: type=1326 audit(1049701.084:29431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2866 comm="syz.6.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 355.967259][ T29] audit: type=1326 audit(1049701.134:29432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2866 comm="syz.6.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 355.991855][ T29] audit: type=1326 audit(1049701.134:29433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2866 comm="syz.6.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 356.041962][ T2868] EXT4-fs mount: 22 callbacks suppressed [ 356.041978][ T2868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.128802][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.150029][ T29] audit: type=1326 audit(1049701.324:29434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2880 comm="syz.1.14064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39761ebe9 code=0x7ffc0000 [ 356.175391][ T2882] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.14063'. [ 356.185190][ T2878] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.14063'. [ 356.262262][ T2892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14069'. [ 356.343680][ T2909] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 356.539622][ T2942] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.662208][ T2966] netem: change failed [ 357.403132][ T3021] syzkaller1: entered promiscuous mode [ 357.408762][ T3021] syzkaller1: entered allmulticast mode [ 357.485157][ T3029] loop6: detected capacity change from 0 to 1024 [ 357.508484][ T3029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.556298][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.625054][ T3047] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 357.719266][ T3059] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.738969][ T3059] vhci_hcd: invalid port number 253 [ 357.744304][ T3059] vhci_hcd: invalid port number 253 [ 358.135354][ T3091] loop8: detected capacity change from 0 to 512 [ 358.154659][ T3091] EXT4-fs: Ignoring removed oldalloc option [ 358.164299][ T3091] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 358.182799][ T3091] EXT4-fs (loop8): 1 truncate cleaned up [ 358.191873][ T3091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.250821][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.409987][ T3117] SELinux: policydb version 0 does not match my version range 15-35 [ 358.418704][ T3117] SELinux: failed to load policy [ 358.491067][ T3130] loop6: detected capacity change from 0 to 736 [ 358.507639][ T3130] iso9660: Bad value for 'dmode' [ 358.687073][ T3153] loop8: detected capacity change from 0 to 1024 [ 358.693786][ T3153] journal_path: Non-blockdev passed as './file0' [ 358.701461][ T3153] EXT4-fs: error: could not find journal device path [ 358.811925][ T3159] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14189'. [ 358.821118][ T3159] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14189'. [ 358.844617][ T3161] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 358.853281][ T3161] SELinux: failed to load policy [ 358.893041][ T3167] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 359.304111][ T3203] loop9: detected capacity change from 0 to 512 [ 359.329173][ T3203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.365445][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.462413][ T3220] netlink: 'syz.8.14216': attribute type 1 has an invalid length. [ 359.470470][ T3220] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 359.489687][ T3221] netlink: 'syz.9.14217': attribute type 2 has an invalid length. [ 359.499079][ T3221] netlink: 'syz.9.14217': attribute type 1 has an invalid length. [ 359.506993][ T3221] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.14217'. [ 359.517007][ T3223] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 359.554172][ T3227] loop6: detected capacity change from 0 to 1024 [ 359.565038][ T3227] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 359.576034][ T3227] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 359.604505][ T3227] JBD2: no valid journal superblock found [ 359.610508][ T3227] EXT4-fs (loop6): Could not load journal inode [ 359.632031][ T3227] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 359.752286][ T3246] loop9: detected capacity change from 0 to 1024 [ 359.764634][ T3246] EXT4-fs: Ignoring removed orlov option [ 359.770428][ T3246] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.782680][ T3246] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 359.813460][ T3246] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.960727][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.170904][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14243'. [ 360.181496][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14243'. [ 360.210701][ T3286] loop9: detected capacity change from 0 to 512 [ 360.229019][ T3286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.260055][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.360477][ T3315] loop1: detected capacity change from 0 to 512 [ 360.368993][ T3315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.396692][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.477935][ T3338] random: crng reseeded on system resumption [ 360.653402][ T3387] loop8: detected capacity change from 0 to 1024 [ 360.669780][ T3387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.711549][ T3387] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.14271: Allocating blocks 449-513 which overlap fs metadata [ 360.729839][ T3386] EXT4-fs (loop8): pa ffff888106e4cd20: logic 48, phys. 177, len 21 [ 360.737971][ T3386] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 