last executing test programs: 7m2.95439683s ago: executing program 32 (id=985): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc4042, 0xa6) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 7m2.8945862s ago: executing program 33 (id=987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100063d10000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000a000000000000000000000048000100636d61632861657329"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 7m2.395713628s ago: executing program 34 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 7m0.30403835s ago: executing program 35 (id=990): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 6m26.033693485s ago: executing program 36 (id=2383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 5m43.087555783s ago: executing program 37 (id=4433): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 4m32.558957442s ago: executing program 38 (id=7547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 4m21.166509037s ago: executing program 39 (id=7958): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 4m9.372903228s ago: executing program 40 (id=8252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) msgsnd(0x0, 0x0, 0x2000, 0x0) 4m2.073384549s ago: executing program 41 (id=8489): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m1.889756662s ago: executing program 42 (id=8491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 4m1.449686519s ago: executing program 43 (id=8495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4m1.393341849s ago: executing program 44 (id=8497): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m32.67580759s ago: executing program 45 (id=8806): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m30.177695378s ago: executing program 46 (id=8813): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='./bus\x00', 0x24000137) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, 0x0, 0x0) 3m28.550960652s ago: executing program 47 (id=8830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 3m3.456229007s ago: executing program 48 (id=9002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 3m1.657287284s ago: executing program 49 (id=9026): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x7, 0x1, 0x8, 0xfffffffffffffffd}) 2m48.750931792s ago: executing program 50 (id=9440): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000003c0)="8679a0", 0x3}], 0x1}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2m37.76274022s ago: executing program 8 (id=9855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") statx(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x400, &(0x7f00000002c0)) 2m37.75089087s ago: executing program 4 (id=9856): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m37.655399352s ago: executing program 8 (id=9858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 2m37.630931402s ago: executing program 4 (id=9869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2m37.626805152s ago: executing program 4 (id=9870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) memfd_secret(0x80000) 2m37.626338902s ago: executing program 8 (id=9860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m37.588938713s ago: executing program 4 (id=9862): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) 2m37.394487706s ago: executing program 4 (id=9867): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2m37.376385506s ago: executing program 8 (id=9880): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) 2m37.183009659s ago: executing program 8 (id=9874): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) 2m36.982385872s ago: executing program 4 (id=9893): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000500), &(0x7f0000000400)=0x0, &(0x7f0000000280)) r2 = syz_io_uring_setup(0x1de5, &(0x7f0000000340)={0x0, 0xfffffffe, 0x10100, 0x0, 0x245, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000800)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}) io_uring_enter(r2, 0x19d8, 0x0, 0x0, 0x0, 0x0) 2m36.953293403s ago: executing program 51 (id=9893): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000500), &(0x7f0000000400)=0x0, &(0x7f0000000280)) r2 = syz_io_uring_setup(0x1de5, &(0x7f0000000340)={0x0, 0xfffffffe, 0x10100, 0x0, 0x245, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000800)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}) io_uring_enter(r2, 0x19d8, 0x0, 0x0, 0x0, 0x0) 2m36.820281285s ago: executing program 8 (id=9888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m36.787028455s ago: executing program 52 (id=9888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m10.401207569s ago: executing program 6 (id=10697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2m10.36694963s ago: executing program 6 (id=10698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2m10.295706741s ago: executing program 6 (id=10701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7414, &(0x7f00000003c0)={0x0, 0xd326, 0x800, 0x0, 0x2ac}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) 2m10.169904192s ago: executing program 6 (id=10702): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x9) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m10.071337284s ago: executing program 6 (id=10704): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) write$P9_RATTACH(r0, &(0x7f00000004c0)={0x14, 0x69, 0x2, {0xed, 0x3, 0x8}}, 0x14) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 2m9.826159678s ago: executing program 6 (id=10710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0xb4807000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 2m9.789505569s ago: executing program 53 (id=10710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0xb4807000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 2m9.642532031s ago: executing program 1 (id=10716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m9.559449592s ago: executing program 1 (id=10718): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 2m9.460184724s ago: executing program 1 (id=10719): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000280)) 2m9.428821224s ago: executing program 1 (id=10720): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x9) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m9.405830194s ago: executing program 1 (id=10721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m8.963684531s ago: executing program 1 (id=10722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2m8.963466991s ago: executing program 54 (id=10722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3.532777526s ago: executing program 0 (id=15127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(0x0, 0xd931d3864d39ddd8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 3.209519651s ago: executing program 0 (id=15132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) 3.111157322s ago: executing program 0 (id=15137): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.906286055s ago: executing program 0 (id=15146): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 2.858461786s ago: executing program 0 (id=15151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 2.741418588s ago: executing program 0 (id=15157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 2.741331658s ago: executing program 55 (id=15157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 1.346619259s ago: executing program 7 (id=15205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1.208122101s ago: executing program 7 (id=15209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00'}, 0x18) 1.177130812s ago: executing program 7 (id=15210): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000ac0)="cc", 0x1, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r2}, &(0x7f0000000400)=0x8) 1.133706932s ago: executing program 7 (id=15213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 576.285771ms ago: executing program 5 (id=15233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 535.050472ms ago: executing program 9 (id=15235): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000440)=@md5={0x1, "2b4a67a4b5ffdb746d546edc5bdee6ea"}, 0x11, 0x1) 493.002472ms ago: executing program 5 (id=15236): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 408.974634ms ago: executing program 2 (id=15237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) 408.513314ms ago: executing program 3 (id=15238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) 362.990894ms ago: executing program 2 (id=15239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 358.310514ms ago: executing program 5 (id=15240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) 330.363745ms ago: executing program 9 (id=15241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) 329.827025ms ago: executing program 3 (id=15242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 320.150335ms ago: executing program 5 (id=15243): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 308.090225ms ago: executing program 2 (id=15244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c50400003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 286.051116ms ago: executing program 5 (id=15245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="763eb2dbddb641768b2113fa98a72f3c1f5a3662e5837e57944391a0a949e6d69783df06700caeee6670ca968256d98efbae40bc76272a07deee91352ea9ba642a8a7652ac44cd38ea9e526b28c145a3665a06dffc4b2c0f22c5b5364e6e3b9349ff", 0x62}], 0x1) 273.357556ms ago: executing program 3 (id=15246): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x68f}, 0x18) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) 273.069456ms ago: executing program 9 (id=15247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 252.585666ms ago: executing program 7 (id=15248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x27) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 229.874766ms ago: executing program 2 (id=15249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001", @ANYRES16], 0x44}}, 0x20008000) 221.000176ms ago: executing program 5 (id=15250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x800, 0x2000402) 203.900717ms ago: executing program 9 (id=15251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_unlink(0x0) 196.746047ms ago: executing program 3 (id=15252): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), 0x0, 0x0) 157.615388ms ago: executing program 2 (id=15253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 150.032307ms ago: executing program 9 (id=15254): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x80, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 93.449249ms ago: executing program 3 (id=15255): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/33, 0x21) getdents(r1, 0x0, 0xbb) 76.119478ms ago: executing program 2 (id=15256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 43.724759ms ago: executing program 7 (id=15257): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 9.13624ms ago: executing program 3 (id=15258): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x0) 0s ago: executing program 9 (id=15259): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): 9.432900][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.440539][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.448130][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.455586][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.463257][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.470703][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.478328][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.486250][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.494006][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.501670][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.509331][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.516873][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.524406][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.532026][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.539575][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.547125][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.554668][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.562100][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.569809][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.577596][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.585296][ T8186] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 439.593386][ T8186] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 439.711087][T20200] loop2: detected capacity change from 0 to 1024 [ 439.877095][T20231] loop3: detected capacity change from 0 to 1024 [ 439.884243][T20231] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 439.896724][T20231] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 439.934216][T20238] netlink: 'syz.3.13750': attribute type 1 has an invalid length. [ 439.952141][T20240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20240 comm=syz.2.13752 [ 439.984706][T20242] can0: slcan on ptm0. [ 440.056705][T20260] loop5: detected capacity change from 0 to 512 [ 440.064327][T20260] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 440.074641][T20241] can0 (unregistered): slcan off ptm0. [ 440.078393][T20260] EXT4-fs (loop5): 1 truncate cleaned up [ 440.157335][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.165232][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.173218][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.181029][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.191016][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.199223][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.207694][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.216378][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.224085][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.231734][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.240780][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.249497][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.258635][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.329732][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.335117][T20286] loop0: detected capacity change from 0 to 512 [ 440.337939][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.352954][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.361162][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.368971][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.377473][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.385475][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.393620][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.401431][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.403162][T20286] ext4 