last executing test programs: 30.169175109s ago: executing program 1 (id=35): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) timer_create(0x8, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) setitimer(0x2, 0x0, 0x0) 30.05282622s ago: executing program 1 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000001700)=""/47}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback, 0x5}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 29.956081432s ago: executing program 1 (id=41): chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) 29.083848375s ago: executing program 1 (id=66): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 28.906825968s ago: executing program 1 (id=68): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) 28.601722972s ago: executing program 1 (id=74): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000048"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 28.601519532s ago: executing program 32 (id=74): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000048"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.194809417s ago: executing program 5 (id=609): unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.046472439s ago: executing program 2 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000000)="ad", 0x1) close(r2) 2.01439913s ago: executing program 2 (id=618): chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) 1.382963309s ago: executing program 5 (id=631): socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) 1.175175752s ago: executing program 5 (id=632): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.174655933s ago: executing program 4 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1.147421863s ago: executing program 2 (id=635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="980bcfe393059bae3f648ed47a483be27024e4dd506130bdfbcd2df1d38ec7fa1c341ccb083d3ff79d5bc4d28e2a61cc95e5c91b2b508136985bd117c1dff44ccbd4ab6f", 0x44}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.102789074s ago: executing program 4 (id=636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 1.102074464s ago: executing program 2 (id=637): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000803d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.099442574s ago: executing program 4 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xff}, 0x18) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 1.034225925s ago: executing program 4 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 943.166926ms ago: executing program 4 (id=645): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 778.430898ms ago: executing program 3 (id=650): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 778.169818ms ago: executing program 4 (id=651): chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) 764.852719ms ago: executing program 0 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) 740.004119ms ago: executing program 3 (id=653): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4f9d0f312c7b4", 0x8) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000600)='\x91+\'#\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r0) 683.46105ms ago: executing program 0 (id=654): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x2, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 682.64178ms ago: executing program 3 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863ca", 0x12}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e559", 0x18}], 0x2) 270.348656ms ago: executing program 5 (id=656): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$l2tp(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r4, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 270.025007ms ago: executing program 3 (id=657): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 268.959136ms ago: executing program 0 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r3, 0xffffffffffffffff, 0x0) 229.155177ms ago: executing program 2 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x2e3}}, 0x1006) fallocate(r3, 0x0, 0x800, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3, 0x0, 0x4}) 198.367597ms ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffff92, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 144.409798ms ago: executing program 3 (id=660): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 97.414729ms ago: executing program 5 (id=661): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 79.104099ms ago: executing program 2 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket(0x25, 0x1, 0x0) 26.96605ms ago: executing program 3 (id=663): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0xa5, 0x0, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x5, 0x1, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x4c58, 0x10000, 0x0, 0x1, 0xfffffffffffffffb, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 26.4261ms ago: executing program 0 (id=664): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 26.08324ms ago: executing program 5 (id=665): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000010c0)={'#! ', './file0'}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) close(r0) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0, priority 0 [ 44.167326][ T3654] tipc: Resetting bearer [ 44.183305][ T3654] tipc: Disabling bearer [ 44.197893][ T3640] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.209036][ T3640] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.220948][ T3640] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.232723][ T3640] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.309401][ T3653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.322438][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.394751][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.487784][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.563636][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.583883][ T3683] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 44.608401][ T3683] team0: Port device dummy0 added [ 44.624821][ T3683] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 44.659160][ T3683] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.677120][ T3683] team0: Failed to send options change via netlink (err -105) [ 44.696749][ T3683] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.705834][ T3683] team0: Port device dummy0 removed [ 44.719712][ T3683] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.917968][ T58] bridge_slave_1: left allmulticast mode [ 44.924040][ T58] bridge_slave_1: left promiscuous mode [ 44.930017][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.947874][ T58] bridge_slave_0: left allmulticast mode [ 44.953589][ T58] bridge_slave_0: left promiscuous mode [ 44.959469][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.996543][ T3714] loop2: detected capacity change from 0 to 2048 [ 45.018203][ T3714] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.045188][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.079847][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.091381][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.109709][ T58] bond0 (unregistering): Released all slaves [ 45.118047][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.200869][ T58] hsr_slave_0: left promiscuous mode [ 45.215926][ T58] hsr_slave_1: left promiscuous mode [ 45.231389][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.238992][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.262934][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.270507][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.301740][ T58] veth1_macvtap: left promiscuous mode [ 45.308396][ T58] veth0_macvtap: left promiscuous mode [ 45.325268][ T58] veth1_vlan: left promiscuous mode [ 45.348446][ T58] veth0_vlan: left promiscuous mode [ 45.413383][ T3742] loop2: detected capacity change from 0 to 128 [ 45.502323][ T3742] vfat: Unknown parameter '0xffffffffffffffff1+' [ 45.522821][ T3749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.90'. [ 45.546593][ T3749] x_tables: ip_tables: udp match: only valid for protocol 17 [ 45.592180][ T58] team0 (unregistering): Port device team_slave_1 removed [ 45.613667][ T3742] loop2: detected capacity change from 0 to 2048 [ 45.620478][ T58] team0 (unregistering): Port device team_slave_0 removed [ 45.683651][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 45.693440][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.727760][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 45.732517][ T3674] chnl_net:caif_netlink_parms(): no params data found [ 45.745182][ T3756] capability: warning: `syz.0.92' uses deprecated v2 capabilities in a way that may be insecure [ 45.838960][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.872266][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.879424][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.911225][ T3674] bridge_slave_0: entered allmulticast mode [ 45.933361][ T3774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.936627][ T3777] loop2: detected capacity change from 0 to 1024 [ 45.944027][ T3674] bridge_slave_0: entered promiscuous mode [ 45.955187][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.962394][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.977216][ T3774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.996005][ T3777] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.008978][ T3674] bridge_slave_1: entered allmulticast mode [ 46.015724][ T3674] bridge_slave_1: entered promiscuous mode [ 46.040128][ T3674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.050598][ T3777] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 46.066584][ T3674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.107143][ T3674] team0: Port device team_slave_0 added [ 46.114039][ T3674] team0: Port device team_slave_1 added [ 46.135348][ T3674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.142575][ T3674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.168886][ T3674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.183313][ T3674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.190455][ T3674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.216542][ T3674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.252718][ T3674] hsr_slave_0: entered promiscuous mode [ 46.259190][ T3674] hsr_slave_1: entered promiscuous mode [ 46.265250][ T3674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.274338][ T3674] Cannot create hsr debugfs directory [ 46.362515][ T3674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.371842][ T3674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.381829][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 46.402134][ T3674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.414778][ T3674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.426535][ T3807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3807 comm=syz.2.100 [ 46.439786][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.446981][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.454439][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.461667][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.493021][ T3674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.519368][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.534585][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.556267][ T3674] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.569476][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.576589][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.600511][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.607799][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.702578][ T3838] loop0: detected capacity change from 0 to 128 [ 46.719152][ T3838] EXT4-fs: Ignoring removed nobh option [ 46.736883][ T3838] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.755103][ T3674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.774485][ T3843] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.786548][ T3838] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.825957][ T3850] loop3: detected capacity change from 0 to 512 [ 46.858868][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 46.868114][ T3843] bridge_slave_1: left allmulticast mode [ 46.873803][ T3843] bridge_slave_1: left promiscuous mode [ 46.879597][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.889360][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 46.889376][ T29] audit: type=1400 audit(1751631617.308:281): avc: denied { ioctl } for pid=3837 comm="syz.0.103" path="/19/mnt/file1" dev="loop0" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.924619][ T3843] bridge_slave_0: left allmulticast mode [ 46.930405][ T3843] bridge_slave_0: left promiscuous mode [ 46.936104][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.945265][ T3860] loop4: detected capacity change from 0 to 1024 [ 46.984153][ T3860] EXT4-fs: Ignoring removed orlov option [ 46.990102][ T3860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.000893][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.013604][ T29] audit: type=1400 audit(1751631617.368:282): avc: denied { append } for pid=3841 comm="syz.2.104" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.041168][ T3850] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.042218][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.069631][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.107362][ T29] audit: type=1326 audit(1751631617.518:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 47.130789][ T29] audit: type=1326 audit(1751631617.518:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 47.156218][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.186129][ T3875] netlink: 52 bytes leftover after parsing attributes in process `syz.0.108'. [ 47.200182][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.297789][ T29] audit: type=1400 audit(1751631617.588:285): avc: denied { rename } for pid=3859 comm="syz.4.107" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.312421][ T3891] loop0: detected capacity change from 0 to 512 [ 47.320380][ T29] audit: type=1400 audit(1751631617.588:286): avc: denied { setattr } for pid=3859 comm="syz.4.107" name="file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.347477][ T3891] EXT4-fs: test_dummy_encryption option not supported [ 47.348731][ T29] audit: type=1326 audit(1751631617.588:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 47.378865][ T29] audit: type=1326 audit(1751631617.588:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 47.402162][ T29] audit: type=1400 audit(1751631617.698:289): avc: denied { read } for pid=3880 comm="syz.2.111" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.425577][ T29] audit: type=1400 audit(1751631617.698:290): avc: denied { open } for pid=3880 comm="syz.2.111" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.525905][ T3674] veth0_vlan: entered promiscuous mode [ 47.547886][ T3674] veth1_vlan: entered promiscuous mode [ 47.578327][ T3674] veth0_macvtap: entered promiscuous mode [ 47.596102][ T3674] veth1_macvtap: entered promiscuous mode [ 47.625533][ T3674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.637903][ T3674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.669245][ T3674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.678202][ T3674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.686972][ T3674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.695922][ T3674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.755153][ C1] hrtimer: interrupt took 46990 ns [ 47.873516][ T3935] bridge: RTM_NEWNEIGH with invalid ether address [ 47.984370][ T3947] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 47.992237][ T3947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 48.007191][ T3947] dummy0: entered promiscuous mode [ 48.017348][ T3947] bond0: (slave dummy0): Releasing backup interface [ 48.044609][ T3947] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 48.205774][ T3976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 48.256843][ T3976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.267130][ T3980] batadv_slave_0: entered promiscuous mode [ 48.274781][ T3980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 48.294737][ T3982] loop0: detected capacity change from 0 to 2048 [ 48.304953][ T3983] vlan0: entered allmulticast mode [ 48.310217][ T3983] bond1: entered allmulticast mode [ 48.323670][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.339284][ T3980] batadv_slave_0 (unregistering): left promiscuous mode [ 48.346805][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.362594][ T3982] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.464931][ T3988] syzkaller0: entered promiscuous mode [ 48.470499][ T3988] syzkaller0: entered allmulticast mode [ 48.480901][ T3982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.605014][ T3998] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 48.619480][ T3998] bond2: entered promiscuous mode [ 48.624615][ T3998] bond2: entered allmulticast mode [ 48.636076][ T3998] geneve2: entered allmulticast mode [ 48.643981][ T3998] bond2: (slave geneve2): making interface the new active one [ 48.651573][ T3998] geneve2: entered promiscuous mode [ 48.657966][ T3998] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 48.702052][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 48.717558][ T3998] bond2: left promiscuous mode [ 48.722457][ T3998] geneve2: left promiscuous mode [ 48.727819][ T3998] bond2: left allmulticast mode [ 48.735319][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.737414][ T3998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.766648][ T3998] syz.4.138 (3998) used greatest stack depth: 9656 bytes left [ 48.789948][ T4003] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 48.842219][ T2995] udevd[2995]: worker [3299] terminated by signal 33 (Unknown signal 33) [ 48.858541][ T2995] udevd[2995]: worker [3299] failed while handling '/devices/virtual/block/loop5' [ 48.899468][ T4012] tipc: Started in network mode [ 48.904604][ T4012] tipc: Node identity 1e11243b2ba9, cluster identity 4711 [ 48.912154][ T4012] tipc: Enabled bearer , priority 0 [ 48.925303][ T4012] tipc: Disabling bearer [ 49.066905][ T4028] netlink: 'syz.2.149': attribute type 10 has an invalid length. [ 49.095359][ T4028] dummy0: left promiscuous mode [ 49.103023][ T4028] team0: Port device dummy0 added [ 49.127210][ T4030] netlink: 'syz.2.149': attribute type 10 has an invalid length. [ 49.144655][ T4030] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.186519][ T4030] team0: Failed to send options change via netlink (err -105) [ 49.203620][ T4030] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.227613][ T4030] team0: Port device dummy0 removed [ 49.241252][ T4030] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.269752][ T4039] loop5: detected capacity change from 0 to 128 [ 49.285211][ T4039] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.308593][ T4039] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.410157][ T3674] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.426911][ T4048] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 49.435586][ T4048] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 49.444070][ T4048] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 49.452813][ T4048] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 49.474767][ T4050] loop4: detected capacity change from 0 to 512 [ 49.481728][ T4050] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.513412][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.526922][ T4052] loop3: detected capacity change from 0 to 164 [ 49.540826][ T4052] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.776487][ T4076] ipvlan2: entered promiscuous mode [ 49.852997][ T4082] loop3: detected capacity change from 0 to 128 [ 49.885825][ T4078] tipc: Enabled bearer , priority 0 [ 49.908901][ T4077] tipc: Resetting bearer [ 49.951619][ T4077] tipc: Disabling bearer [ 49.986942][ T4090] Driver unsupported XDP return value 0 on prog (id 146) dev N/A, expect packet loss! [ 50.080050][ T4098] netlink: 'syz.5.178': attribute type 4 has an invalid length. [ 50.243973][ T4106] loop0: detected capacity change from 0 to 1024 [ 50.255048][ T4108] loop5: detected capacity change from 0 to 512 [ 50.278120][ T4106] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 50.297187][ T4106] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.313984][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.327393][ T4106] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.337043][ T4106] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.356005][ T4106] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.181: Inode bitmap for bg 0 marked uninitialized [ 50.368799][ T4108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.410729][ T4108] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.429192][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.457121][ T4117] loop4: detected capacity change from 0 to 128 [ 50.464480][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.500292][ T4106] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 50.526698][ T4119] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 50.576170][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.585923][ T4125] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 50.621128][ T4129] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 50.644390][ T4124] hub 6-0:1.0: USB hub found [ 50.661832][ T4124] hub 6-0:1.0: 8 ports detected [ 50.677775][ T4129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.706736][ T4133] vlan2: entered allmulticast mode [ 50.712868][ T4133] bond1: (slave vlan2): Opening slave failed [ 50.775735][ T4135] pim6reg1: entered promiscuous mode [ 50.781183][ T4135] pim6reg1: entered allmulticast mode [ 50.902160][ T4143] tipc: Started in network mode [ 50.907267][ T4143] tipc: Node identity cee9dbd98c8a, cluster identity 4711 [ 50.914564][ T4143] tipc: Enabled bearer , priority 0 [ 50.923160][ T1828] tipc: Resetting bearer [ 50.994991][ T4142] tipc: Resetting bearer [ 51.037571][ T4142] tipc: Disabling bearer [ 51.132458][ T4169] Zero length message leads to an empty skb [ 51.156643][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.165840][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.357732][ T4180] loop5: detected capacity change from 0 to 2048 [ 51.390143][ T4180] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.406379][ T4182] tls_set_device_offload_rx: netdev not found [ 51.419304][ T4186] macvtap0: entered promiscuous mode [ 51.426707][ T4186] macvtap0: left promiscuous mode [ 51.479298][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 51.531707][ T4199] loop0: detected capacity change from 0 to 512 [ 51.538962][ T4199] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.552097][ T4199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.564255][ T4199] EXT4-fs (loop0): 1 truncate cleaned up [ 51.570607][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.679087][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.787756][ T4220] veth0: entered promiscuous mode [ 51.815421][ T4220] veth0 (unregistering): left promiscuous mode [ 52.057473][ T4239] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 52.064056][ T4239] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.071781][ T4239] vhci_hcd vhci_hcd.0: Device attached [ 52.082028][ T4239] pim6reg: entered allmulticast mode [ 52.098988][ T4239] pim6reg: left allmulticast mode [ 52.170844][ T4240] vhci_hcd: connection closed [ 52.171023][ T12] vhci_hcd: stop threads [ 52.180154][ T12] vhci_hcd: release socket [ 52.184614][ T12] vhci_hcd: disconnect device [ 52.349544][ T4257] bridge_slave_0: left allmulticast mode [ 52.355368][ T4257] bridge_slave_0: left promiscuous mode [ 52.361273][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.361753][ T4261] process 'syz.2.238' launched '/dev/fd/7' with NULL argv: empty string added [ 52.377727][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 52.377763][ T29] audit: type=1400 audit(1751631622.798:405): avc: denied { execute_no_trans } for pid=4260 comm="syz.2.238" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.426993][ T4257] bridge_slave_1: left allmulticast mode [ 52.432899][ T4257] bridge_slave_1: left promiscuous mode [ 52.438783][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.523145][ T29] audit: type=1400 audit(1751631622.828:406): avc: denied { getopt } for pid=4256 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.542728][ T29] audit: type=1326 audit(1751631622.888:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.566090][ T29] audit: type=1326 audit(1751631622.888:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.589480][ T29] audit: type=1326 audit(1751631622.888:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.594050][ T4270] loop4: detected capacity change from 0 to 1024 [ 52.612772][ T29] audit: type=1326 audit(1751631622.898:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.612810][ T29] audit: type=1326 audit(1751631622.898:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.612857][ T29] audit: type=1326 audit(1751631622.898:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.612885][ T29] audit: type=1326 audit(1751631622.898:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.612966][ T29] audit: type=1326 audit(1751631622.898:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ebd43e929 code=0x7ffc0000 [ 52.643151][ T4270] EXT4-fs: Ignoring removed orlov option [ 52.764942][ T4257] bond0: (slave bond_slave_0): Releasing backup interface [ 52.773883][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.796378][ T4257] bond0: (slave bond_slave_1): Releasing backup interface [ 52.818759][ T4277] loop0: detected capacity change from 0 to 256 [ 52.829629][ T4279] __nla_validate_parse: 8 callbacks suppressed [ 52.829647][ T4279] netlink: 36 bytes leftover after parsing attributes in process `syz.5.245'. [ 52.851262][ T4257] team0: Port device team_slave_0 removed [ 52.874351][ T4257] team0: Port device team_slave_1 removed [ 52.900858][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.908473][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.921163][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.928638][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.929066][ T4286] loop2: detected capacity change from 0 to 1024 [ 52.943112][ T4286] EXT4-fs: Ignoring removed orlov option [ 52.962156][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.022612][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.073339][ T4290] loop3: detected capacity change from 0 to 2048 [ 53.084749][ T4295] loop0: detected capacity change from 0 to 164 [ 53.095967][ T4295] ISOFS: unable to read i-node block [ 53.101403][ T4295] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 53.116488][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.141164][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4304 comm=syz.0.254 [ 53.192921][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.288673][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.512185][ T4335] loop4: detected capacity change from 0 to 2048 [ 53.521834][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.541405][ T4335] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.267: path /52/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 53.562306][ T4335] EXT4-fs (loop4): Remounting filesystem read-only [ 53.616693][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.707864][ T4349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.715147][ T4349] IPv6: NLM_F_CREATE should be set when creating new route [ 53.959146][ T4373] wg2: entered promiscuous mode [ 53.964139][ T4373] wg2: entered allmulticast mode [ 54.111592][ T4381] loop5: detected capacity change from 0 to 1024 [ 54.153080][ T4381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.219252][ T4381] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.285: Allocating blocks 385-513 which overlap fs metadata [ 54.294564][ T4381] EXT4-fs (loop5): pa ffff888100625070: logic 16, phys. 129, len 24 [ 54.302712][ T4381] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 54.371835][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.526126][ T4401] loop0: detected capacity change from 0 to 512 [ 54.646430][ T4407] loop0: detected capacity change from 0 to 1024 [ 54.680804][ T4407] EXT4-fs: Ignoring removed oldalloc option [ 54.717270][ T4407] EXT4-fs: Ignoring removed orlov option [ 54.737229][ T4407] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.789611][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.816788][ T4423] syzkaller0: entered promiscuous mode [ 54.817737][ T4407] EXT4-fs: Ignoring removed orlov option [ 54.822548][ T4423] syzkaller0: entered allmulticast mode [ 54.857231][ T4407] EXT4-fs (loop0): can't enable nombcache during remount [ 54.901334][ T4430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.302'. [ 54.960374][ T4432] Cannot find add_set index 0 as target [ 54.987755][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.067458][ T4434] netlink: 76 bytes leftover after parsing attributes in process `syz.3.304'. [ 55.081451][ T4445] syzkaller0: entered promiscuous mode [ 55.086945][ T4445] syzkaller0: entered allmulticast mode [ 55.149334][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 55.179208][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.306'. [ 55.182523][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 55.269503][ T4460] loop0: detected capacity change from 0 to 128 [ 55.276203][ T4460] vfat: Unknown parameter '' [ 55.291426][ T4460] tipc: Enabling of bearer rejected, failed to enable media [ 55.335645][ T4472] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 55.418989][ T4472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.444342][ T4480] pim6reg1: entered promiscuous mode [ 55.451397][ T4480] pim6reg1: entered allmulticast mode [ 55.504738][ T4476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.538069][ T4476] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 55.551316][ T4476] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 55.573557][ T4472] ip6erspan0: entered promiscuous mode [ 55.581056][ T4472] bond2: (slave ip6erspan0): making interface the new active one [ 55.589205][ T4472] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 55.925105][ T4509] wg2: entered promiscuous mode [ 55.930090][ T4509] wg2: entered allmulticast mode [ 56.004117][ T4515] geneve0: entered allmulticast mode [ 56.050154][ T4520] tipc: Started in network mode [ 56.055082][ T4520] tipc: Node identity ac14140f, cluster identity 4711 [ 56.062080][ T4520] tipc: New replicast peer: 0.0.255.255 [ 56.067835][ T4520] tipc: Enabled bearer , priority 10 [ 56.131127][ T4528] loop4: detected capacity change from 0 to 1024 [ 56.148818][ T4528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.174596][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.373301][ T4540] loop2: detected capacity change from 0 to 512 [ 56.388610][ T4540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.401402][ T4540] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.436860][ T4540] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.345: corrupted inode contents [ 56.449937][ T4540] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.345: mark_inode_dirty error [ 56.462142][ T4540] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.345: corrupted inode contents [ 56.474163][ T4540] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.345: mark_inode_dirty error [ 56.486236][ T4540] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.345: mark inode dirty (error -117) [ 56.499047][ T4540] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 56.520120][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.626368][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 56.638588][ T4553] loop2: detected capacity change from 0 to 2048 [ 56.651181][ T4553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.771478][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.867343][ T4570] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 56.875145][ T4570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.357'. [ 56.884278][ T4570] dummy0: entered promiscuous mode [ 56.906887][ T4570] bond0: (slave dummy0): Releasing backup interface [ 57.062962][ T4590] pim6reg1: entered promiscuous mode [ 57.068461][ T4590] pim6reg1: entered allmulticast mode [ 57.199522][ T3401] tipc: Node number set to 2886997007 [ 57.233374][ T4607] loop5: detected capacity change from 0 to 1024 [ 57.241700][ T4607] EXT4-fs: inline encryption not supported [ 57.247766][ T4607] EXT4-fs: Ignoring removed i_version option [ 57.254745][ T4607] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.268490][ T4607] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.375: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.286835][ T4607] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.375: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.304631][ T4607] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.375: Failed to acquire dquot type 0 [ 57.319254][ T4607] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 57.330183][ T4607] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.375: mark_inode_dirty error [ 57.341990][ T4607] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 57.352581][ T4607] EXT4-fs (loop5): 1 orphan inode deleted [ 57.359153][ T4607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.374885][ T1828] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.389644][ T1828] __quota_error: 131 callbacks suppressed [ 57.389662][ T1828] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 57.391344][ T4607] netlink: 68 bytes leftover after parsing attributes in process `syz.5.375'. [ 57.395501][ T1828] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 57.405535][ T4607] ext4: Unknown parameter ' ]|~&bo!F>S6V䟋Ye8}:St' [ 57.449135][ T4607] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 16: comm syz.5.375: lblock 0 mapped to illegal pblock 16 (length 1) [ 57.499548][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.510461][ T3674] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.527154][ T3674] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 57.545046][ T3674] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 57.636222][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.381'. [ 57.653945][ T4634] team0 (unregistering): Port device team_slave_0 removed [ 57.673416][ T4634] team0 (unregistering): Port device team_slave_1 removed [ 57.728546][ T29] audit: type=1326 audit(1751631628.148:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.752264][ T29] audit: type=1326 audit(1751631628.148:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.775764][ T29] audit: type=1326 audit(1751631628.148:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.799038][ T29] audit: type=1326 audit(1751631628.148:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.822452][ T29] audit: type=1326 audit(1751631628.148:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.845781][ T29] audit: type=1326 audit(1751631628.148:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.869058][ T29] audit: type=1326 audit(1751631628.148:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.892330][ T29] audit: type=1326 audit(1751631628.148:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 57.915618][ T29] audit: type=1326 audit(1751631628.148:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd5d0d0e929 code=0x7ffc0000 [ 58.006315][ T4649] loop2: detected capacity change from 0 to 512 [ 58.014289][ T4649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.026419][ T4649] EXT4-fs (loop2): 1 truncate cleaned up [ 58.034848][ T4649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.131599][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.260370][ T4678] loop4: detected capacity change from 0 to 128 [ 58.357053][ T4678] syz.4.395: attempt to access beyond end of device [ 58.357053][ T4678] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 58.399009][ T4678] syz.4.395: attempt to access beyond end of device [ 58.399009][ T4678] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.423727][ T4678] syz.4.395: attempt to access beyond end of device [ 58.423727][ T4678] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.482006][ T4678] syz.4.395: attempt to access beyond end of device [ 58.482006][ T4678] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.482616][ T4699] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 58.509009][ T4678] syz.4.395: attempt to access beyond end of device [ 58.509009][ T4678] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.552017][ T4699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.566848][ T4678] syz.4.395: attempt to access beyond end of device [ 58.566848][ T4678] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.621734][ T4678] syz.4.395: attempt to access beyond end of device [ 58.621734][ T4678] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.637921][ T4678] syz.4.395: attempt to access beyond end of device [ 58.637921][ T4678] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.651951][ T4678] syz.4.395: attempt to access beyond end of device [ 58.651951][ T4678] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.665474][ T4678] syz.4.395: attempt to access beyond end of device [ 58.665474][ T4678] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 58.685785][ T4699] vlan2: entered allmulticast mode [ 58.691123][ T4699] geneve1: entered allmulticast mode [ 58.732369][ T4713] loop0: detected capacity change from 0 to 512 [ 58.743747][ T4699] bond1: (slave vlan2): making interface the new active one [ 58.751298][ T4713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.763219][ T4699] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 58.819189][ T4713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002] [ 58.851810][ T4713] System zones: 1-12 [ 58.883340][ T4713] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.407: bg 0: block 337: padding at end of block bitmap is not set [ 58.897835][ T4716] tipc: Enabled bearer , priority 0 [ 58.959594][ T4713] EXT4-fs (loop0): 1 truncate cleaned up [ 58.976188][ T4713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.990944][ T4715] tipc: Resetting bearer [ 59.028507][ T4715] tipc: Disabling bearer [ 59.068486][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.137209][ T4744] netlink: 96 bytes leftover after parsing attributes in process `syz.4.415'. [ 59.176822][ T4749] tls_set_device_offload_rx: netdev not found [ 59.185051][ T4750] pim6reg1: entered promiscuous mode [ 59.190568][ T4750] pim6reg1: entered allmulticast mode [ 59.237138][ T4756] loop4: detected capacity change from 0 to 736 [ 59.243986][ T4756] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 59.338969][ T4764] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 