360.767006][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.831020][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 360.831037][ T29] audit: type=1326 audit(1049706.007:29544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="syz.8.14276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 360.897120][ T29] audit: type=1326 audit(1049706.037:29545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="syz.8.14276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 360.920673][ T29] audit: type=1326 audit(1049706.037:29546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="syz.8.14276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4c6ebe9 code=0x7ffc0000 [ 360.969960][ T3437] loop0: detected capacity change from 0 to 1024 [ 360.989191][ T29] audit: type=1400 audit(1049706.077:29547): avc: denied { connect } for pid=3431 comm="syz.8.14279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 361.008748][ T29] audit: type=1400 audit(1049706.127:29548): avc: denied { write } for pid=3431 comm="syz.8.14279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 361.046221][ T3437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.072642][ T29] audit: type=1400 audit(1049706.237:29549): avc: denied { setattr } for pid=3436 comm="syz.0.14280" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.124679][ T29] audit: type=1400 audit(1049706.287:29550): avc: denied { unlink } for pid=3436 comm="syz.0.14280" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.261318][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.284923][ T29] audit: type=1400 audit(1049706.397:29551): avc: denied { lock } for pid=3472 comm="syz.9.14283" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=112707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 361.321591][ T3480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 361.366909][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 361.386199][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 361.417693][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 361.464323][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 361.481039][ T3494] netlink: 'syz.9.14294': attribute type 3 has an invalid length. [ 361.488934][ T3494] netlink: 13435 bytes leftover after parsing attributes in process `syz.9.14294'. [ 361.489258][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 361.569157][ T3510] loop8: detected capacity change from 0 to 512 [ 361.570328][ T3508] loop9: detected capacity change from 0 to 512 [ 361.580240][ T3512] loop6: detected capacity change from 0 to 512 [ 361.606260][ T3510] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 361.615084][ T3508] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 361.625311][ T3516] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 361.626788][ T3508] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 361.659258][ T3510] loop8: detected capacity change from 0 to 128 [ 361.667413][ T3510] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.668969][ T3512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.692395][ T3510] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.710224][ T3508] EXT4-fs (loop9): mount failed [ 361.731174][ T6852] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.802029][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.819225][ T3537] loop8: detected capacity change from 0 to 1024 [ 361.840710][ T3537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.873338][ T3549] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 361.873441][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.582213][ T29] audit: type=1326 audit(1049707.758:29552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.6.14324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 362.688911][ T3592] sctp: [Deprecated]: syz.0.14330 (pid 3592) Use of int in maxseg socket option. [ 362.688911][ T3592] Use struct sctp_assoc_value instead [ 362.750528][ T3597] loop0: detected capacity change from 0 to 1024 [ 362.761559][ T3597] EXT4-fs: Ignoring removed orlov option [ 362.767279][ T3597] EXT4-fs: Ignoring removed mblk_io_submit option [ 362.776593][ T3597] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 362.797024][ T3597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.930622][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.998530][ T3619] loop8: detected capacity change from 0 to 512 [ 363.063200][ T3634] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 363.063200][ T3634] program syz.0.14348 not setting count and/or reply_len properly [ 363.105772][ T3640] loop8: detected capacity change from 0 to 1024 [ 363.116652][ T3640] EXT4-fs: Ignoring removed orlov option [ 363.122420][ T3640] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.122554][ T3639] loop9: detected capacity change from 0 to 1024 [ 363.130568][ T3640] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 363.148389][ T3639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.170947][ T9] hid_parser_main: 113 callbacks suppressed [ 363.171013][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.184476][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.191872][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.199361][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.206786][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.214219][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.221651][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.229094][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.236523][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.244084][ T9] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 363.252906][ T9] hid-generic 0000:0000:0008.0008: hidraw0: HID vc.87 Device [syz0] on syz1 [ 363.253309][ T3640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.280709][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.456341][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.521633][ T3678] loop9: detected capacity change from 0 to 512 [ 363.543953][ T3678] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 363.560105][ T3678] loop9: detected capacity change from 0 to 128 [ 363.567804][ T3678] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 363.595056][ T3678] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.645578][ T6889] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.658129][ T3697] loop6: detected capacity change from 0 to 1024 [ 363.670395][ T3696] Invalid ELF header magic: != ELF [ 363.673756][ T3700] loop0: detected capacity change from 0 to 512 [ 363.693715][ T3697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.694222][ T3700] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.732643][ T3700] EXT4-fs (loop0): mount failed [ 363.733272][ T3709] netlink: 108 bytes leftover after parsing attributes in process `syz.9.14379'. [ 363.748101][ T3709] netlink: 108 bytes leftover after parsing attributes in process `syz.9.14379'. [ 363.748259][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.757356][ T3709] netlink: 108 bytes leftover after parsing attributes in process `syz.9.14379'. [ 363.826398][ T3713] netlink: 'syz.8.14381': attribute type 13 has an invalid length. [ 363.942364][ T6852] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.963522][ T6852] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.974593][ T6852] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.983906][ T6852] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.030520][ T3735] loop6: detected capacity change from 0 to 1024 [ 364.039987][ T3735] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 364.050964][ T3735] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 364.064047][ T3735] JBD2: no valid journal superblock found [ 364.069799][ T3735] EXT4-fs (loop6): Could not load journal inode [ 364.091553][ T3741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14393'. [ 364.216778][ T3735] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 364.947384][ T3813] loop8: detected capacity change from 0 to 2048 [ 364.965956][ T3813] EXT4-fs (loop8): failed to initialize system zone (-117) [ 364.978359][ T3813] EXT4-fs (loop8): mount failed [ 365.038184][ T3822] netlink: 'syz.8.14429': attribute type 25 has an invalid length. [ 365.046880][ T3822] netlink: 'syz.8.14429': attribute type 8 has an invalid length. [ 365.309773][ T3834] loop1: detected capacity change from 0 to 128 [ 365.850342][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 365.850366][ T29] audit: type=1326 audit(1049711.029:29636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.9.14458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 365.881634][ T29] audit: type=1326 audit(1049711.029:29637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.9.14458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 365.906678][ T29] audit: type=1326 audit(1049711.029:29638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.9.14458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 365.930197][ T29] audit: type=1326 audit(1049711.029:29639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.9.14458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 365.953753][ T29] audit: type=1326 audit(1049711.029:29640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.9.14458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 366.112228][ T3908] netlink: 'syz.9.14467': attribute type 13 has an invalid length. [ 366.248200][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.255461][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.380930][ T3918] loop1: detected capacity change from 0 to 1024 [ 366.413840][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.440029][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.457018][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.562831][ T6894] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.573609][ T6894] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.634729][ T6894] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.656686][ T29] audit: type=1326 audit(1049711.830:29641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 366.672042][ T6894] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.680261][ T29] audit: type=1326 audit(1049711.830:29642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 366.725419][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.764787][ T29] audit: type=1326 audit(1049711.890:29643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 366.789803][ T29] audit: type=1326 audit(1049711.890:29644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 366.815006][ T29] audit: type=1326 audit(1049711.890:29645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee66bebe9 code=0x7ffc0000 [ 366.865738][ T3941] loop9: detected capacity change from 0 to 512 [ 366.896140][ T3941] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.14481: iget: bad i_size value: 38620345925642 [ 366.921952][ T3941] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.14481: couldn't read orphan inode 15 (err -117) [ 366.959205][ T3941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.982104][ T3956] loop0: detected capacity change from 0 to 4096 [ 367.016078][ T3956] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 367.045022][ T3960] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.14481: bg 0: block 5: invalid