filesystem being mounted at /628/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.409685][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.409718][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.438624][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.447056][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.455177][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.463078][ T8186] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 440.472794][ T8186] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 440.557277][T20309] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.13768: corrupted inode contents [ 440.613303][T20304] lo speed is unknown, defaulting to 1000 [ 440.615794][T20309] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.13768: mark_inode_dirty error [ 440.706486][T20309] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.13768: corrupted inode contents [ 440.729605][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 440.729623][ T29] audit: type=1400 audit(1751064556.353:16933): avc: denied { mount } for pid=20329 comm="syz.7.13780" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 440.746255][T20309] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.13768: mark_inode_dirty error [ 440.787069][T20309] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.13768: mark inode dirty (error -117) [ 440.798359][ T29] audit: type=1400 audit(1751064556.393:16934): avc: denied { mac_admin } for pid=20329 comm="syz.7.13780" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.816006][T20309] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 440.826599][ T29] audit: type=1400 audit(1751064556.393:16935): avc: denied { relabelto } for pid=20329 comm="syz.7.13780" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 440.864923][ T29] audit: type=1400 audit(1751064556.393:16936): avc: denied { associate } for pid=20329 comm="syz.7.13780" name="/" dev="devpts" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 440.907816][ T29] audit: type=1400 audit(1751064556.433:16937): avc: denied { unmount } for pid=6224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 440.962802][T20348] loop7: detected capacity change from 0 to 512 [ 440.977320][ T29] audit: type=1400 audit(1751064556.603:16938): avc: denied { ioctl } for pid=20350 comm="syz.5.13784" path="socket:[128887]" dev="sockfs" ino=128887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 441.027915][T20348] Quota error (device loop7): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 441.039577][T20348] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 441.042704][ T29] audit: type=1400 audit(1751064556.633:16939): avc: denied { bind } for pid=20350 comm="syz.5.13784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 441.050030][T20348] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13783: Failed to acquire dquot type 1 [ 441.071087][ T29] audit: type=1400 audit(1751064556.633:16940): avc: denied { setopt } for pid=20350 comm="syz.5.13784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 441.124178][T20362] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 441.129682][T20348] EXT4-fs (loop7): 1 truncate cleaned up [ 441.146359][T20348] ext4 filesystem being mounted at /717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.363090][T20378] loop3: detected capacity change from 0 to 8192 [ 441.384493][T20378] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.416985][T20401] ip6gre1: entered allmulticast mode [ 441.482161][T20414] loop3: detected capacity change from 0 to 256 [ 441.573703][T20431] loop5: detected capacity change from 0 to 512 [ 441.595327][T20431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 441.617876][T20431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 441.637565][T20431] System zones: 1-12 [ 441.643649][T20431] EXT4-fs (loop5): 1 truncate cleaned up [ 441.731497][T20445] loop3: detected capacity change from 0 to 164 [ 441.752157][T20445] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 441.771333][T20445] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 441.783918][T20445] rock: directory entry would overflow storage [ 441.791059][T20445] rock: sig=0x4f50, size=4, remaining=3 [ 441.792644][T20455] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13822'. [ 441.796689][T20445] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 441.814163][T20455] 0ªX¹¦D: renamed from gretap0 [ 441.827171][T20455] 0ªX¹¦D: entered allmulticast mode [ 441.833365][T20455] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 441.855617][T20460] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 441.927878][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 441.935962][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 441.944561][T20474] No such timeout policy "syz0" [ 441.954227][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 441.962516][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 441.970429][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 441.978417][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 441.986346][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 441.994352][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.002273][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.010275][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.018296][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.026733][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.034447][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.042262][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.050479][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.058314][ T8186] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 442.084510][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13833'. [ 442.093873][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13833'. [ 442.103057][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13833'. [ 442.115432][T20487] loop7: detected capacity change from 0 to 128 [ 442.122181][T20487] EXT4-fs: Ignoring removed nobh option [ 442.126515][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13833'. [ 442.131467][ T8186] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 442.137033][T20485] netlink: 'syz.0.13833': attribute type 6 has an invalid length. [ 442.161186][T20487] ext4 filesystem being mounted at /731/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 442.214188][T20499] loop3: detected capacity change from 0 to 512 [ 442.261899][T20499] EXT4-fs (loop3): 1 orphan inode deleted [ 442.277389][T26134] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:245: Failed to release dquot type 1 [ 442.318299][T20499] ext4 filesystem being mounted at /954/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.363512][T20516] loop5: detected capacity change from 0 to 1024 [ 442.392259][T20516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.410100][T20516] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 442.496033][T20516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 442.517454][T20516] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.13841: lblock 2 mapped to illegal pblock 2 (length 1) [ 442.558186][T20520] loop0: detected capacity change from 0 to 1024 [ 442.607020][T20516] EXT4-fs (loop5): Remounting filesystem read-only [ 442.613799][T20516] EXT4-fs (loop5): 1 orphan inode deleted [ 443.483216][T20520] EXT4-fs: Ignoring removed orlov option [ 443.489032][T20520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.532364][T20535] netlink: 'syz.5.13846': attribute type 3 has an invalid length. [ 443.593971][T20550] netlink: 'syz.0.13852': attribute type 1 has an invalid length. [ 443.623301][T20550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.664028][T20550] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 443.680995][T20591] vlan2: entered allmulticast mode [ 443.686405][T20591] bridge_slave_0: entered allmulticast mode [ 443.739917][T20607] vlan2: entered allmulticast mode [ 443.745205][T20607] bond0: entered allmulticast mode [ 443.846821][T20617] xt_hashlimit: size too large, truncated to 1048576 [ 443.853660][T20617] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 443.899317][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13866'. [ 443.932955][T20624] loop3: detected capacity change from 0 to 512 [ 443.957155][T20631] netlink: 'syz.2.13869': attribute type 1 has an invalid length. [ 443.961145][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13870'. [ 443.977643][T20624] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 444.007618][T20631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.013388][T20624] EXT4-fs (loop3): mount failed [ 444.032887][T20631] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 444.104210][T20680] vlan2: entered allmulticast mode [ 444.109485][T20680] bond0: entered allmulticast mode [ 444.224976][T20698] loop0: detected capacity change from 0 to 512 [ 444.245383][T20701] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13880'. [ 444.255050][T20704] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 444.255672][T20701] 0ªX¹¦D: renamed from gretap0 [ 444.269644][T20698] EXT4-fs mount: 36 callbacks suppressed [ 444.269746][T20698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.308489][T20701] 0ªX¹¦D: entered allmulticast mode [ 444.317395][T20701] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 444.334627][T20698] ext4 filesystem being mounted at /652/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.527220][T20721] $Hÿ: renamed from bond0 [ 444.544336][T20723] loop2: detected capacity change from 0 to 164 [ 444.556034][T20721] $Hÿ: entered promiscuous mode [ 444.588064][T20727] loop5: detected capacity change from 0 to 512 [ 444.602017][T20729] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) ! [ 444.612654][T20727] ext4: Unknown parameter 'nouser_xattr' [ 444.619489][T20723] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.652215][T20723] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.668128][T20723] rock: directory entry would overflow storage [ 444.674455][T20723] rock: sig=0x4f50, size=4, remaining=3 [ 444.680230][T20723] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.727512][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.768346][T20745] loop5: detected capacity change from 0 to 1024 [ 444.776089][T20745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.784773][T20745] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 444.806203][T20745] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 444.829346][T20745] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.13901: lblock 2 mapped to illegal pblock 2 (length 1) [ 444.839258][T20761] veth0: entered promiscuous mode [ 444.852247][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13904'. [ 444.856027][T20745] EXT4-fs (loop5): Remounting filesystem read-only [ 444.869239][T20761] veth0 (unregistering): left promiscuous mode [ 444.875945][T20745] EXT4-fs (loop5): 1 orphan inode deleted [ 444.883332][T20745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.919323][ T8272] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.936922][T20775] loop7: detected capacity change from 0 to 512 [ 444.946659][T20778] loop5: detected capacity change from 0 to 164 [ 444.956176][T20778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.967993][T20781] loop0: detected capacity change from 0 to 512 [ 444.976606][T20775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.978221][T20778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.998490][T20778] rock: directory entry would overflow storage [ 445.004722][T20778] rock: sig=0x4f50, size=4, remaining=3 [ 445.007537][T20775] ext4 filesystem being mounted at /745/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.010344][T20778] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 445.034078][T20781] EXT4-fs (loop0): 1 orphan inode deleted [ 445.042265][T20781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.056474][T26134] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:245: Failed to release dquot type 1 [ 445.069644][T20781] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.087422][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13911'. [ 445.125482][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.154431][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 445.162324][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 445.181991][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.189813][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.197546][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.205581][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.213369][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.221117][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.229009][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.236867][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.244604][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.252354][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.260197][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.267944][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.275759][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.283500][ T8186] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 445.292748][ T8186] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 445.307136][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.375526][T20819] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13917'. [ 445.396147][T20819] 0ªX¹¦D: renamed from gretap0 [ 445.410804][T20819] 0ªX¹¦D: entered allmulticast mode [ 445.418090][T20819] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 445.443790][T20831] loop7: detected capacity change from 0 to 512 [ 445.472618][T20831] EXT4-fs (loop7): 1 orphan inode deleted [ 445.480759][T20831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.494640][T20831] ext4 filesystem being mounted at /749/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.516704][T25788] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:214: Failed to release dquot type 1 [ 445.538464][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.567095][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13927'. [ 445.627560][T20857] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 445.681179][T20869] netlink: 5 bytes leftover after parsing attributes in process `syz.5.13938'. [ 445.690380][T20866] loop7: detected capacity change from 0 to 512 [ 445.696817][T20869] 0ªX¹¦D: renamed from