59.408000][ T4764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 59.460155][ T4764] vlan0: entered allmulticast mode [ 59.465339][ T4764] geneve1: entered allmulticast mode [ 59.524839][ T4764] bond3: (slave vlan0): making interface the new active one [ 59.550686][ T4764] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 59.589177][ T4764] syz.4.422 (4764) used greatest stack depth: 8672 bytes left [ 59.662702][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.427'. [ 59.688362][ T4787] tipc: Enabling of bearer rejected, failed to enable media [ 59.761005][ T4805] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 59.822227][ T4805] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 59.832400][ T4812] loop2: detected capacity change from 0 to 512 [ 59.915870][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.011029][ T4812] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.052328][ T4834] loop4: detected capacity change from 0 to 512 [ 60.060831][ T4834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.091800][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.101480][ T4834] EXT4-fs (loop4): 1 truncate cleaned up [ 60.109891][ T4834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.225234][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.287331][ T4846] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 60.332629][ T4846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.352129][ T4849] netlink: 'syz.2.446': attribute type 4 has an invalid length. [ 60.372600][ T4857] vlan2: entered allmulticast mode [ 60.377934][ T4857] geneve1: entered allmulticast mode [ 60.388717][ T4857] bond1: (slave vlan2): making interface the new active one [ 60.408358][ T4857] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 60.418151][ T4856] hub 6-0:1.0: USB hub found [ 60.428498][ T4856] hub 6-0:1.0: 8 ports detected [ 60.433666][ T4849] netlink: 'syz.2.446': attribute type 4 has an invalid length. [ 60.558887][ T4875] loop4: detected capacity change from 0 to 1024 [ 60.568406][ T4875] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 60.582713][ T4875] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.595167][ T4875] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.603296][ T4875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.610094][ T4875] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.439: Inode bitmap for bg 0 marked uninitialized [ 60.627660][ T4875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.629697][ T4878] tipc: Enabled bearer , priority 0 [ 60.651957][ T4877] tipc: Resetting bearer [ 60.668896][ T4877] tipc: Disabling bearer [ 60.676387][ T4875] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 60.699944][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.729375][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 60.984957][ T4901] loop2: detected capacity change from 0 to 512 [ 60.992014][ T4901] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.001608][ T4901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.008412][ T4904] netlink: 'syz.5.451': attribute type 1 has an invalid length. [ 61.028924][ T4904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.060991][ T4904] vlan0: entered allmulticast mode [ 61.066186][ T4904] geneve1: entered allmulticast mode [ 61.083052][ T4904] bond1: (slave vlan0): making interface the new active one [ 61.117914][ T4904] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 61.130558][ T4911] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 61.180086][ T4911] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 61.313436][ T4914] hub 6-0:1.0: USB hub found [ 61.322145][ T4914] hub 6-0:1.0: 8 ports detected [ 61.415383][ T4918] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 61.429996][ T4916] loop5: detected capacity change from 0 to 1024 [ 61.449540][ T4916] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 61.456526][ T4918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.467409][ T4916] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.481930][ T4920] vlan2: entered allmulticast mode [ 61.488777][ T4916] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 61.489524][ T4920] bond3: (slave vlan2): Opening slave failed [ 61.496887][ T4916] EXT4-fs (loop5): orphan cleanup on readonly fs [ 61.521187][ T4916] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.455: Inode bitmap for bg 0 marked uninitialized [ 61.548408][ T4916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.581811][ T4916] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 61.764311][ T4929] tipc: Enabled bearer , priority 0 [ 61.793026][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 61.802611][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 61.816309][ T4939] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 61.824888][ T4939] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 61.833624][ T4939] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 61.842118][ T4939] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 61.850946][ T4939] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 61.863042][ T4928] tipc: Resetting bearer [ 61.877524][ T4928] tipc: Disabling bearer [ 62.062372][ T4952] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 62.070553][ T4953] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 62.103423][ T4952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.115747][ T4953] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 62.170252][ T4959] hub 6-0:1.0: USB hub found [ 62.188768][ T4959] hub 6-0:1.0: 8 ports detected [ 62.298012][ T4973] netlink: 'syz.4.486': attribute type 10 has an invalid length. [ 62.316282][ T4973] team0: Port device dummy0 added [ 62.344870][ T4973] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.361584][ T4973] team0: Failed to send options change via netlink (err -105) [ 62.375408][ T4973] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.395132][ T4973] team0: Port device dummy0 removed [ 62.408173][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 62.408192][ T29] audit: type=1326 audit(1751631632.828:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1dc3ee929 code=0x0 [ 62.439755][ T4973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.529742][ T4975] tipc: Enabled bearer , priority 0 [ 62.552262][ T4974] tipc: Resetting bearer [ 62.587771][ T4974] tipc: Disabling bearer [ 62.812846][ T4993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.877314][ T4996] bond2: entered promiscuous mode [ 62.882430][ T4996] bond2: entered allmulticast mode [ 62.896291][ T4996] geneve2: entered allmulticast mode [ 62.904093][ T4996] bond2: (slave geneve2): making interface the new active one [ 62.911737][ T4996] geneve2: entered promiscuous mode [ 62.918836][ T4996] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 62.932365][ T4996] bond2: left promiscuous mode [ 62.937267][ T4996] geneve2: left promiscuous mode [ 62.942419][ T4996] bond2: left allmulticast mode [ 62.948268][ T4996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.009960][ T5006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.086154][ T5010] tipc: Enabled bearer , priority 0 [ 63.103398][ T5009] tipc: Resetting bearer [ 63.123006][ T5009] tipc: Disabling bearer [ 63.337872][ T5021] syzkaller0: entered promiscuous mode [ 63.343418][ T5021] syzkaller0: entered allmulticast mode [ 63.355539][ T5023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.455092][ T5028] bond3: entered promiscuous mode [ 63.460368][ T5028] bond3: entered allmulticast mode [ 63.475227][ T5028] geneve2: entered allmulticast mode [ 63.484696][ T5028] bond3: (slave geneve2): making interface the new active one [ 63.492267][ T5028] geneve2: entered promiscuous mode [ 63.500481][ T5028] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 63.513344][ T5031] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.524592][ T5031] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 63.550976][ T5028] bond3: left promiscuous mode [ 63.555895][ T5028] geneve2: left promiscuous mode [ 63.561100][ T5028] bond3: left allmulticast mode [ 63.581731][ T5028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.591759][ T5031] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 63.613860][ T5031] bond4 (unregistering): Released all slaves [ 63.820554][ T5042] tipc: Enabled bearer , priority 0 [ 63.858512][ T5041] tipc: Resetting bearer [ 63.895867][ T5041] tipc: Disabling bearer [ 63.919847][ T29] audit: type=1326 audit(1751631634.338:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.0.507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0707e929 code=0x0 [ 63.926828][ T5048] team0: Port device dummy0 added [ 63.973285][ T5051] loop0: detected capacity change from 0 to 512 [ 63.984731][ T5051] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.993490][ T5048] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 64.049289][ T5048] team0: Failed to send options change via netlink (err -105) [ 64.056861][ T5048] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 64.090300][ T5048] team0: Port device dummy0 removed [ 64.105894][ T5048] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.212480][ T5064] pimreg: entered allmulticast mode [ 64.225144][ T5066] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 64.234257][ T5064] pimreg: left allmulticast mode [ 64.298585][ T5068] pim6reg: entered allmulticast mode [ 64.305526][ T5068] pim6reg: left allmulticast mode [ 64.333095][ T5070] veth0: entered promiscuous mode [ 64.339850][ T5070] __nla_validate_parse: 11 callbacks suppressed [ 64.339866][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.514'. [ 64.379674][ T5070] veth0 (unregistering): left promiscuous mode [ 64.490246][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.518'. [ 64.505864][ T5080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 64.544839][ T5080] vlan1: entered allmulticast mode [ 64.550084][ T5080] bond4: entered allmulticast mode [ 64.715818][ T5085] tipc: Enabled bearer , priority 0 [ 64.723916][ T5084] tipc: Resetting bearer [ 64.736365][ T5084] tipc: Disabling bearer [ 64.838328][ T29] audit: type=1400 audit(1751631635.248:603): avc: denied { mounton } for pid=5087 comm="syz.0.523" path="/97/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.950988][ T5093] loop5: detected capacity change from 0 to 2048 [ 64.957740][ T5093] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.014804][ T29] audit: type=1326 audit(1751631635.428:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.017894][ T5099] dummy0: left allmulticast mode [ 65.038559][ T29] audit: type=1326 audit(1751631635.428:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.067984][ T29] audit: type=1326 audit(1751631635.488:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.091373][ T29] audit: type=1326 audit(1751631635.488:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.114725][ T29] audit: type=1326 audit(1751631635.488:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.135726][ T5099] dummy0: entered allmulticast mode [ 65.138435][ T29] audit: type=1326 audit(1751631635.488:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.166836][ T29] audit: type=1326 audit(1751631635.488:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.5.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe68e929 code=0x7ffc0000 [ 65.211111][ T5099] team0: Port device dummy0 added [ 65.221434][ T5103] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.245040][ T5103] dummy0: left allmulticast mode [ 65.255034][ T5103] team0: Failed to send options change via netlink (err -105) [ 65.281438][ T5103] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.303995][ T5103] team0: Port device dummy0 removed [ 65.312525][ T5103] dummy0: entered allmulticast mode [ 65.318366][ T5103] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.349436][ T5110] loop5: detected capacity change from 0 to 512 [ 65.356302][ T5110] EXT4-fs: test_dummy_encryption option not supported [ 65.429661][ T5115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5115 comm=syz.0.531 [ 65.550140][ T5122] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 65.556817][ T5122] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.564672][ T5122] vhci_hcd vhci_hcd.0: Device attached [ 65.564909][ T5124] loop0: detected capacity change from 0 to 1024 [ 65.578579][ T5124] EXT4-fs: Ignoring removed orlov option [ 65.584324][ T5124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.596217][ T5127] pim6reg: entered allmulticast mode [ 65.606513][ T5128] loop5: detected capacity change from 0 to 512 [ 65.614071][ T5128] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.628561][ T5122] pim6reg: left allmulticast mode [ 65.632870][ T5132] loop2: detected capacity change from 0 to 512 [ 65.681748][ T5132] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.696744][ T5125] vhci_hcd: connection closed [ 65.696920][ T58] vhci_hcd: stop threads [ 65.706107][ T58] vhci_hcd: release socket [ 65.710682][ T58] vhci_hcd: disconnect device [ 65.768455][ T5140] loop2: detected capacity change from 0 to 512 [ 65.775061][ T5140] EXT4-fs: test_dummy_encryption option not supported [ 65.788561][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.798681][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.000806][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 66.387526][ T5155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 66.394091][ T5155] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.402197][ T5155] vhci_hcd vhci_hcd.0: Device attached [ 66.402775][ T5154] validate_nla: 13 callbacks suppressed [ 66.402793][ T5154] netlink: 'syz.3.542': attribute type 10 has an invalid length. [ 66.417896][ T5155] pim6reg: entered allmulticast mode [ 66.430011][ T5155] pim6reg: left allmulticast mode [ 66.445481][ T5154] bond0: (slave dummy0): Releasing backup interface [ 66.456583][ T5154] team0: Port device dummy0 added [ 66.475291][ T5154] netlink: 'syz.3.542': attribute type 10 has an invalid length. [ 66.484324][ T5154] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.495749][ T5154] team0: Failed to send options change via netlink (err -105) [ 66.503474][ T5154] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.505541][ T5156] vhci_hcd: connection closed [ 66.512741][ T5154] team0: Port device dummy0 removed [ 66.512916][ T31] vhci_hcd: stop threads [ 66.521123][ T5154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.522711][ T31] vhci_hcd: release socket [ 66.540204][ T31] vhci_hcd: disconnect device [ 66.621141][ T5163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5163 comm=syz.3.544 [ 66.645418][ T5167] loop4: detected capacity change from 0 to 128 [ 66.653939][ T5167] EXT4-fs: Ignoring removed nobh option [ 66.661576][ T5167] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.750329][ T5178] loop4: detected capacity change from 0 to 512 [ 66.769697][ T5178] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.955292][ T5193] loop4: detected capacity change from 0 to 512 [ 66.963032][ T5193] EXT4-fs: test_dummy_encryption option not supported [ 67.016418][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 67.026638][ T5191] bridge_slave_1: left promiscuous mode [ 67.032507][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.043260][ T5191] bridge_slave_0: left promiscuous mode [ 67.049067][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.081272][ T5198] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 67.099427][ T5198] dummy0: left promiscuous mode [ 67.110157][ T5198] team0: Port device dummy0 added [ 67.119809][ T5201] loop4: detected capacity change