block bitmap [ 367.092177][ T3956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.095877][ T3960] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 367.118549][ T3960] EXT4-fs (loop9): This should not happen!! Data will be lost [ 367.118549][ T3960] [ 367.128305][ T3960] EXT4-fs (loop9): Total free blocks count 0 [ 367.135640][ T3960] EXT4-fs (loop9): Free/Dirty block details [ 367.141550][ T3960] EXT4-fs (loop9): free_blocks=0 [ 367.146629][ T3960] EXT4-fs (loop9): dirty_blocks=2120 [ 367.151964][ T3960] EXT4-fs (loop9): Block reservation details [ 367.158043][ T3960] EXT4-fs (loop9): i_reserved_data_blocks=2120 [ 367.176093][ T3956] EXT4-fs (loop0): shut down requested (2) [ 367.249034][ T6859] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 68 with error 28 [ 367.267125][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.346954][ T3993] __nla_validate_parse: 6 callbacks suppressed [ 367.346972][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14499'. [ 367.424777][ T4000] netlink: 104 bytes leftover after parsing attributes in process `syz.6.14507'. [ 367.578370][ T4021] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 367.636942][ T4022] loop0: detected capacity change from 0 to 4096 [ 367.657334][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.747940][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.762455][ T4033] netlink: 'syz.1.14521': attribute type 13 has an invalid length. [ 367.817686][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.825017][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.065043][ T6859] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.075337][ T6859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.112775][ T6859] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.121768][ T6859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.161265][ T6889] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.170259][ T6889] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.181467][ T6889] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.190414][ T6889] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.396435][ T4075] loop9: detected capacity change from 0 to 4096 [ 368.413105][ T4075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.458709][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.640504][ T4104] openvswitch: netlink: Message has 6 unknown bytes. [ 368.817596][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14566'. [ 368.846826][ T4137] loop6: detected capacity change from 0 to 512 [ 368.855652][ T4137] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 368.870589][ T4137] EXT4-fs (loop6): 1 truncate cleaned up [ 368.876926][ T4137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.889238][ T4144] loop1: detected capacity change from 0 to 512 [ 368.915102][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.929391][ T4144] EXT4-fs: test_dummy_encryption option not supported [ 368.964629][ T4156] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 368.993001][ T4160] loop9: detected capacity change from 0 to 256 [ 369.018424][ T4160] FAT-fs (loop9): Directory bread(block 64) failed [ 369.036432][ T4160] FAT-fs (loop9): Directory bread(block 65) failed [ 369.068515][ T4160] FAT-fs (loop9): Directory bread(block 66) failed [ 369.077156][ T4160] FAT-fs (loop9): Directory bread(block 67) failed [ 369.084760][ T4160] FAT-fs (loop9): Directory bread(block 68) failed [ 369.092107][ T4160] FAT-fs (loop9): Directory bread(block 69) failed [ 369.098738][ T4160] FAT-fs (loop9): Directory bread(block 70) failed [ 369.107314][ T4160] FAT-fs (loop9): Directory bread(block 71) failed [ 369.115102][ T4160] FAT-fs (loop9): Directory bread(block 72) failed [ 369.123516][ T4160] FAT-fs (loop9): Directory bread(block 73) failed [ 369.200949][ T4185] netlink: 'syz.9.14589': attribute type 21 has an invalid length. [ 369.208911][ T4185] netlink: 132 bytes leftover after parsing attributes in process `syz.9.14589'. [ 369.219562][ T4185] netlink: 'syz.9.14589': attribute type 1 has an invalid length. [ 369.245823][ T4191] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14592'. [ 369.276950][ T4195] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14594'. [ 369.437085][ T4210] sd 0:0:1:0: device reset [ 369.450901][ T4212] geneve1: entered promiscuous mode [ 369.458747][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14602'. [ 369.531461][ T4214] netlink: 'syz.0.14600': attribute type 13 has an invalid length. [ 369.704724][ T4244] loop6: detected capacity change from 0 to 256 [ 369.769533][ T4244] FAT-fs (loop6): Directory bread(block 64) failed [ 369.787930][ T4244] FAT-fs (loop6): Directory bread(block 65) failed [ 369.804996][ T4244] FAT-fs (loop6): Directory bread(block 66) failed [ 369.806236][ T4248] loop9: detected capacity change from 0 to 512 [ 369.830231][ T4248] EXT4-fs (loop9): failed to initialize system zone (-117) [ 369.836447][ T4244] FAT-fs (loop6): Directory bread(block 67) failed [ 369.839636][ T4248] EXT4-fs (loop9): mount failed [ 369.860344][ T4244] FAT-fs (loop6): Directory bread(block 68) failed [ 369.870441][ T4244] FAT-fs (loop6): Directory bread(block 69) failed [ 369.891656][ T4244] FAT-fs (loop6): Directory bread(block 70) failed [ 369.920438][ T4244] FAT-fs (loop6): Directory bread(block 71) failed [ 369.927413][ T4244] FAT-fs (loop6): Directory bread(block 72) failed [ 369.940306][ T4244] FAT-fs (loop6): Directory bread(block 73) failed [ 370.007557][ T4263] loop9: detected capacity change from 0 to 2048 [ 370.045168][ T4263] Alternate GPT is invalid, using primary GPT. [ 370.051602][ T4263] loop9: p2 p3 p7 [ 370.084561][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14635'. [ 