gretap0 [ 445.703125][T20869] 0ªX¹¦D: entered allmulticast mode [ 445.709825][T20869] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 445.712145][T20866] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 445.758034][T20866] EXT4-fs (loop7): mount failed [ 445.800410][T20890] loop7: detected capacity change from 0 to 512 [ 445.808898][T20892] netlink: 'syz.2.13945': attribute type 1 has an invalid length. [ 445.828100][T20890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.840347][T20898] loop2: detected capacity change from 0 to 1024 [ 445.849506][T20890] ext4 filesystem being mounted at /752/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.863328][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 445.863347][ T29] audit: type=1400 audit(1751064561.483:17153): avc: denied { read append open } for pid=20887 comm="syz.7.13944" path="/752/file0/memory.events.local" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.867202][T20898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.910105][T20898] ext4 filesystem being mounted at /662/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.910408][ T29] audit: type=1400 audit(1751064561.523:17154): avc: denied { read write } for pid=20901 comm="syz.3.13947" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 445.947064][ T29] audit: type=1400 audit(1751064561.523:17155): avc: denied { open } for pid=20901 comm="syz.3.13947" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 445.953025][T20898] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 446.000893][ T29] audit: type=1400 audit(1751064561.583:17156): avc: denied { map } for pid=20897 comm="syz.2.13946" path="/662/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 446.025240][ T29] audit: type=1400 audit(1751064561.583:17157): avc: denied { execute } for pid=20897 comm="syz.2.13946" path="/662/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 446.026766][T20898] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 446.062898][T20898] EXT4-fs (loop2): This should not happen!! Data will be lost [ 446.062898][T20898] [ 446.073323][T20898] EXT4-fs (loop2): Total free blocks count 0 [ 446.079829][T20898] EXT4-fs (loop2): Free/Dirty block details [ 446.085890][T20898] EXT4-fs (loop2): free_blocks=4293918720 [ 446.091743][T20898] EXT4-fs (loop2): dirty_blocks=16 [ 446.097228][T20898] EXT4-fs (loop2): Block reservation details [ 446.103250][T20898] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 446.110452][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13950'. [ 446.112498][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.168916][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13949'. [ 446.179230][T20914] netlink: 'syz.7.13949': attribute type 6 has an invalid length. [ 446.181077][T20910] loop5: detected capacity change from 0 to 8192 [ 446.199610][ T8052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.232860][ T29] audit: type=1400 audit(1751064561.853:17158): avc: denied { create } for pid=20922 comm="syz.3.13954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 446.268911][ T29] audit: type=1400 audit(1751064561.883:17159): avc: denied { setopt } for pid=20922 comm="syz.3.13954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 446.293342][ T29] audit: type=1400 audit(1751064561.893:17160): avc: denied { create } for pid=20924 comm="syz.7.13963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.314699][ T29] audit: type=1400 audit(1751064561.923:17161): avc: denied { bind } for pid=20924 comm="syz.7.13963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.337868][ T29] audit: type=1400 audit(1751064561.923:17162): avc: denied { name_bind } for pid=20924 comm="syz.7.13963" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 446.391277][T20929] loop2: detected capacity change from 0 to 512 [ 446.405929][T20940] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 446.433434][T20944] loop5: detected capacity change from 0 to 128 [ 446.443483][T20944] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.466050][T20944] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.480200][T20929] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 446.514888][T20935] lo speed is unknown, defaulting to 1000 [ 446.532903][T20929] EXT4-fs (loop2): mount failed [ 446.595793][ T8272] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.610106][T20981] loop3: detected capacity change from 0 to 1024 [ 446.650590][T20981] EXT4-fs: Ignoring removed orlov option [ 446.663263][T20981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.732910][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.897564][T21024] vhci_hcd: invalid port number 96 [ 446.902963][T21024] vhci_hcd: default hub control req: 0000 vffff i0060 l0 [ 447.025735][T21034] loop3: detected capacity change from 0 to 164 [ 447.033362][T21034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 447.042811][T21034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 447.051564][T21034] Symlink component flag not implemented [ 447.057353][T21034] Symlink component flag not implemented [ 447.063743][T21034] Symlink component flag not implemented (7) [ 447.069846][T21034] Symlink component flag not implemented (116) [ 447.121401][T21041] 0ªX¹¦D: left allmulticast mode [ 447.132182][T21041] $Hÿ: left promiscuous mode [ 447.140532][T21041] vlan0: left promiscuous mode [ 447.146501][T21041] geneve0: left allmulticast mode [ 447.152201][T21041] veth3: left promiscuous mode [ 447.157142][T21041] veth3: left allmulticast mode [ 447.166606][T21041] ip6gre1: left allmulticast mode [ 447.241448][T21045] lo speed is unknown, defaulting to 1000 [ 447.267163][T21054] loop3: detected capacity change from 0 to 2048 [ 447.309483][T21054] loop3: p1 < > p4 [ 447.317564][T21054] loop3: p4 size 8388608 extends beyond EOD, truncated [ 447.373087][T21093] loop5: detected capacity change from 0 to 128 [ 447.539670][T21127] loop7: detected capacity change from 0 to 256 [ 447.556359][T21127] FAT-fs (loop7): bogus sectors per cluster 30 [ 447.562627][T21127] FAT-fs (loop7): Can't find a valid FAT filesystem [ 447.707331][T21155] netlink: 'syz.0.14022': attribute type 6 has an invalid length. [ 447.826156][T21173] vhci_hcd: invalid port number 96 [ 447.831352][T21173] vhci_hcd: default hub control req: 0000 vffff i0060 l0 [ 447.881868][T21185] loop5: detected capacity change from 0 to 512 [ 447.910178][T21191] loop0: detected capacity change from 0 to 128 [ 447.917691][T21185] journal_path: Non-blockdev passed as './bus' [ 447.923894][T21185] EXT4-fs: error: could not find journal device path [ 447.940074][T21191] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 447.948071][T21191] FAT-fs (loop0): Filesystem has been set read-only [ 447.958533][T21191] gtp: attempt to access beyond end of device [ 447.958533][T21191] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 447.972313][T21191] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 447.980286][T21191] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 447.989986][T21191] gtp: attempt to access beyond end of device [ 447.989986][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 447.994926][T21202] loop5: detected capacity change from 0 to 512 [ 448.010511][T21191] gtp: attempt to access beyond end of device [ 448.010511][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.028207][T21191] gtp: attempt to access beyond end of device [ 448.028207][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.043026][T21191] gtp: attempt to access beyond end of device [ 448.043026][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.056742][T21191] gtp: attempt to access beyond end of device [ 448.056742][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.069775][T21191] gtp: attempt to access beyond end of device [ 448.069775][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.083097][T21191] gtp: attempt to access beyond end of device [ 448.083097][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.096807][T21191] gtp: attempt to access beyond end of device [ 448.096807][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.110145][T21191] gtp: attempt to access beyond end of device [ 448.110145][T21191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.134714][T21202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.150874][T21202] ext4 filesystem being mounted at /615/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.232559][T21220] netlink: 'syz.2.14044': attribute type 3 has an invalid length. [ 448.271944][T21220] netlink: 'syz.2.14044': attribute type 3 has an invalid length. [ 448.281985][T21223] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.14039: corrupted inode contents [ 448.290517][T21213] lo speed is unknown, defaulting to 1000 [ 448.310189][T21223] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.14039: mark_inode_dirty error [ 448.347335][T21223] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.14039: corrupted inode contents [ 448.368520][T21240] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 448.388169][T21223] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.14039: mark_inode_dirty error [ 448.425224][T21223] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.14039: mark inode dirty (error -117) [ 448.448794][T21223] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 448.494882][ T8272] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.544798][T21247] loop7: detected capacity change from 0 to 8192 [ 448.851582][T21294] loop7: detected capacity change from 0 to 512 [ 448.862688][T21294] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 448.891473][T21294] EXT4-fs (loop7): invalid journal inode [ 448.905459][T21294] EXT4-fs (loop7): can't get journal size [ 448.915572][T21303] 0ªX¹¦D: left allmulticast mode [ 448.930609][T21294] EXT4-fs (loop7): 1 truncate cleaned up [ 448.936451][T21307] loop0: detected capacity change from 0 to 128 [ 448.941151][T21294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.957875][T21303] veth3: left promiscuous mode [ 448.962713][T21303] veth3: left allmulticast mode [ 449.078972][T21321] __nla_validate_parse: 9 callbacks suppressed [ 449.078995][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14073'. [ 449.105937][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.218523][T21353] netlink: 'syz.7.14087': attribute type 3 has an invalid length. [ 449.226964][T21353] netlink: 'syz.7.14087': attribute type 3 has an invalid length. [ 449.308993][T21364] loop0: detected capacity change from 0 to 1024 [ 449.334773][T21364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 449.354033][T21368] loop7: detected capacity change from 0 to 2048 [ 449.375757][T21364] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 449.404148][T21359] lo speed is unknown, defaulting to 1000 [ 449.412042][T21368] loop7: p1 < > p4 [ 449.412731][T21364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 449.432414][T21368] loop7: p4 size 8388608 extends beyond EOD, truncated [ 449.456564][T21364] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.14089: lblock 2 mapped to illegal pblock 2 (length 1) [ 449.530382][T21364] EXT4-fs (loop0): Remounting filesystem read-only [ 449.546334][T21364] EXT4-fs (loop0): 1 orphan inode deleted [ 449.553195][T21364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.609216][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.621191][T21417] loop7: detected capacity change from 0 to 128 [ 449.640535][T21417] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.717396][T21429] loop3: detected capacity change from 0 to 1024 [ 449.723547][T21417] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.751240][T21429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.769564][T21436] ip6_vti0: entered allmulticast mode [ 449.781407][T21436] ip6_vti0: left allmulticast mode [ 449.810312][T21429] ext4 filesystem being mounted at /1020/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.834091][T21429] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 449.854260][T21429] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 449.868212][T21429] EXT4-fs (loop3): This should not happen!! Data will be lost [ 449.868212][T21429] [ 449.878863][T21429] EXT4-fs (loop3): Total free blocks count 0 [ 449.885351][T21429] EXT4-fs (loop3): Free/Dirty block details [ 449.891364][T21429] EXT4-fs (loop3): free_blocks=4293918720 [ 449.892711][T21447] loop2: detected capacity change from 0 to 512 [ 449.897231][T21429] EXT4-fs (loop3): dirty_blocks=16 [ 449.897250][T21429] EXT4-fs (loop3): Block reservation details [ 449.897306][T21429] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 449.926209][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.939627][ T6224] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.957858][T21447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.979101][T21447] ext4 filesystem being mounted at /703/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.024249][ T8052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.057714][T21471] xt_hashlimit: max too large, truncated to 1048576 [ 450.184658][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14126'. [ 450.199516][T21497] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14126'. [ 450.360766][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14137'. [ 450.428648][T21532] loop7: detected capacity change from 0 to 512 [ 450.448186][T21532] EXT4-fs (loop7): 1 orphan inode deleted [ 450.454853][T21532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.471861][T26134] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:245: Failed to release dquot type 1 [ 450.474579][T21529] lo speed is unknown, defaulting to 1000 [ 450.488936][T21532] ext4 filesystem being mounted at /782/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.525868][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.535748][T26134] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:245: Failed to release dquot type 1 [ 450.559591][T21562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14140'. [ 450.604783][T21570] loop3: detected capacity change from 0 to 512 [ 450.611975][T21570] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 450.621175][T21570] EXT4-fs (loop3): invalid journal inode [ 450.628495][T21570] EXT4-fs (loop3): can't get journal size [ 450.635325][T21570] EXT4-fs (loop3): 1 truncate cleaned up [ 450.656316][T21570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.797254][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.807190][T21586] SELinux: ebitmap: map size 4294449787 does not match my size 64 (high bit was 0) [ 