from 0 to 512 [ 67.127391][ T5201] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.137105][ T5198] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 67.145256][ T5198] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.179952][ T5198] team0: Failed to send options change via netlink (err -105) [ 67.187696][ T5198] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.196793][ T5198] team0: Port device dummy0 removed [ 67.204767][ T5198] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.297453][ T5206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.305980][ T5206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.358791][ T5212] loop5: detected capacity change from 0 to 128 [ 67.365386][ T5212] EXT4-fs: Ignoring removed nobh option [ 67.380186][ T5212] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.724866][ T5224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'. [ 67.733965][ T5224] x_tables: ip_tables: udp match: only valid for protocol 17 [ 67.819847][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 67.819863][ T29] audit: type=1326 audit(1751631638.238:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.870131][ T29] audit: type=1326 audit(1751631638.268:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.893628][ T29] audit: type=1326 audit(1751631638.268:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.917088][ T29] audit: type=1326 audit(1751631638.268:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.940474][ T29] audit: type=1326 audit(1751631638.268:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.963798][ T29] audit: type=1326 audit(1751631638.268:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 67.987211][ T29] audit: type=1326 audit(1751631638.268:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 68.010645][ T29] audit: type=1326 audit(1751631638.268:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 68.033981][ T29] audit: type=1326 audit(1751631638.268:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 68.057304][ T29] audit: type=1326 audit(1751631638.268:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1dc3ee929 code=0x7ffc0000 [ 68.134693][ T5241] loop4: detected capacity change from 0 to 2048 [ 68.143355][ T5241] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.228609][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.239439][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.775319][ T5257] loop0: detected capacity change from 0 to 1024 [ 68.986692][ T5265] loop4: detected capacity change from 0 to 128 [ 68.994537][ T5265] vfat: Unknown parameter '0xffffffffffffffff1+' [ 69.010512][ T5267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 69.016274][ T5265] loop4: detected capacity change from 0 to 2048 [ 69.456529][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.472254][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.381558][ T5308] sch_fq: defrate 4294967295 ignored. [ 70.451109][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 70.618161][ T5324] loop4: detected capacity change from 0 to 8192 [ 70.702222][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 71.430142][ T5379] 9pnet_fd: Insufficient options for proto=fd [ 71.530305][ T5388] netlink: 96 bytes leftover after parsing attributes in process `syz.3.640'. [ 72.136343][ T5483] wg2: left promiscuous mode [ 72.141158][ T5483] wg2: left allmulticast mode [ 72.146857][ T5485] wg2: left allmulticast mode [ 72.156501][ T5483] wg2: entered promiscuous mode [ 72.161658][ T5483] wg2: entered allmulticast mode [ 72.170500][ T5485] wg2: entered promiscuous mode [ 72.175448][ T5485] wg2: entered allmulticast mode [ 72.294430][ T5499] tipc: Enabling of bearer rejected, failed to enable media [ 72.772991][ T5508] loop2: detected capacity change from 0 to 512 [ 72.802999][ T5508] EXT4-fs mount: 26 callbacks suppressed [ 72.803017][ T5508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.821773][ T5508] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.859250][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 72.859268][ T29] audit: type=1400 audit(1751631643.278:738): avc: denied { append } for pid=5507 comm="syz.2.658" path="/124/bus/pids.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.905300][ T5518] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 72.920198][ T5518] team0: entered promiscuous mode [ 72.925534][ T5518] team0: entered allmulticast mode [ 72.925948][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.966951][ T5524] loop2: detected capacity change from 0 to 1024 [ 72.973939][ T5524] EXT4-fs: Ignoring removed bh option [ 72.979467][ T5524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.989367][ T29] audit: type=1400 audit(1751631643.408:739): avc: denied { execute_no_trans } for pid=5525 comm="syz.5.665" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.029979][ T5524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.047370][ T5531] loop0: detected capacity change from 0 to 512 [ 73.072633][ T5531] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.667: casefold flag without casefold feature [ 73.088716][ T5531] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.667: couldn't read orphan inode 15 (err -117) [ 73.103719][ T5531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.134756][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.558376][ T5535] ================================================================== [ 73.566510][ T5535] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 73.575746][ T5535] [ 73.578090][ T5535] read-write to 0xffff888106aa9758 of 4 bytes by task 5524 on cpu 1: [ 73.586179][ T5535] writeback_single_inode+0x2fa/0x3e0 [ 73.591603][ T5535] sync_inode_metadata+0x5b/0x90 [ 73.596575][ T5535] generic_buffers_fsync_noflush+0xd9/0x120 [ 73.602520][ T5535] ext4_sync_file+0x1ab/0x690 [ 73.607246][ T5535] vfs_fsync_range+0x10a/0x130 [ 73.612056][ T5535] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.617632][ T5535] ext4_file_write_iter+0x383/0xf00 [ 73.622857][ T5535] iter_file_splice_write+0x5ef/0x970 [ 73.628280][ T5535] direct_splice_actor+0x153/0x2a0 [ 73.633438][ T5535] splice_direct_to_actor+0x30f/0x680 [ 73.638863][ T5535] do_splice_direct+0xda/0x150 [ 73.643671][ T5535] do_sendfile+0x380/0x650 [ 73.648131][ T5535] __x64_sys_sendfile64+0x105/0x150 [ 73.653457][ T5535] x64_sys_call+0xb39/0x2fb0 [ 73.658089][ T5535] do_syscall_64+0xd2/0x200 [ 73.662622][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.668561][ T5535] [ 73.670914][ T5535] read to 0xffff888106aa9758 of 4 bytes by task 5535 on cpu 0: [ 73.678485][ T5535] generic_buffers_fsync_noflush+0x80/0x120 [ 73.684431][ T5535] ext4_sync_file+0x1ab/0x690 [ 73.689137][ T5535] vfs_fsync_range+0x10a/0x130 [ 73.693947][ T5535] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.699542][ T5535] ext4_file_write_iter+0x383/0xf00 [ 73.704773][ T5535] iter_file_splice_write+0x5ef/0x970 [ 73.710187][ T5535] direct_splice_actor+0x153/0x2a0 [ 73.715339][ T5535] splice_direct_to_actor+0x30f/0x680 [ 73.720754][ T5535] do_splice_direct+0xda/0x150 [ 73.725568][ T5535] do_sendfile+0x380/0x650 [ 73.730031][ T5535] __x64_sys_sendfile64+0x105/0x150 [ 73.735265][ T5535] x64_sys_call+0xb39/0x2fb0 [ 73.739904][ T5535] do_syscall_64+0xd2/0x200 [ 73.744434][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.750364][ T5535] [ 73.752744][ T5535] value changed: 0x00000002 -> 0x00000020 [ 73.758489][ T5535] [ 73.760830][ T5535] Reported by Kernel Concurrency Sanitizer on: [ 73.767021][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.2.662 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 73.779470][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.789563][ T5535] ================================================================== [ 73.895614][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.