370.093503][ T4281] vhci_hcd: default hub control req: 4018 v0800 i0003 l0 [ 370.119933][ T4284] binfmt_misc: register: failed to install interpreter file ./file2 [ 370.157784][ T4288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.169930][ T4288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.174016][ T4291] loop0: detected capacity change from 0 to 256 [ 370.194560][ T4291] FAT-fs (loop0): Directory bread(block 64) failed [ 370.202948][ T4291] FAT-fs (loop0): Directory bread(block 65) failed [ 370.209531][ T4291] FAT-fs (loop0): Directory bread(block 66) failed [ 370.219347][ T4291] FAT-fs (loop0): Directory bread(block 67) failed [ 370.227446][ T4291] FAT-fs (loop0): Directory bread(block 68) failed [ 370.234196][ T4291] FAT-fs (loop0): Directory bread(block 69) failed [ 370.243512][ T4291] FAT-fs (loop0): Directory bread(block 70) failed [ 370.250658][ T4291] FAT-fs (loop0): Directory bread(block 71) failed [ 370.257326][ T4291] FAT-fs (loop0): Directory bread(block 72) failed [ 370.266558][ T4291] FAT-fs (loop0): Directory bread(block 73) failed [ 370.362628][ T4300] syzkaller1: entered promiscuous mode [ 370.368187][ T4300] syzkaller1: entered allmulticast mode [ 370.431586][ T4309] loop0: detected capacity change from 0 to 512 [ 370.439642][ T4309] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.14647: iget: bad i_size value: 38620345925642 [ 370.452620][ T4309] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.14647: couldn't read orphan inode 15 (err -117) [ 370.465237][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.535243][ T4317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.14647: bg 0: block 5: invalid block bitmap [ 370.549257][ T4317] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1900 with error 28 [ 370.561813][ T4317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 370.561813][ T4317] [ 370.565720][ T4319] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 370.571539][ T4317] EXT4-fs (loop0): Total free blocks count 0 [ 370.571604][ T4317] EXT4-fs (loop0): Free/Dirty block details [ 370.571642][ T4317] EXT4-fs (loop0): free_blocks=0 [ 370.571656][ T4317] EXT4-fs (loop0): dirty_blocks=1924 [ 370.571676][ T4317] EXT4-fs (loop0): Block reservation details [ 370.571690][ T4317] EXT4-fs (loop0): i_reserved_data_blocks=1924 [ 370.632823][ T6869] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1900 with max blocks 24 with error 28 [ 370.795782][ T4343] loop0: detected capacity change from 0 to 2048 [ 370.802982][ T4345] program syz.8.14663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.834037][ T4343] EXT4-fs (loop0): failed to initialize system zone (-117) [ 370.841480][ T4343] EXT4-fs (loop0): mount failed [ 370.912307][ T4360] loop9: detected capacity change from 0 to 512 [ 370.919128][ T4360] EXT4-fs: test_dummy_encryption option not supported [ 370.919484][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 370.919502][ T29] audit: type=1400 audit(1049716.092:29829): avc: denied { read } for pid=4354 comm="syz.6.14667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.972573][ T29] audit: type=1107 audit(1049716.132:29830): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 370.993581][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14673'. [ 371.003158][ T4369] loop0: detected capacity change from 0 to 1024 [ 371.020524][ T4367] loop9: detected capacity change from 0 to 512 [ 371.053744][ T4369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.057273][ T4367] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 371.080402][ T4367] EXT4-fs (loop9): invalid journal inode [ 371.086204][ T4367] EXT4-fs (loop9): can't get journal size [ 371.094325][ T4367] EXT4-fs (loop9): 1 truncate cleaned up [ 371.133710][ T4367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.147433][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.159355][ T29] audit: type=1400 audit(1049716.322:29831): avc: denied { write } for pid=4365 comm="syz.9.14672" path="/131/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 371.215640][ T4383] loop0: detected capacity change from 0 to 1024 [ 371.235710][ T4383] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 371.246205][ T4383] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 371.255687][ T4383] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.14679: Failed to acquire dquot type 0 [ 371.268296][ T2555] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.269032][ T4383] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 371.292051][ T4383] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.14679: corrupted inode contents [ 371.309229][ T4383] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.14679: mark_inode_dirty error [ 371.326079][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14682'. [ 371.352889][ T4383] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.14679: corrupted inode contents [ 371.372369][ T4383] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.14679: mark_inode_dirty error [ 371.385452][ T4396] lo speed is unknown, defaulting to 1000 [ 371.393318][ T4396] lo speed is unknown, defaulting to 1000 [ 371.402407][ T4383] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.14679: corrupted inode contents [ 371.417090][ T4396] lo speed is unknown, defaulting to 1000 [ 371.424638][ T4396] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 371.432874][ T4396] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 371.444265][ T4396] lo speed is unknown, defaulting to 1000 [ 371.454884][ T4383] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 371.472694][ T4396] lo speed is unknown, defaulting to 1000 [ 