450.817136][T21586] SELinux: failed to load policy [ 450.845843][T21591] loop0: detected capacity change from 0 to 128 [ 450.854470][T21594] veth0: entered promiscuous mode [ 450.860270][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14151'. [ 450.860494][T21591] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.883283][T21594] veth0 (unregistering): left promiscuous mode [ 450.885031][T21591] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.947931][ T7609] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.001959][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 451.001978][ T29] audit: type=1326 audit(1751064566.623:17396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.7.14154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad6be0e929 code=0x0 [ 451.084959][T21628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14158'. [ 451.138473][T21637] loop3: detected capacity change from 0 to 512 [ 451.146442][T21637] ext4: Unknown parameter 'nouser_xattr' [ 451.156638][T21632] lo speed is unknown, defaulting to 1000 [ 451.162823][ T29] audit: type=1326 audit(1751064566.783:17397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.188486][ T29] audit: type=1326 audit(1751064566.783:17398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.212788][ T29] audit: type=1326 audit(1751064566.783:17399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.239344][ T29] audit: type=1326 audit(1751064566.783:17400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.265193][ T29] audit: type=1326 audit(1751064566.783:17401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.272540][T21658] loop2: detected capacity change from 0 to 2048 [ 451.293420][ T29] audit: type=1326 audit(1751064566.783:17402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21636 comm="syz.3.14161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 451.347329][T21668] veth0: entered promiscuous mode [ 451.353336][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14166'. [ 451.366537][T21668] veth0 (unregistering): left promiscuous mode [ 451.366670][T21658] loop2: p1 < > p4 [ 451.379885][T21658] loop2: p4 size 8388608 extends beyond EOD, truncated [ 451.390155][ T29] audit: type=1400 audit(1751064567.013:17403): avc: denied { ioctl } for pid=21663 comm="syz.3.14164" path="socket:[132497]" dev="sockfs" ino=132497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 451.426198][T21676] loop0: detected capacity change from 0 to 2048 [ 451.514750][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14171'. [ 451.524018][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14171'. [ 451.620819][ T29] audit: type=1400 audit(1751064567.243:17404): avc: denied { write } for pid=21703 comm="syz.2.14187" name="fib_trie" dev="proc" ino=4026533226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 451.647481][T21700] loop3: detected capacity change from 0 to 128 [ 451.668885][T21700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.682498][T21700] ext4 filesystem being mounted at /1038/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.702885][ T29] audit: type=1400 audit(1751064567.323:17405): avc: denied { create } for pid=21713 comm="syz.2.14190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 451.806776][T29042] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.848852][T21725] bond0: entered promiscuous mode [ 451.854225][T21725] bond0: entered allmulticast mode [ 451.860909][T21725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.869087][T21761] Invalid ELF header magic: != ELF [ 451.880022][T21725] bond0 (unregistering): Released all slaves [ 451.936978][T21808] netlink: 'syz.2.14193': attribute type 11 has an invalid length. [ 452.048740][T21820] loop2: detected capacity change from 0 to 2048 [ 452.601906][T21862] loop0: detected capacity change from 0 to 512 [ 452.630433][T21862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.650696][T21862] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.723965][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.930090][T21894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.942033][T21894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.068900][T21911] bond1: entered promiscuous mode [ 453.074207][T21911] bond1: entered allmulticast mode [ 453.112970][T21911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.136826][T21911] bond1 (unregistering): Released all slaves [ 453.266807][T21987] loop7: detected capacity change from 0 to 512 [ 453.284914][T21987] EXT4-fs (loop7): orphan cleanup on readonly fs [ 453.293866][T21987] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14234: bg 0: block 248: padding at end of block bitmap is not set [ 453.319821][T21987] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.14234: Failed to acquire dquot type 1 [ 453.353279][T21987] EXT4-fs (loop7): 1 truncate cleaned up [ 453.376002][T21987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.403222][T21993] loop0: detected capacity change from 0 to 512 [ 453.419022][T21993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.14237: Parent and EA inode have the same ino 15 [ 453.419051][T21987] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.14234: deleted inode referenced: 12 [ 453.453388][T21993] EXT4-fs (loop0): Remounting filesystem read-only [ 453.485232][T21993] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 453.512101][T21993] EXT4-fs (loop0): 1 orphan inode deleted [ 453.520475][T21993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.545812][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.593158][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.716797][T22044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22044 comm=syz.2.14253 [ 453.730568][T22044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22044 comm=syz.2.14253 [ 453.877586][T22063] SELinux: ebitmap: truncated map [ 453.907255][T22063] SELinux: failed to load policy [ 453.938999][T22075] loop5: detected capacity change from 0 to 256 [ 454.033859][T22088] netlink: 'syz.7.14273': attribute type 11 has an invalid length. [ 454.070822][T22094] loop7: detected capacity change from 0 to 128 [ 454.080259][T22094] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.093681][T22094] ext4 filesystem being mounted at /819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.128369][ T6224] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.163774][T22106] loop3: detected capacity change from 0 to 512 [ 454.172505][T22106] EXT4-fs (loop3): orphan cleanup on readonly fs [ 454.180636][T22106] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14279: bg 0: block 248: padding at end of block bitmap is not set [ 454.198859][T22106] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.14279: Failed to acquire dquot type 1 [ 454.215334][T22106] EXT4-fs (loop3): 1 truncate cleaned up [ 454.234716][T22106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.252988][T22106] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.14279: deleted inode referenced: 12 [ 454.282417][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.433920][T22136] lo speed is unknown, defaulting to 1000 [ 454.462073][T22150] loop5: detected capacity change from 0 to 2048 [ 454.468862][T22155] __nla_validate_parse: 3 callbacks suppressed [ 454.468950][T22155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.14289'. [ 454.486140][T22139] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.14289'. [ 454.506095][T22150] loop5: p1 < > p4 [ 454.526274][T22150] loop5: p4 size 8388608 extends beyond EOD, truncated [ 454.672566][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14300'. [ 454.710902][T22189] loop7: detected capacity change from 0 to 8192 [ 454.783636][T22206] loop7: detected capacity change from 0 to 1024 [ 454.790875][T22206] EXT4-fs: Ignoring removed nobh option [ 454.796627][T22206] EXT4-fs: Ignoring removed bh option [ 454.809231][T22206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.836217][T22206] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 454.854026][T22201] lo speed is unknown, defaulting to 1000 [ 454.860194][T22206] EXT4-fs (loop7): Remounting filesystem read-only [ 454.884116][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.991673][T22201] loop0: detected capacity change from 0 to 256 [ 455.000068][T22201] vfat: Unknown parameter 'ÿÿÿÿf)°ÆÕº©ñ"' [ 455.069082][T22253] loop7: detected capacity change from 0 to 512 [ 455.077390][T22253] EXT4-fs: Ignoring removed bh option [ 455.084033][T22253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.096931][T22253] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 455.168718][T22259] lo speed is unknown, defaulting to 1000 [ 455.184222][T22263] loop0: detected capacity change from 0 to 2048 [ 455.236052][T22263] loop0: p1 < > p4 [ 455.240591][T22263] loop0: p4 size 8388608 extends beyond EOD, truncated [ 455.483218][T22301] loop7: detected capacity change from 0 to 512 [ 455.497028][T22301] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.14315: Parent and EA inode have the same ino 15 [ 455.511200][T22301] EXT4-fs (loop7): Remounting filesystem read-only [ 455.529878][T22301] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 455.543081][T22301] EXT4-fs (loop7): 1 orphan inode deleted [ 455.549541][T22301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.578982][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.763142][T22345] loop3: detected capacity change from 0 to 512 [ 455.778089][T22345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.787824][T22345] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.14334: invalid block [ 455.801483][T22345] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14334: invalid indirect mapped block 4294967295 (level 1) [ 455.817888][T22345] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14334: invalid indirect mapped block 4294967295 (level 1) [ 455.832386][T22345] EXT4-fs (loop3): 2 truncates cleaned up [ 455.840290][T22345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.874648][T22353] netlink: 'syz.7.14338': attribute type 13 has an invalid length. [ 455.883630][T22345] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.3.14334: path /1062/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 455.949346][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.052944][T22385] loop3: detected capacity change from 0 to 164 [ 456.060570][T22385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.089283][T22388] loop7: detected capacity change from 0 to 512 [ 456.096591][T22388] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 456.119100][T22388] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.14350: casefold flag without casefold feature [ 456.132290][T22388] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.14350: couldn't read orphan inode 15 (err -117) [ 456.147211][T22388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.163660][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 456.163682][ T29] audit: type=1326 audit(1751064571.793:17557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.195170][ T29] audit: type=1326 audit(1751064571.793:17558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.219629][ T29] audit: type=1326 audit(1751064571.793:17559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.243630][ T29] audit: type=1326 audit(1751064571.793:17560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.268262][ T29] audit: type=1326 audit(1751064571.793:17561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.292201][ T29] audit: type=1326 audit(1751064571.793:17562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.316911][ T29] audit: type=1326 audit(1751064571.813:17563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.341463][ T29] audit: type=1326 audit(1751064571.823:17564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.366563][ T29] audit: type=1326 audit(1751064571.823:17565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.390406][ T29] audit: type=1326 audit(1751064571.823:17566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22387 comm="syz.7.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 456.416796][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.476858][T22409] xt_hashlimit: max too large, truncated to 1048576 [ 456.578603][T22431] loop7: detected capacity change from 0 to 1024 [ 456.585623][T22431] EXT4-fs: Ignoring removed orlov option [ 456.592285][T22435] vhci_hcd: default hub control req: 4012 v0040 i0002 l0 [ 456.605303][T22431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.820018][T22455] loop5: detected capacity change from 0 to 2048 [ 456.826973][T22455] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.834880][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.857366][T22455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.891465][ T8272] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.908626][T22468] netlink: 'syz.3.14379': attribute type 1 has an invalid length. [ 456.983094][T22487] loop3: detected capacity change from 0 to 128 [ 457.007693][T22487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 457.015687][T22487] FAT-fs (loop3): Filesystem has been set read-only [ 457.037032][T22487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 457.047063][T22487] bio_check_eod: 15937 callbacks suppressed [ 457.047084][T22487] syz.3.14383: attempt to access beyond end of device [ 457.047084][T22487] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 457.076535][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.085537][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.107983][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.116775][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.152445][T22507] loop2: detected capacity change from 0 to 512 [ 457.166904][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.175678][T22496] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 457.179490][T22507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 457.198040][T22507] EXT4-fs (loop2): 1 truncate cleaned up [ 457.204448][T22507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.234112][ T8052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.266902][T22521] netlink: 'syz.5.14396': attribute type 13 has an invalid length. [ 457.292278][T22513] loop3: detected capacity change from 0 to 8192 [ 457.789514][T22567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14413'. [ 457.924896][T22582] loop7: detected capacity change from 0 to 256 [ 457.954273][T22582] FAT-fs (loop7): bogus number of FAT sectors [ 457.960989][T22582] FAT-fs (loop7): Can't find a valid FAT filesystem [ 