371.478736][ T4396] lo speed is unknown, defaulting to 1000 [ 371.486893][ T4396] lo speed is unknown, defaulting to 1000 [ 371.487076][ T4383] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.14679: corrupted inode contents [ 371.495618][ T4396] lo speed is unknown, defaulting to 1000 [ 371.506174][ T4383] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.14679: mark_inode_dirty error [ 371.511072][ T4396] lo speed is unknown, defaulting to 1000 [ 371.523647][ T4383] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 371.529940][ T4396] lo speed is unknown, defaulting to 1000 [ 371.539026][ T4383] EXT4-fs (loop0): 1 truncate cleaned up [ 371.551263][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.670742][ T29] audit: type=1326 audit(1049716.832:29832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.9.14694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 371.694177][ T29] audit: type=1326 audit(1049716.832:29833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.9.14694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 371.717523][ T29] audit: type=1326 audit(1049716.832:29834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.9.14694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 371.742591][ T29] audit: type=1326 audit(1049716.832:29835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.9.14694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 371.766004][ T29] audit: type=1326 audit(1049716.832:29836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.9.14694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da6daebe9 code=0x7ffc0000 [ 371.792823][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.887319][ T4435] cgroup: fork rejected by pids controller in /syz9 [ 371.992859][ T2555] bond0: (slave syz_tun): Releasing backup interface [ 372.037429][ T4461] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 372.141906][ T4471] ref_ctr_offset mismatch. inode: 0x25d4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 372.219287][ T4483] loop8: detected capacity change from 0 to 1024 [ 372.228100][ T4479] SELinux: security_context_str_to_sid () failed with errno=-22 [ 372.291503][ T4483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.330766][ T4499] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff [ 372.341854][ T6889] bridge_slave_1: left allmulticast mode [ 372.347565][ T6889] bridge_slave_1: left promiscuous mode [ 372.353279][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.367590][ T6889] bridge_slave_0: left allmulticast mode [ 372.374775][ T6889] bridge_slave_0: left promiscuous mode [ 372.380448][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.390788][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.460852][ T6889] team0: Port device bond0 removed [ 372.467276][ T6889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.487802][ T6889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.498508][ T6889] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 372.512477][ T6889] bond0 (unregistering): Released all slaves [ 372.517924][ T4520] loop6: detected capacity change from 0 to 512 [ 372.525358][ T4520] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 372.536477][ T4520] EXT4-fs (loop6): invalid journal inode [ 372.542319][ T4520] EXT4-fs (loop6): can't get journal size [ 372.555662][ T4520] EXT4-fs (loop6): 1 truncate cleaned up [ 372.561970][ T4520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.589204][ T4474] lo speed is unknown, defaulting to 1000 [ 372.648129][ T6889] hsr_slave_0: left promiscuous mode [ 372.655522][ T6889] hsr_slave_1: left promiscuous mode [ 372.664209][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.673035][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.674092][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.708392][ T4537] siw: device registration error -23 [ 372.751156][ T6889] team0 (unregistering): Port device team_slave_1 removed [ 372.773043][ T6889] team0 (unregistering): Port device team_slave_0 removed [ 372.882149][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 372.935134][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.942305][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.951783][ T4474] bridge_slave_0: entered allmulticast mode [ 372.958580][ T4474] bridge_slave_0: entered promiscuous mode [ 372.965514][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.972660][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.981809][ T4474] bridge_slave_1: entered allmulticast mode [ 372.988588][ T4474] bridge_slave_1: entered promiscuous mode [ 373.010260][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.020864][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.020998][T12406] kernel write not supported for file /4045/attr/exec (pid: 12406 comm: kworker/1:8) [ 373.049227][ T4572] loop0: detected capacity change from 0 to 128 [ 373.057080][ T4474] team0: Port device team_slave_0 added [ 373.064003][ T4474] team0: Port device team_slave_1 added [ 373.088073][ T4574] SELinux: failed to load policy [ 373.094384][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.101423][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.127466][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.141850][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.148970][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.176228][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.196741][ T6889] ------------[ cut here ]------------ [ 373.202368][ T6889] WARNING: CPU: 0 PID: 6889 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 373.212022][ T6889] Modules linked in: [ 373.215945][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: kworker/u8:44 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 373.228377][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.238565][ T6889] Workqueue: netns cleanup_net [ 373.243382][ T6889] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 373.248971][ T6889] Code: 48 8d bb 30 0e 00 00 e8 42 41 bd fc 48 8b bb 30 0e 00 00 e8 76 c1 c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c5 83 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 b7 83 a2 fc 90 0f 0b 90 4c 89 f7 e8 0b [ 373.268650][ T6889] RSP: 0018:ffffc9000813fc60 EFLAGS: 00010293 [ 373.274732][ T6889] RAX: ffffffff84b575fb RBX: ffff888111d4c740 RCX: ffff88811f14d280 [ 373.282744][ T6889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888111d4d540 [ 373.290820][ T6889] RBP: ffffffff86c8a460 R08: 0001ffff86847f7f R09: 0000000000000000 [ 373.298959][ T6889] R10: ffffc9000813fbe8 R11: 0001c9000813fbe8 R12: ffffffff86c8a480 [ 373.306958][ T6889] R13: ffff888111d4c768 R14: ffff888111d4d540 R15: ffff888111d4c740 [ 373.314977][ T6889] FS: 0000000000000000(0000) GS:ffff8882aee47000(0000) knlGS:0000000000000000 [ 373.323983][ T6889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.330607][ T6889] CR2: 00007fa397847dac CR3: 0000000162476000 CR4: 00000000003506f0 [ 373.338720][ T6889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.346768][ T6889] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 373.354840][ T6889] Call Trace: [ 373.358127][ T6889] [ 373.361095][ T6889] xfrm_net_exit+0x2d/0x60 [ 373.365540][ T6889] ops_undo_list+0x27b/0x410 [ 373.370224][ T6889] cleanup_net+0x2de/0x4d0 [ 373.374674][ T6889] process_scheduled_works+0x4ce/0x9d0 [ 373.380224][ T6889] worker_thread+0x582/0x770 [ 373.384949][ T6889] kthread+0x486/0x510 [ 373.389089][ T6889] ? finish_task_switch+0xad/0x2b0 [ 373.394271][ T6889] ? __pfx_worker_thread+0x10/0x10 [ 373.399602][ T6889] ? __pfx_kthread+0x10/0x10 [ 373.404255][ T6889] ret_from_fork+0xda/0x150 [ 373.408824][ T6889] ? __pfx_kthread+0x10/0x10 [ 373.413470][ T6889] ret_from_fork_asm+0x1a/0x30 [ 373.418382][ T6889] [ 373.421467][ T6889] ---[ end trace 0000000000000000 ]--- [ 373.445224][ T4584] pim6reg: entered allmulticast mode [ 373.454967][ T4590] pim6reg: left allmulticast mode [ 373.475184][ T4474] hsr_slave_0: entered promiscuous mode [ 373.482795][ T4474] hsr_slave_1: entered promiscuous mode [ 373.489776][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 373.495533][ T4474] Cannot create hsr debugfs directory [ 373.640329][ T4617] SELinux: policydb version -957581230 does not match my version range 15-35 [ 373.659511][ T4617] SELinux: failed to load policy [ 373.729356][ T4628] pim6reg: entered allmulticast mode [ 373.737358][ T4628] pim6reg: left allmulticast mode [ 373.760585][T12406] kernel write not supported for file /3582/attr/exec (pid: 12406 comm: kworker/1:8) [ 373.807932][ T4474] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 373.818276][ T4637] netlink: zone id is out of range [ 373.823066][ T4474] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 373.848844][ T4474] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 373.874801][ T4474] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 373.937364][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.953024][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.972041][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.979249][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.987075][ T4663] SELinux: policydb version -957581230 does not match my version range 15-35 [ 373.999550][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.006708][ T6889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.014767][ T4663] SELinux: failed to load policy [ 374.023922][ T4667] __nla_validate_parse: 3 callbacks suppressed [ 374.023935][ T4667] netlink: 104 bytes leftover after parsing attributes in process `syz.6.14798'. [ 374.091833][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.104247][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14805'. [ 374.150087][ T4686] pim6reg: entered allmulticast mode [ 374.160323][ T4686] pim6reg: left allmulticast mode [ 374.267296][ T4474] veth0_vlan: entered promiscuous mode [ 374.274202][ T4474] veth1_vlan: entered promiscuous mode [ 374.289456][ T4474] veth0_macvtap: entered promiscuous mode [ 374.291273][ T4474] veth1_macvtap: entered promiscuous mode [ 374.313256][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.317447][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.334744][ T6859] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.344546][ T6859] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.344591][ T6859] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.344655][ T6859] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.789032][ T4732] loop8: detected capacity change from 0 to 512 [ 374.808803][ T4732] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 374.808933][ T4732] EXT4-fs (loop8): orphan cleanup on readonly fs [ 374.809079][ T4732] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 374.809176][ T4732] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 374.809513][ T4732] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.14832: bg 0: block 40: padding at end of block bitmap is not set [ 374.860301][ T4732] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 374.860514][ T4732] EXT4-fs (loop8): 1 truncate cleaned up [ 374.860931][ T4732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.933049][ T4738] pim6reg: entered allmulticast mode [ 374.941388][ T4738] pim6reg: left allmulticast mode [ 374.953816][T18718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.270570][ T4785] loop6: detected capacity change from 0 to 512 [ 375.284059][ T4785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.315341][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.438185][ T4803] loop9: detected capacity change from 0 to 8192 [ 375.634679][ T4851] netlink: 100 bytes leftover after parsing attributes in process `syz.6.14875'. [ 375.822327][ T4879] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff [ 375.934377][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 375.934396][ T29] audit: type=1326 audit(1049721.114:29986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.9.