458.222908][T22621] hub 9-0:1.0: USB hub found [ 458.229685][T22619] tipc: Enabling of bearer rejected, failed to enable media [ 458.241386][T22621] hub 9-0:1.0: 8 ports detected [ 458.276433][T22628] syz_tun: entered allmulticast mode [ 458.285918][T22627] syz_tun: left allmulticast mode [ 458.504542][T22651] vhci_hcd: invalid port number 96 [ 458.509859][T22651] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 458.887618][T29246] bridge_slave_1: left allmulticast mode [ 458.893540][T29246] bridge_slave_1: left promiscuous mode [ 458.899377][T29246] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.923818][T22708] loop5: detected capacity change from 0 to 1024 [ 458.937506][T29246] bridge_slave_0: left allmulticast mode [ 458.943273][T29246] bridge_slave_0: left promiscuous mode [ 458.949848][T29246] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.961028][T22708] EXT4-fs: Ignoring removed orlov option [ 458.998444][T22708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.033919][T22717] program syz.7.14477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.059912][T29246] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 459.086305][T22722] ------------[ cut here ]------------ [ 459.086319][T22722] Please remove unsupported % in format string [ 459.087425][T22722] WARNING: CPU: 0 PID: 22722 at lib/vsprintf.c:2724 format_decode+0x55d/0x580 [ 459.087517][T22722] Modules linked in: [ 459.087536][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.7.14478 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 459.087571][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.087591][T22722] RIP: 0010:format_decode+0x55d/0x580 [ 459.087624][T22722] Code: 9e d3 86 e8 25 66 11 fc c6 05 e8 3f 73 01 01 90 4c 89 e7 e8 85 64 11 fc 41 0f b6 34 24 48 c7 c7 9f be 5c 86 e8 64 3e c1 fb 90 <0f> 0b 90 90 e9 ea fd ff ff e8 c5 63 f7 fb 4d 89 ef e9 89 fc ff ff [ 459.087728][T22722] RSP: 0018:ffffc90006a13a50 EFLAGS: 00010246 [ 459.087747][T22722] RAX: c158f16fa1ccf100 RBX: 0000000000000400 RCX: 0000000000080000 [ 459.087762][T22722] RDX: ffffc9000a070000 RSI: 0000000000000607 RDI: 0000000000000608 [ 459.087775][T22722] RBP: ffffffff85c4c950 R08: 0001ffff86848a7f R09: 0000000000000000 [ 459.087789][T22722] R10: 00000000ffffffff R11: 0000000000000002 R12: ffffc90006a13ba4 [ 459.087803][T22722] R13: 0000000000000000 R14: ffffc90006a13ac8 R15: 0000000000000000 [ 459.087839][T22722] FS: 00007fad6a4776c0(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000 [ 459.087954][T22722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.087976][T22722] CR2: 0000001b30d19ff8 CR3: 0000000153dd6000 CR4: 00000000003506f0 [ 459.088000][T22722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.088019][T22722] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 459.088058][T22722] Call Trace: [ 459.088067][T22722] [ 459.088112][T22722] bstr_printf+0xb3/0x6e0 [ 459.088155][T22722] ? bpf_test_run+0x1d1/0x490 [ 459.088293][T22722] bpf_trace_printk+0xb7/0x1c0 [ 459.088404][T22722] ? bpf_test_run+0x1d1/0x490 [ 459.088455][T22722] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 459.088543][T22722] bpf_test_run+0x1e3/0x490 [ 459.088622][T22722] ? __list_add_valid_or_report+0x38/0xe0 [ 459.088656][T22722] ? bpf_test_run+0xf6/0x490 [ 459.088703][T22722] bpf_prog_test_run_skb+0x834/0xbd0 [ 459.088751][T22722] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 459.088795][T22722] bpf_prog_test_run+0x227/0x390 [ 459.088821][T22722] __sys_bpf+0x3dc/0x790 [ 459.088891][T22722] __x64_sys_bpf+0x41/0x50 [ 459.088977][T22722] x64_sys_call+0x2478/0x2fb0 [ 459.089002][T22722] do_syscall_64+0xd2/0x200 [ 459.089025][T22722] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 459.089125][T22722] ? clear_bhb_loop+0x40/0x90 [ 459.089150][T22722] ? clear_bhb_loop+0x40/0x90 [ 459.089180][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.089212][T22722] RIP: 0033:0x7fad6be0e929 [ 459.089244][T22722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.089264][T22722] RSP: 002b:00007fad6a477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.089286][T22722] RAX: ffffffffffffffda RBX: 00007fad6c035fa0 RCX: 00007fad6be0e929 [ 459.089305][T22722] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 459.089319][T22722] RBP: 00007fad6be90b39 R08: 0000000000000000 R09: 0000000000000000 [ 459.089372][T22722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.089407][T22722] R13: 0000000000000000 R14: 00007fad6c035fa0 R15: 00007fff82c57348 [ 459.089429][T22722] [ 459.089436][T22722] ---[ end trace 0000000000000000 ]--- [ 459.105859][T29246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.464917][T22727] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.475766][T29246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.484926][T29246] bond0 (unregistering): Released all slaves [ 459.520525][T22731] openvswitch: netlink: Message has 6 unknown bytes. [ 459.537455][T29246] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 459.565921][T29246] bond1 (unregistering): Released all slaves [ 459.585914][T29246] bond2 (unregistering): Released all slaves [ 459.621244][T29246] bond3 (unregistering): Released all slaves [ 459.636100][ T8272] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.719516][T22752] loop5: detected capacity change from 0 to 2048 [ 459.726224][T29246] batadv_slave_0: left promiscuous mode [ 459.759889][T29246] hsr_slave_0: left promiscuous mode [ 459.780764][T29246] hsr_slave_1: left promiscuous mode [ 459.901262][T29246] team0 (unregistering): Port device team_slave_1 removed [ 459.912437][T29246] team0 (unregistering): Port device team_slave_0 removed [ 459.961112][T22761] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.14493'. [ 460.109638][T22782] lo speed is unknown, defaulting to 1000 [ 460.390156][T22843] loop3: detected capacity change from 0 to 4096 [ 460.429095][T22843] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.14513: corrupted inode contents [ 460.442937][T22843] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #15: comm syz.3.14513: mark_inode_dirty error [ 460.459314][T22843] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.14513: corrupted inode contents [ 460.472100][T22843] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.14513: mark_inode_dirty error [ 460.499482][T22843] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.14513: corrupted inode contents [ 460.513799][T22843] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.14513: mark_inode_dirty error [ 460.526597][T22843] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.14513: corrupted inode contents [ 460.540931][T22843] EXT4-fs error (device loop3): ext4_truncate:4597: inode #15: comm syz.3.14513: mark_inode_dirty error [ 460.559773][T22843] EXT4-fs error (device loop3) in ext4_setattr:5986: Corrupt filesystem [ 460.572226][T22851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.14513: corrupted inode contents [ 460.589437][T22862] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 460.589437][T22862] program syz.7.14520 not setting count and/or reply_len properly [ 460.624729][T29042] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 460.901237][T22906] loop3: detected capacity change from 0 to 512 [ 460.930660][T22906] ext4 filesystem being mounted at /1125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.957378][T22913] vlan2: entered promiscuous mode [ 460.962750][T22913] bond0: entered promiscuous mode [ 460.968045][T22913] vlan2: entered allmulticast mode [ 460.989488][T22906] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.14537: corrupted inode contents [ 461.012193][T22906] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.14537: mark_inode_dirty error [ 461.052573][T22906] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.14537: corrupted inode contents [ 461.075479][T22906] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.14537: mark_inode_dirty error [ 461.097940][T22906] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.14537: mark inode dirty (error -117) [ 461.116646][T22906] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 461.177374][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 461.177392][ T29] audit: type=1400 audit(1751064576.803:17736): avc: denied { read append } for pid=22937 comm="syz.0.14550" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 461.208514][ T29] audit: type=1400 audit(1751064576.803:17737): avc: denied { ioctl open } for pid=22937 comm="syz.0.14550" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 461.233426][T22938] random: crng reseeded on system resumption [ 461.308367][T22953] netlink: 'syz.3.14556': attribute type 29 has an invalid length. [ 461.317001][T22953] netlink: 'syz.3.14556': attribute type 29 has an invalid length. [ 461.328296][T22953] netlink: 500 bytes leftover after parsing attributes in process `syz.3.14556'. [ 461.378287][T22958] binfmt_misc: register: failed to install interpreter file ./file1 [ 461.432406][T22961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.452150][ T29] audit: type=1400 audit(1751064577.073:17738): avc: denied { setcurrent } for pid=22965 comm="syz.0.14562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 461.463304][T22961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.525640][ T29] audit: type=1401 audit(1751064577.083:17739): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 461.599411][ T29] audit: type=1400 audit(1751064577.223:17740): avc: denied { watch watch_reads } for pid=22976 comm="syz.5.14567" path="/725/file1" dev="tmpfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 461.703280][ T29] audit: type=1400 audit(1751064577.323:17741): avc: denied { map_read map_write } for pid=22986 comm="syz.5.14572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.724121][ T29] audit: type=1400 audit(1751064577.323:17742): avc: denied { read write } for pid=6224 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.748847][ T29] audit: type=1400 audit(1751064577.323:17743): avc: denied { open } for pid=6224 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.753373][T22991] batadv_slave_1: entered promiscuous mode [ 461.773500][ T29] audit: type=1400 audit(1751064577.323:17744): avc: denied { ioctl } for pid=6224 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.773538][ T29] audit: type=1400 audit(1751064577.323:17745): avc: denied { read write } for pid=29042 comm="syz-executor" name="loop3" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.852734][T22993] veth1: entered promiscuous mode [ 461.875962][T22991] veth1_virt_wifi: entered promiscuous mode [ 461.882418][T22990] veth1_virt_wifi: left promiscuous mode [ 461.888452][T22990] batadv_slave_1: left promiscuous mode [ 461.962473][T23022] loop3: detected capacity change from 0 to 512 [ 461.970987][T23022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.978146][T23022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 461.989368][T23022] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 462.005074][T23022] EXT4-fs (loop3): 1 truncate cleaned up [ 462.123362][T23050] netlink: 256 bytes leftover after parsing attributes in process `syz.7.14591'. [ 462.219194][T23071] loop0: detected capacity change from 0 to 512 [ 462.292501][T23071] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.311746][T23084] loop2: detected capacity change from 0 to 512 [ 462.320068][T23084] EXT4-fs: inline encryption not supported [ 462.326774][T23084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 462.371101][T23084] EXT4-fs (loop2): 1 truncate cleaned up [ 462.597157][T23122] loop2: detected capacity change from 0 to 1024 [ 462.619661][T23122] EXT4-fs: Ignoring removed orlov option [ 462.746251][T23137] loop3: detected capacity change from 0 to 2048 [ 462.846523][T23137] loop3: p1 < > p3 [ 462.854776][T23137] loop3: p3 size 134217728 extends beyond EOD, truncated [ 463.070993][T23168] loop0: detected capacity change from 0 to 256 [ 463.086292][T23168] FAT-fs (loop0): bogus number of FAT sectors [ 463.092494][T23168] FAT-fs (loop0): Can't find a valid FAT filesystem [ 463.150464][T23175] loop5: detected capacity change from 0 to 512 [ 463.165757][T23175] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.177272][T23175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.212141][T23175] ext4 filesystem being mounted at /742/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.221834][T23187] netlink: 'syz.2.14637': attribute type 29 has an invalid length. [ 463.246397][T23187] netlink: 'syz.2.14637': attribute type 29 has an invalid length. [ 463.276934][T23187] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14637'. [ 463.292138][T23193] sd 0:0:1:0: device reset [ 463.300706][T23197] syz_tun: entered allmulticast mode [ 463.317099][T23196] syz_tun: left allmulticast mode [ 463.386005][T23210] loop0: detected capacity change from 0 to 128 [ 463.444155][T23220] loop2: detected capacity change from 0 to 512 [ 463.452709][T23220] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.459838][T23210] syz.0.14647: attempt to access beyond end of device [ 463.459838][T23210] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 463.475119][T23220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.493864][T23225] loop5: detected capacity change from 0 to 512 [ 463.502840][T23220] ext4 filesystem being mounted at /780/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.504645][T23225] EXT4-fs: inline encryption not supported [ 463.525423][T23225] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 463.541024][T23225] EXT4-fs (loop5): 1 truncate cleaned up [ 463.564187][T26134] kworker/u8:245: attempt to access beyond end of device [ 463.564187][T26134] loop0: rw=1, sector=137, nr_sectors = 904 limit=128 [ 463.755316][T23277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14670'. [ 463.784430][T23280] loop2: detected capacity change from 0 to 164 [ 463.819601][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14672'. [ 463.919039][T23303] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14678'. [ 464.007801][T25379] bridge_slave_1: left allmulticast mode [ 464.013692][T25379] bridge_slave_1: left promiscuous mode [ 464.019579][T25379] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.034115][T25379] bridge_slave_0: left allmulticast mode [ 464.040055][T25379] bridge_slave_0: left promiscuous mode [ 464.046203][T25379] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.147621][T25379] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 464.156190][T25379] bridge1 (unregistering): left promiscuous mode [ 464.197789][T25379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.215661][T25379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.232593][T25379] bond0 (unregistering): Released all slaves [ 464.247202][T25379] bond1 (unregistering): Released all slaves [ 464.257018][T25379] bond2 (unregistering): Released all slaves [ 464.278214][T23317] netem: change failed [ 464.292304][T25379] tipc: Left network mode [ 464.334427][T25379] batadv_slave_0: left promiscuous mode [ 464.346747][T25379] hsr_slave_0: left promiscuous mode [ 464.355301][T25379] hsr_slave_1: left promiscuous mode [ 464.381075][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14702'. [ 464.399218][T25379] team0 (unregistering): Port device team_slave_1 removed [ 464.415814][T25379] team0 (unregistering): Port device team_slave_0 removed [ 464.445476][T26134] smc: removing ib device syz! [ 464.702659][T25379] IPVS: stop unused estimator thread 0... [ 464.847319][T23416] netlink: 96 bytes leftover after parsing attributes in process `syz.7.14729'. [ 464.916898][T23430] netlink: 268 bytes leftover after parsing attributes in process `syz.0.14732'. [ 464.950156][T23417] lo speed is unknown, defaulting to 1000 [ 465.010850][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14737'. [ 465.038607][T23464] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.047048][T23464] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.055317][T23464] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.063621][T23464] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.073898][T23464] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.082449][T23464] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.091004][T23464] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.099876][T23464] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.149536][T23417] chnl_net:caif_netlink_parms(): no params data found [ 465.217097][T23417] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.224487][T23417] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.233432][T23417] bridge_slave_0: entered allmulticast mode [ 465.240668][T23417] bridge_slave_0: entered promiscuous mode [ 465.248890][T23417] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.256151][T23417] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.264205][T23417] bridge_slave_1: entered allmulticast mode [ 465.272164][T23417] bridge_slave_1: entered promiscuous mode [ 465.299698][T23417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.307830][T23646] loop2: detected capacity change from 0 to 512 [ 465.312179][T23417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.316853][T23646] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 465.345179][T23417] team0: Port device team_slave_0 added [ 465.353208][T23417] team0: Port device team_slave_1 added [ 465.372792][T23417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.379852][T23417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.405861][T23417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.417857][T23417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.424916][T23417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.451043][T23417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.498190][T23417] hsr_slave_0: entered promiscuous mode [ 465.506182][T23417] hsr_slave_1: entered promiscuous mode [ 465.572410][T23770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14754'. [ 465.641649][T23806] netlink: 'syz.2.14759': attribute type 1 has an invalid length. [ 465.818667][T23825] loop2: detected capacity change from 0 to 512 [ 465.834023][T23417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 465.844939][T23417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.853985][T23825] ext4 filesystem being mounted at /819/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.877674][T23417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.896371][T23417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.951148][T23417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.964733][T23417] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.976143][T26167] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.983359][T26167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.998066][T25379] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.005382][T25379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.047159][T23417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.084048][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14774'. [ 466.093887][T23860] netlink: 160 bytes leftover after parsing attributes in process `syz.7.14774'. [ 466.123687][T23860] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14774'. [ 466.175311][T23417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.204968][T23891] loop2: detected capacity change from 0 to 1024 [ 466.231325][T23891] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 466.242526][T23891] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 466.267914][T23891] JBD2: no valid journal superblock found [ 466.273731][T23891] EXT4-fs (loop2): Could not load journal inode [ 466.314763][T23891] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 466.330696][T23910] loop3: detected capacity change from 0 to 1024 [ 466.346212][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 466.346230][ T29] audit: type=1400 audit(1751064581.973:18072): avc: denied { read } for pid=23911 comm="syz.7.14784" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 466.376566][ T29] audit: type=1400 audit(1751064581.973:18073): avc: denied { open } for pid=23911 comm="syz.7.14784" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 466.404112][T23904] lo speed is unknown, defaulting to 1000 [ 466.405924][ T29] audit: type=1400 audit(1751064582.033:18074): avc: denied { ioctl } for pid=23911 comm="syz.7.14784" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 466.437184][ T29] audit: type=1400 audit(1751064582.033:18075): avc: denied { append } for pid=23911 comm="syz.7.14784" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 466.487584][T23910] ext4 filesystem being mounted at /1170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.515745][ T29] audit: type=1326 audit(1751064582.133:18076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.539701][ T29] audit: type=1326 audit(1751064582.133:18077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.565132][ T29] audit: type=1326 audit(1751064582.133:18078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.589567][ T29] audit: type=1326 audit(1751064582.133:18079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.613467][ T29] audit: type=1326 audit(1751064582.133:18080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.637515][ T29] audit: type=1326 audit(1751064582.133:18081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6be0e929 code=0x7ffc0000 [ 466.668996][T23910] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: comm syz.3.14783: lblock 0 mapped to illegal pblock 0 (length 5) [ 466.682804][T23910] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 466.696691][T23910] EXT4-fs (loop3): This should not happen!! Data will be lost [ 466.696691][T23910] [ 466.768887][T23417] veth0_vlan: entered promiscuous mode [ 466.783503][T23417] veth1_vlan: entered promiscuous mode [ 466.800808][T23417] veth0_macvtap: entered promiscuous mode [ 466.814209][T23968] xt_hashlimit: max too large, truncated to 1048576 [ 466.824799][T23417] veth1_macvtap: entered promiscuous mode [ 466.854392][T23417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.880676][T23417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.915218][T23417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.924941][T23417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.933839][T23417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.942795][T23417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.957214][T23981] loop2: detected capacity change from 0 to 512 [ 466.964704][T23981] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.971269][T23981] EXT4-fs: Ignoring removed bh option [ 467.043626][T23981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.050346][T23999] serio: Serial port ptm0 [ 467.063388][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14806'. [ 467.063881][T23981] EXT4-fs (loop2): 1 truncate cleaned up [ 467.326269][T24035] loop2: detected capacity change from 0 to 128 [ 467.358438][T24035] ext4 filesystem being mounted at /830/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.483356][T24051] program syz.0.14826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.600752][T24065] SELinux: policydb version 0 does not match my version range 15-34 [ 467.600907][T24064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14831'. [ 467.611231][T24065] SELinux: failed to load policy [ 467.620571][T24064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14831'. [ 467.636508][T24064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14831'. [ 467.659574][T24064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14831'. [ 467.838341][T24093] loop5: detected capacity change from 0 to 512 [ 467.853341][T24093] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 468.223821][T24157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.402785][T24175] loop7: detected capacity change from 0 to 1024 [ 468.412721][T24175] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 468.424022][T24175] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 468.437624][T24175] JBD2: no valid journal superblock found [ 468.444181][T24175] EXT4-fs (loop7): Could not load journal inode [ 468.470752][T24175] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 468.876762][T24212] lo speed is unknown, defaulting to 1000 [ 468.968549][T24239] lo speed is unknown, defaulting to 1000 [ 469.127724][T24275] loop3: detected capacity change from 0 to 764 [ 469.135225][T24275] rock: directory entry would overflow storage [ 469.141971][T24275] rock: sig=0x4654, size=5, remaining=4 [ 469.231209][T24283] loop3: detected capacity change from 0 to 1024 [ 469.238632][T24283] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.249788][T24283] EXT4-fs (loop3): group descriptors corrupted! [ 469.260595][T24283] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 469.292955][T24290] netlink: 'syz.3.14905': attribute type 11 has an invalid length. [ 469.412531][T24306] loop0: detected capacity change from 0 to 2048 [ 469.472450][T24306] loop0: unable to read partition table [ 469.479766][T24306] loop0: partition table beyond EOD, truncated [ 469.486113][T24306] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 469.507580][T24311] loop3: detected capacity change from 0 to 1024 [ 469.530207][T24311] EXT4-fs: Ignoring removed bh option [ 470.108975][T24419] ------------[ cut here ]------------ [ 470.114590][T24419] WARNING: CPU: 1 PID: 24419 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 470.125017][T24419] Modules linked in: [ 470.129800][T24419] CPU: 1 UID: 0 PID: 24419 Comm: syz.7.14948 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 470.144214][T24419] Tainted: [W]=WARN [ 470.148209][T24419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.159296][T24419] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 470.166012][T24419] Code: 83 3d 43 2e 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 ca 26 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 470.187002][T24419] RSP: 0018:ffffc90001e63a30 EFLAGS: 00010246 [ 470.193173][T24419] RAX: 0b4d41867b2e6700 RBX: 0000000000000016 RCX: 0000000000000000 [ 470.201202][T24419] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 470.209246][T24419] RBP: 0000000000000dc0 R08: ffff88813e8fcb98 R09: 0000000000000000 [ 470.218031][T24419] R10: ffff88811d375d28 R11: 000188811d375d28 R12: ffffc90001e63d28 [ 470.226063][T24419] R13: 0000000000003f20 R14: 0000000000040dc0 R15: 0000000000000000 [ 470.234154][T24419] FS: 00007fad6a4776c0(0000) GS:ffff8882aef30000(0000) knlGS:0000000000000000 [ 470.243143][T24419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.250562][T24419] CR2: 0000200000005000 CR3: 000000010c6e0000 CR4: 00000000003506f0 [ 470.258720][T24419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.266945][T24419] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 470.275040][T24419] Call Trace: [ 470.279248][T24419] [ 470.282216][T24419] __alloc_pages_noprof+0x9/0x20 [ 470.287277][T24419] ___kmalloc_large_node+0x73/0x140 [ 470.292531][T24419] __kmalloc_large_node_noprof+0x16/0xa0 [ 470.298409][T24419] __kmalloc_noprof+0x2ab/0x3e0 [ 470.303392][T24419] ? hashtab_init+0x9b/0xe0 [ 470.308607][T24419] ? common_read+0x3f/0x300 [ 470.313158][T24419] hashtab_init+0x9b/0xe0 [ 470.317701][T24419] symtab_init+0x2c/0x40 [ 470.322141][T24419] common_read+0x10b/0x300 [ 470.326739][T24419] ? __pfx_common_read+0x10/0x10 [ 470.331747][T24419] policydb_read+0x64f/0x1330 [ 470.337381][T24419] ? security_load_policy+0x90/0x890 [ 470.342737][T24419] security_load_policy+0xba/0x890 [ 470.348019][T24419] ? rep_movs_alternative+0x4a/0x90 [ 470.353440][T24419] sel_write_load+0x1d4/0x380 [ 470.358265][T24419] ? __pfx_sel_write_load+0x10/0x10 [ 470.363597][T24419] vfs_write+0x266/0x8e0 [ 470.368775][T24419] ? __rcu_read_unlock+0x4f/0x70 [ 470.373921][T24419] ? __fget_files+0x184/0x1c0 [ 470.378732][T24419] ksys_write+0xda/0x1a0 [ 470.383041][T24419] __x64_sys_write+0x40/0x50 [ 470.387802][T24419] x64_sys_call+0x2cdd/0x2fb0 [ 470.392536][T24419] do_syscall_64+0xd2/0x200 [ 470.398055][T24419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 470.404403][T24419] ? clear_bhb_loop+0x40/0x90 [ 470.409444][T24419] ? clear_bhb_loop+0x40/0x90 [ 470.414210][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.420444][T24419] RIP: 0033:0x7fad6be0e929 [ 470.424921][T24419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.445632][T24419] RSP: 002b:00007fad6a477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.454376][T24419] RAX: ffffffffffffffda RBX: 00007fad6c035fa0 RCX: 00007fad6be0e929 [ 470.462615][T24419] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 470.471010][T24419] RBP: 00007fad6be90b39 R08: 0000000000000000 R09: 0000000000000000 [ 470.479807][T24419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.487862][T24419] R13: 0000000000000000 R14: 00007fad6c035fa0 R15: 00007fff82c57348 [ 470.495914][T24419] [ 470.498962][T24419] ---[ end trace 0000000000000000 ]--- [ 470.507753][T24419] SELinux: failed to load policy [ 470.549409][T24424] __nla_validate_parse: 10 callbacks suppressed [ 470.549428][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14949'. [ 470.566965][T24424] netem: change failed [ 