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc904ebe9 code=0x7ffc0000 [ 375.970803][ T29] audit: type=1326 audit(1049721.114:29987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.9.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc904ebe9 code=0x7ffc0000 [ 375.994245][ T29] audit: type=1326 audit(1049721.114:29988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.9.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fddc904ebe9 code=0x7ffc0000 [ 376.017528][ T29] audit: type=1326 audit(1049721.114:29989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.9.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc904ebe9 code=0x7ffc0000 [ 376.041059][ T29] audit: type=1326 audit(1049721.124:29990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.9.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc904ebe9 code=0x7ffc0000 [ 376.080132][ T4893] loop9: detected capacity change from 0 to 512 [ 376.090297][ T4893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 376.099873][ T4893] System zones: 1-12 [ 376.102450][ T4898] loop6: detected capacity change from 0 to 2048 [ 376.111923][ T4893] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.14895: error while reading EA inode 32 err=-116 [ 376.124779][ T4893] EXT4-fs (loop9): Remounting filesystem read-only [ 376.131380][ T4893] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 376.142903][ T4893] EXT4-fs (loop9): 1 orphan inode deleted [ 376.149148][ T4893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.161886][ T4893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.163621][ T4898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.191842][ T4898] EXT4-fs (loop6): shut down requested (0) [ 376.193741][ T29] audit: type=1400 audit(1049721.374:29991): avc: denied { ioctl } for pid=4896 comm="syz.6.14897" path="/1719/file0/memory.numa_stat" dev="loop6" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.225148][ T29] audit: type=1400 audit(1049721.414:29992): avc: denied { read } for pid=4900 comm="syz.0.14898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 376.249486][T18683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.280048][ T4908] sd 0:0:1:0: device reset [ 376.355165][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14907'. [ 376.476047][ T29] audit: type=1400 audit(1049721.654:29993): avc: denied { block_suspend } for pid=4941 comm="syz.1.14927" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 376.658006][ T4961] loop1: detected capacity change from 0 to 1024 [ 376.664727][ T4961] EXT4-fs: inline encryption not supported [ 376.678603][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.719407][T13602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.796238][ T4980] loop8: detected capacity change from 0 to 8192 [ 376.898992][ T4985] lo speed is unknown, defaulting to 1000 [ 376.970164][ T29] audit: type=1326 audit(1049722.155:29994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4999 comm="syz.6.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 377.000117][ T29] audit: type=1326 audit(1049722.155:29995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4999 comm="syz.6.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcbb0cebe9 code=0x7ffc0000 [ 377.140070][ T5008] lo speed is unknown, defaulting to 1000 [ 377.871861][ T5037] ================================================================== [ 377.879983][ T5037] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 377.888620][ T5037] [ 377.890955][ T5037] write to 0xffff888103dc58e8 of 8 bytes by task 5028 on cpu 1: [ 377.898583][ T5037] shmem_file_splice_read+0x470/0x600 [ 377.903973][ T5037] splice_direct_to_actor+0x26f/0x680 [ 377.909355][ T5037] do_splice_direct+0xda/0x150 [ 377.914125][ T5037] do_sendfile+0x380/0x650 [ 377.918559][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 377.923773][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 377.928484][ T5037] do_syscall_64+0xd2/0x200 [ 377.932993][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.938896][ T5037] [ 377.941230][ T5037] write to 0xffff888103dc58e8 of 8 bytes by task 5037 on cpu 0: [ 377.948864][ T5037] shmem_file_splice_read+0x470/0x600 [ 377.954284][ T5037] splice_direct_to_actor+0x26f/0x680 [ 377.959671][ T5037] do_splice_direct+0xda/0x150 [ 377.964457][ T5037] do_sendfile+0x380/0x650 [ 377.968906][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 377.974118][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 377.978817][ T5037] do_syscall_64+0xd2/0x200 [ 377.983354][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.989265][ T5037] [ 377.991588][ T5037] value changed: 0x0000000000007fd3 -> 0x0000000000007fd7 [ 377.998719][ T5037] [ 378.001057][ T5037] Reported by Kernel Concurrency Sanitizer on: [ 378.007221][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.6.14956 Tainted: G W 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 378.020955][ T5037] Tainted: [W]=WARN [ 378.024768][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.034842][ T5037] ==================================================================