470.581731][T24428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 470.588292][T24428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.596720][T24428] vhci_hcd vhci_hcd.0: Device attached [ 470.607362][T24428] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 470.614183][T24428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 470.621929][T24428] vhci_hcd vhci_hcd.0: Device attached [ 470.628977][T24428] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 470.635606][T24428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 470.643953][T24428] vhci_hcd vhci_hcd.0: Device attached [ 470.654135][T24428] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 470.660783][T24428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.668559][T24428] vhci_hcd vhci_hcd.0: Device attached [ 470.680475][T24428] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.689560][T24428] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 470.696191][T24428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.704044][T24428] vhci_hcd vhci_hcd.0: Device attached [ 470.713614][T24446] vhci_hcd: connection closed [ 470.713801][T27312] vhci_hcd: stop threads [ 470.713991][T24442] vhci_hcd: connection closed [ 470.719568][T27312] vhci_hcd: release socket [ 470.723189][T24432] vhci_hcd: connection closed [ 470.727767][T27312] vhci_hcd: disconnect device [ 470.737310][T24430] vhci_hcd: connection closed [ 470.742287][T24440] vhci_hcd: connection closed [ 470.753021][T27312] vhci_hcd: stop threads [ 470.762221][T27312] vhci_hcd: release socket [ 470.766747][T27312] vhci_hcd: disconnect device [ 470.776651][T27312] vhci_hcd: stop threads [ 470.781472][T27312] vhci_hcd: release socket [ 470.786042][T27312] vhci_hcd: disconnect device [ 470.810285][T27312] vhci_hcd: stop threads [ 470.814702][T27312] vhci_hcd: release socket [ 470.819239][T27312] vhci_hcd: disconnect device [ 470.824047][ T8186] vhci_hcd: vhci_device speed not set [ 470.831443][T27312] vhci_hcd: stop threads [ 470.835862][T27312] vhci_hcd: release socket [ 470.840352][T27312] vhci_hcd: disconnect device [ 471.182061][T24492] loop2: detected capacity change from 0 to 512 [ 471.190755][T24492] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.199088][T24492] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 471.212429][T24492] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 471.222318][T24492] EXT4-fs (loop2): orphan cleanup on readonly fs [ 471.230922][T24492] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.14972: Invalid block bitmap block 0 in block_group 0 [ 471.247783][T24492] EXT4-fs (loop2): Remounting filesystem read-only [ 471.267277][T24492] EXT4-fs (loop2): 1 orphan inode deleted [ 471.438255][T24507] binfmt_misc: register: failed to install interpreter file ./file2 [ 471.837917][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 471.837937][ T29] audit: type=1400 audit(1751064587.463:18302): avc: denied { bind } for pid=24515 comm="syz.7.14981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.869502][ T29] audit: type=1400 audit(1751064587.493:18303): avc: denied { ioctl } for pid=24515 comm="syz.7.14981" path="socket:[139403]" dev="sockfs" ino=139403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.937885][ T29] audit: type=1400 audit(1751064587.553:18304): avc: denied { mounton } for pid=24527 comm="syz.0.14984" path="/830/bus" dev="tmpfs" ino=4294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 471.971493][ T29] audit: type=1400 audit(1751064587.573:18305): avc: denied { mounton } for pid=24522 comm="syz.2.14983" path="/proc/3657/task" dev="proc" ino=138868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 471.995453][ T29] audit: type=1400 audit(1751064587.573:18306): avc: denied { mount } for pid=24522 comm="syz.2.14983" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 472.018902][T24530] futex_wake_op: syz.0.14986 tries to shift op by -1; fix this program [ 472.073383][ T29] audit: type=1400 audit(1751064587.693:18307): avc: denied { create } for pid=24536 comm="syz.2.14988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 472.107322][ T29] audit: type=1400 audit(1751064587.713:18308): avc: denied { write } for pid=24536 comm="syz.2.14988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 472.152291][ T29] audit: type=1400 audit(1751064587.773:18309): avc: denied { read append } for pid=24541 comm="syz.0.14991" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 472.153080][T24542] program syz.0.14991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.184924][ T29] audit: type=1400 audit(1751064587.773:18310): avc: denied { open } for pid=24541 comm="syz.0.14991" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 472.239191][ T29] audit: type=1400 audit(1751064587.863:18311): avc: denied { create } for pid=24549 comm="syz.7.14995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 472.270566][T10578] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 472.278357][T10578] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 472.285835][T10578] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 472.312446][T10578] hid-generic 0000:0004:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 472.389785][T24575] xt_bpf: check failed: parse error [ 472.474148][T24583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 472.481220][T24583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.488910][T24583] vhci_hcd vhci_hcd.0: Device attached [ 472.500948][T24587] netlink: 'syz.7.15006': attribute type 3 has an invalid length. [ 472.526811][T24583] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 472.533575][T24583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 472.541319][T24583] vhci_hcd vhci_hcd.0: Device attached [ 472.561525][T24595] loop7: detected capacity change from 0 to 128 [ 472.574161][T24595] ext4 filesystem being mounted at /988/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.600000][T24583] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 472.606784][T24583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 472.614309][T24583] vhci_hcd vhci_hcd.0: Device attached [ 472.640369][T24601] loop3: detected capacity change from 0 to 1024 [ 472.670723][T24603] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 472.677299][T24603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 472.685089][T24603] vhci_hcd vhci_hcd.0: Device attached [ 472.699918][T24583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 472.710268][T24601] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.15010: Allocating blocks 385-513 which overlap fs metadata [ 472.745571][T10578] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 472.755230][T24599] EXT4-fs (loop3): pa ffff8881069c39a0: logic 16, phys. 129, len 24 [ 472.763427][T24599] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 472.775202][T24583] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 472.775316][T24583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 472.776097][T24583] vhci_hcd vhci_hcd.0: Device attached [ 472.776748][T24596] vhci_hcd: connection closed [ 472.776778][T24608] vhci_hcd: connection closed [ 472.776894][T24584] vhci_hcd: connection reset by peer [ 472.777051][T24588] vhci_hcd: connection closed [ 472.777271][T29246] vhci_hcd: stop threads [ 472.777281][T29246] vhci_hcd: release socket [ 472.777342][T29246] vhci_hcd: disconnect device [ 472.777455][T29246] vhci_hcd: stop threads [ 472.777462][T29246] vhci_hcd: release socket [ 472.777475][T29246] vhci_hcd: disconnect device [ 472.777652][T29246] vhci_hcd: stop threads [ 472.777660][T29246] vhci_hcd: release socket [ 472.777673][T29246] vhci_hcd: disconnect device [ 472.777911][T29246] vhci_hcd: stop threads [ 472.777918][T29246] vhci_hcd: release socket [ 472.777951][T29246] vhci_hcd: disconnect device [ 472.778429][T24626] vhci_hcd: connection closed [ 472.778680][T26134] vhci_hcd: stop threads [ 472.778698][T26134] vhci_hcd: release socket [ 472.778707][T26134] vhci_hcd: disconnect device [ 473.014362][T24656] loop3: detected capacity change from 0 to 128 [ 473.024895][T24656] ext4 filesystem being mounted at /1234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.037993][T24660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15023'. [ 473.050448][T24660] netlink: 'syz.5.15023': attribute type 1 has an invalid length. [ 473.058412][T24660] netlink: 'syz.5.15023': attribute type 2 has an invalid length. [ 473.066328][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15023'. [ 473.111373][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15022'. [ 473.118803][T24669] loop5: detected capacity change from 0 to 512 [ 473.134075][T24669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.143123][T24669] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.173625][T24669] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 473.185837][T24662] 8021q: adding VLAN 0 to HW filter on device team1 [ 473.192826][T24669] EXT4-fs (loop5): 1 truncate cleaned up [ 473.340991][T24729] loop0: detected capacity change from 0 to 512 [ 473.357331][T24729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.361836][T24737] batadv_slave_0: entered promiscuous mode [ 473.380053][T24729] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 473.394898][T24729] EXT4-fs (loop0): 1 truncate cleaned up [ 473.420409][T24733] batadv_slave_0: left promiscuous mode [ 473.468064][T24751] loop0: detected capacity change from 0 to 512 [ 473.476989][T24751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.501687][T24751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.543658][T24751] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 473.577486][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15046'. [ 473.594075][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15046'. [ 473.621251][T24751] EXT4-fs (loop0): 1 truncate cleaned up [ 473.639200][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15046'. [ 473.694850][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15046'. [ 473.758389][T24779] netem: change failed [ 473.773493][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15055'. [ 473.923729][T24813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15068'. [ 473.937117][T24815] syz.5.15069: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 473.951955][T24815] CPU: 1 UID: 0 PID: 24815 Comm: syz.5.15069 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 473.952031][T24815] Tainted: [W]=WARN [ 473.952038][T24815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.952050][T24815] Call Trace: [ 473.952056][T24815] [ 473.952063][T24815] __dump_stack+0x1d/0x30 [ 473.952083][T24815] dump_stack_lvl+0xe8/0x140 [ 473.952101][T24815] dump_stack+0x15/0x1b [ 473.952167][T24815] warn_alloc+0x12b/0x1a0 [ 473.952220][T24815] ? audit_log_end+0x1d7/0x1f0 [ 473.952239][T24815] ? audit_log_end+0x1d7/0x1f0 [ 473.952256][T24815] __vmalloc_node_range_noprof+0x9c/0xe00 [ 473.952364][T24815] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 473.952393][T24815] ? slow_avc_audit+0x104/0x140 [ 473.952425][T24815] ? should_fail_ex+0x30/0x280 [ 473.952459][T24815] ? xskq_create+0x36/0xe0 [ 473.952541][T24815] vmalloc_user_noprof+0x7d/0xb0 [ 473.952571][T24815] ? xskq_create+0x80/0xe0 [ 473.952596][T24815] xskq_create+0x80/0xe0 [ 473.952618][T24815] xsk_init_queue+0x95/0xf0 [ 473.952693][T24815] xsk_setsockopt+0x35c/0x510 [ 473.952758][T24815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.952777][T24815] __sys_setsockopt+0x181/0x200 [ 473.952861][T24815] __x64_sys_setsockopt+0x64/0x80 [ 473.952892][T24815] x64_sys_call+0x2bd5/0x2fb0 [ 473.952912][T24815] do_syscall_64+0xd2/0x200 [ 473.952958][T24815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 473.952988][T24815] ? clear_bhb_loop+0x40/0x90 [ 473.953016][T24815] ? clear_bhb_loop+0x40/0x90 [ 473.953058][T24815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.953100][T24815] RIP: 0033:0x7fc92f43e929 [ 473.953114][T24815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.953130][T24815] RSP: 002b:00007fc92daa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.953147][T24815] RAX: ffffffffffffffda RBX: 00007fc92f665fa0 RCX: 00007fc92f43e929 [ 473.953186][T24815] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 473.953203][T24815] RBP: 00007fc92f4c0b39 R08: 0000000000000004 R09: 0000000000000000 [ 473.953220][T24815] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.953235][T24815] R13: 0000000000000000 R14: 00007fc92f665fa0 R15: 00007ffdca6e99f8 [ 473.953255][T24815] [ 473.953273][T24815] Mem-Info: [ 474.203167][T24815] active_anon:37638 inactive_anon:119 isolated_anon:0 [ 474.203167][T24815] active_file:15298 inactive_file:13305 isolated_file:0 [ 474.203167][T24815] unevictable:0 dirty:183 writeback:0 [ 474.203167][T24815] slab_reclaimable:3571 slab_unreclaimable:142756 [ 474.203167][T24815] mapped:29048 shmem:33709 pagetables:1496 [ 474.203167][T24815] sec_pagetables:0 bounce:0 [ 474.203167][T24815] kernel_misc_reclaimable:0 [ 474.203167][T24815] free:1698776 free_pcp:15619 free_cma:0 [ 474.249429][T24815] Node 0 active_anon:150584kB inactive_anon:476kB active_file:61192kB inactive_file:53220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116236kB dirty:800kB writeback:0kB shmem:134836kB writeback_tmp:0kB kernel_stack:12480kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 474.279408][T24815] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.308784][T24815] lowmem_reserve[]: 0 2882 7860 7860 [ 474.314217][T24815] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 474.345616][T24815] lowmem_reserve[]: 0 0 4978 4978 [ 474.350712][T24815] Node 0 Normal free:3831916kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150584kB inactive_anon:476kB active_file:61192kB inactive_file:53220kB unevictable:0kB writepending:800kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:58964kB local_pcp:50784kB free_cma:0kB [ 474.383713][T24815] lowmem_reserve[]: 0 0 0 0 [ 474.388429][T24815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 474.401276][T24815] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 474.418241][T24815] Node 0 Normal: 1541*4kB (M) 973*8kB (M) 267*16kB (UM) 122*32kB (ME) 122*64kB (M) 203*128kB (UME) 320*256kB (UME) 193*512kB (UME) 95*1024kB (UM) 20*2048kB (UM) 844*4096kB (UM) = 3831916kB [ 474.437327][T24815] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.447188][T24815] 62485 total pagecache pages [ 474.451918][T24815] 210 pages in swap cache [ 474.456399][T24815] Free swap = 124152kB [ 474.460605][T24815] Total swap = 124996kB [ 474.464910][T24815] 2097051 pages RAM [ 474.468795][T24815] 0 pages HighMem/MovableOnly [ 474.473611][T24815] 80812 pages reserved [ 474.666750][T24856] loop7: detected capacity change from 0 to 512 [ 474.673889][T24856] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.683084][T24856] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 474.706401][T24856] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 474.714956][T24856] EXT4-fs (loop7): orphan cleanup on readonly fs [ 474.723278][T24856] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.15087: Invalid block bitmap block 0 in block_group 0 [ 474.742029][T24856] EXT4-fs (loop7): Remounting filesystem read-only [ 474.749109][T24856] EXT4-fs (loop7): 1 orphan inode deleted [ 474.760292][T24856] EXT4-fs mount: 44 callbacks suppressed [ 474.760313][T24856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.791932][T24868] xt_bpf: check failed: parse error [ 474.833909][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.939281][T24890] loop5: detected capacity change from 0 to 512 [ 474.957150][T24890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 474.961215][T24892] loop2: detected capacity change from 0 to 512 [ 474.991100][T24890] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 474.997521][T24892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.019621][T24890] EXT4-fs (loop5): 1 truncate cleaned up [ 475.019726][T24892] ext4 filesystem being mounted at /886/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.046665][T24890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.061395][T24892] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 475.100084][ T8052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.111596][T23417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.445806][T24964] loop3: detected capacity change from 0 to 128 [ 475.456057][T24964] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.469020][T24964] ext4 filesystem being mounted at /1257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.523330][T29042] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.617693][T24988] __nla_validate_parse: 3 callbacks suppressed [ 475.617713][T24988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15127'. [ 475.633090][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15127'. [ 475.836783][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.845966][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.866099][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.906214][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.915258][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.941606][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 475.978367][T25024] netlink: 'syz.5.15136': attribute type 1 has an invalid length. [ 475.986316][T25024] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15136'. [ 476.006408][T25027] loop0: detected capacity change from 0 to 512 [ 476.017228][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15129'. [ 476.047483][T25027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.087586][T25027] ext4 filesystem being mounted at /868/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.116536][T25027] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.15137: corrupted inode contents [ 476.138395][T25027] EXT4-fs (loop0): Remounting filesystem read-only [ 476.155314][T25027] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 476.165324][T25051] loop2: detected capacity change from 0 to 2048 [ 476.197412][ T7609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.447676][T25116] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 476.454292][T25116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.462140][T25116] vhci_hcd vhci_hcd.0: Device attached [ 476.473992][T25119] vhci_hcd: connection closed [ 476.474345][T29246] vhci_hcd: stop threads [ 476.483452][T29246] vhci_hcd: release socket [ 476.487936][T29246] vhci_hcd: disconnect device [ 476.490469][T25124] xt_hashlimit: max too large, truncated to 1048576 [ 476.518304][T25105] lo speed is unknown, defaulting to 1000 [ 476.545898][T25155] netlink: 'syz.3.15165': attribute type 1 has an invalid length. [ 476.638929][T25105] chnl_net:caif_netlink_parms(): no params data found [ 476.701521][T25105] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.709573][T25105] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.716981][T25105] bridge_slave_0: entered allmulticast mode [ 476.723647][T25105] bridge_slave_0: entered promiscuous mode [ 476.730894][T25105] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.738735][T25105] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.746096][T25105] bridge_slave_1: entered allmulticast mode [ 476.752880][T25105] bridge_slave_1: entered promiscuous mode [ 476.773286][T25105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.787754][T25105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.820086][T25105] team0: Port device team_slave_0 added [ 476.827144][T25105] team0: Port device team_slave_1 added [ 476.859883][T25105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.867647][T25105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.893804][T25105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.911116][T25105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.918235][T25105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.945238][T25105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.984601][T25105] hsr_slave_0: entered promiscuous mode [ 476.994291][T25105] hsr_slave_1: entered promiscuous mode [ 477.018424][T25105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.026264][T25105] Cannot create hsr debugfs directory [ 477.054604][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 477.054623][ T29] audit: type=1400 audit(1751064592.673:18441): avc: denied { ioctl } for pid=25468 comm="syz.2.15180" path="socket:[140182]" dev="sockfs" ino=140182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.125337][ T29] audit: type=1400 audit(1751064592.733:18442): avc: denied { bind } for pid=25468 comm="syz.2.15180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.226348][T25542] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 477.234392][T25542] team0: Device ipvlan2 is already an upper device of the team interface [ 477.318927][T25583] loop3: detected capacity change from 0 to 512 [ 477.329973][T25583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 477.342369][T25583] EXT4-fs (loop3): 1 truncate cleaned up [ 477.351582][T25583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.387491][ T29] audit: type=1400 audit(1751064593.013:18443): avc: denied { create } for pid=25582 comm="syz.3.15192" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 477.488799][T25105] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 477.500041][T25105] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 477.509322][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.522686][T25105] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 477.539898][T25105] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 477.550269][ T29] audit: type=1326 audit(1751064593.173:18444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.574153][ T29] audit: type=1326 audit(1751064593.173:18445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.597983][ T29] audit: type=1326 audit(1751064593.173:18446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.621864][ T29] audit: type=1326 audit(1751064593.173:18447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.645703][ T29] audit: type=1326 audit(1751064593.173:18448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.669698][ T29] audit: type=1326 audit(1751064593.173:18449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.693723][ T29] audit: type=1326 audit(1751064593.173:18450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ec61e929 code=0x7ffc0000 [ 477.719386][T25638] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 477.720943][T25105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.750828][T25105] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.765341][T25643] loop3: detected capacity change from 0 to 1024 [ 477.773996][T10578] usb 5-1: enqueue for inactive port 0 [ 477.775826][T26134] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.786662][T26134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.787214][T10578] usb 5-1: enqueue for inactive port 0 [ 477.807658][T27312] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.808675][T25643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.814954][T27312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.865734][T10578] vhci_hcd: vhci_device speed not set [ 477.874338][T29042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.940026][T25105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.969412][T25673] loop5: detected capacity change from 0 to 512 [ 477.986026][T25673] EXT4-fs (loop5): orphan cleanup on readonly fs [ 477.993013][T25673] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.15212: bg 0: block 248: padding at end of block bitmap is not set [ 478.009404][T25673] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.15212: Failed to acquire dquot type 1 [ 478.021633][T25673] EXT4-fs (loop5): 1 truncate cleaned up [ 478.029599][T25673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.058540][T23417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.135274][T25105] veth0_vlan: entered promiscuous mode [ 478.143286][T25105] veth1_vlan: entered promiscuous mode [ 478.161619][T25105] veth0_macvtap: entered promiscuous mode [ 478.170564][T25105] veth1_macvtap: entered promiscuous mode [ 478.189212][T25105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.203467][T25105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.216358][T25105] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.225203][T25105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.234690][T25105] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.243595][T25105] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.334149][T25729] loop9: detected capacity change from 0 to 512 [ 478.347321][T25729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.362556][T25729] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.433611][T25738] loop5: detected capacity change from 0 to 1024 [ 478.444163][T25729] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 478.462735][T25738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.485957][T25105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.534504][T23417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.582030][T25762] SET target dimension over the limit! [ 478.604442][T25764] loop9: detected capacity change from 0 to 1024 [ 478.617142][T25764] EXT4-fs: Ignoring removed oldalloc option [ 478.623936][T25764] EXT4-fs: Ignoring removed orlov option [ 478.632829][T25764] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 478.658310][T25764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.705850][T25764] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 478.765050][T25105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.849136][T25806] rdma_op ffff88811ccbe980 conn xmit_rdma 0000000000000000 [ 478.871568][T25811] loop7: detected capacity change from 0 to 512 [ 478.891596][T25811] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 478.918171][T25811] EXT4-fs (loop7): 1 truncate cleaned up [ 478.937124][T25811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.069487][ T6224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.118830][T25814] ================================================================== [ 479.126965][T25814] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 479.134935][T25814] [ 479.137263][T25814] write to 0xffffea00051fb4d8 of 8 bytes by task 25826 on cpu 0: [ 479.145071][T25814] __filemap_remove_folio+0x1a5/0x2a0 [ 479.150466][T25814] filemap_remove_folio+0x6d/0x1d0 [ 479.155595][T25814] truncate_inode_folio+0x42/0x50 [ 479.160629][T25814] shmem_undo_range+0x244/0xa80 [ 479.165619][T25814] shmem_fallocate+0x799/0x840 [ 479.170405][T25814] vfs_fallocate+0x410/0x450 [ 479.175183][T25814] __x64_sys_fallocate+0x7a/0xd0 [ 479.180150][T25814] x64_sys_call+0x2b88/0x2fb0 [ 479.184927][T25814] do_syscall_64+0xd2/0x200 [ 479.189441][T25814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.195343][T25814] [ 479.197787][T25814] read to 0xffffea00051fb4d8 of 8 bytes by task 25814 on cpu 1: [ 479.205418][T25814] folio_mapping+0xa1/0x120 [ 479.209934][T25814] move_folios_to_lru+0x128/0x6a0 [ 479.215068][T25814] evict_folios+0x3013/0x33d0 [ 479.219760][T25814] try_to_shrink_lruvec+0x45a/0x7e0 [ 479.224971][T25814] shrink_lruvec+0x22e/0x1b40 [ 479.229852][T25814] shrink_node+0x686/0x2120 [ 479.234385][T25814] do_try_to_free_pages+0x3f6/0xcd0 [ 479.239623][T25814] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 479.245578][T25814] try_charge_memcg+0x358/0x9e0 [ 479.250552][T25814] obj_cgroup_charge_pages+0xa6/0x150 [ 479.255948][T25814] __memcg_kmem_charge_page+0x9f/0x170 [ 479.261440][T25814] __alloc_frozen_pages_noprof+0x188/0x360 [ 479.267277][T25814] alloc_pages_mpol+0xb3/0x250 [ 479.272179][T25814] alloc_pages_noprof+0x90/0x130 [ 479.277153][T25814] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 479.282996][T25814] __kvmalloc_node_noprof+0x30f/0x4e0 [ 479.288397][T25814] ip_set_alloc+0x1f/0x30 [ 479.292756][T25814] hash_netiface_create+0x282/0x740 [ 479.298002][T25814] ip_set_create+0x3c9/0x960 [ 479.302627][T25814] nfnetlink_rcv_msg+0x4c6/0x590 [ 479.307594][T25814] netlink_rcv_skb+0x120/0x220 [ 479.312383][T25814] nfnetlink_rcv+0x16b/0x1690 [ 479.317146][T25814] netlink_unicast+0x5a1/0x670 [ 479.321934][T25814] netlink_sendmsg+0x58b/0x6b0 [ 479.326741][T25814] __sock_sendmsg+0x142/0x180 [ 479.331439][T25814] ____sys_sendmsg+0x31e/0x4e0 [ 479.336232][T25814] ___sys_sendmsg+0x17b/0x1d0 [ 479.340931][T25814] __x64_sys_sendmsg+0xd4/0x160 [ 479.345800][T25814] x64_sys_call+0x2999/0x2fb0 [ 479.350612][T25814] do_syscall_64+0xd2/0x200 [ 479.355126][T25814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.361037][T25814] [ 479.363378][T25814] value changed: 0xffff88810465bc10 -> 0x0000000000000000 [ 479.370504][T25814] [ 479.372830][T25814] Reported by Kernel Concurrency Sanitizer on: [ 479.379083][T25814] CPU: 1 UID: 0 PID: 25814 Comm: syz.5.15250 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 479.393260][T25814] Tainted: [W]=WARN [ 479.397076][T25814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.407211][T25814] ================================================================== [ 479.865808][T25814] syz.5.15250 (25814) used greatest stack depth: 6056 bytes left