last executing test programs: 24.693650967s ago: executing program 2 (id=1621): unshare(0x22020600) epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) dup(0xffffffffffffffff) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 24.678576777s ago: executing program 2 (id=1623): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000300)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000bc0)="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", 0x52, 0x0, &(0x7f0000000280)="6ee35acbb732f7d1ab2c4a84ea731b9c6c04015dbf4f4907e89974b1760e715709b5e38614d23dd444ec4772f46600939334675982b8ab4969c2324ca9a4f07b1866dff00e6b4ec9461bee2e8ef01c55aa66"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000180)={[{@grpid}, {@jqfmt_vfsold}]}, 0x1, 0x254, &(0x7f0000000340)="$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") move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x121) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) 24.541929128s ago: executing program 2 (id=1627): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) kcmp(r1, 0xffffffffffffffff, 0x5, r3, r2) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 23.565526852s ago: executing program 2 (id=1652): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) open$dir(0x0, 0x80200, 0x30) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 22.615214847s ago: executing program 2 (id=1661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 22.401811718s ago: executing program 2 (id=1663): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x527, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) 22.288117128s ago: executing program 32 (id=1663): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x527, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) 16.466228095s ago: executing program 3 (id=1748): request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='%-#{+(-}\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000032bc051246e735a6f5ac21a6f18bcfd096f33d7cb9bfce13ad21405241de"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 16.455386625s ago: executing program 3 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x0) 16.341801425s ago: executing program 3 (id=1750): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x9, 0x6) 16.132054176s ago: executing program 3 (id=1752): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000680)={[{@init_itable}, {@noblock_validity}, {@noquota}, {@bsdgroups}, {@dioread_nolock}]}, 0x1, 0x517, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) 15.469210169s ago: executing program 3 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x1c}}, 0x0) 15.194828151s ago: executing program 3 (id=1766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 15.194598731s ago: executing program 33 (id=1766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 2.065177271s ago: executing program 4 (id=2011): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x300001a, &(0x7f00000003c0)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000280)=[{r3}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 1.864847661s ago: executing program 5 (id=2016): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75c, 0x107182) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_pidfd_open(0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000180)="0000001e0000", 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = dup2(r9, r9) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2}}, 0x26) sendmsg$netlink(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {0x0, 0x8bc}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0xb0) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="b9", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000d80), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.331873084s ago: executing program 1 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0xc, 0x9, 0x26889105dd50928b, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0xab3, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xb, 0x4, 0xe5d}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x3, 0x5, 0xf, 0x1}, {0x4, 0x5, 0x2, 0x5}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000003c0)='hrtimer_expire_entry\x00', r0, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=@ipmr_delroute={0x58, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20}, [@RTA_IP_PROTO={0x5}, @RTA_PRIORITY={0xfffffffffffffdaa}, @RTA_TABLE={0x8}, @RTA_MULTIPATH={0xc}, @RTA_UID={0x8}, @RTA_FLOW={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x58}}, 0x0) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 1.216620174s ago: executing program 1 (id=2028): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.182056885s ago: executing program 1 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 1.135197715s ago: executing program 4 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000000000000180c200000088a830008100400008004509002400"], 0x3e) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}], 0xa, "1351c74db891c807311699cc2905000000000000d005e4421f2e0a162fe451cf06012305c8a76f2a49074a554ef54f0486415feb605e76c530eb421654997fbe34a81b249160af7d17f37baca46811a513de8b9feebf20c52e4ee914a6605a87876520f731d30d56d6eca4c5b139824bffe26b1bcb7eab288c238f33076de07d6e824624ac0bd601bcf1aab12d683e705512bc48414d152edb"}, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(r3, &(0x7f0000000140), 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 1.008438395s ago: executing program 4 (id=2033): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0xf, &(0x7f0000000a40)=@ringbuf, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) syz_open_pts(r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 951.579906ms ago: executing program 5 (id=2035): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="9000a6000a000200aaaaaa"], 0x30}}, 0x0) 868.987036ms ago: executing program 5 (id=2036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 827.303216ms ago: executing program 5 (id=2037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000280)={0x2, 0x2, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0xc, 0xfffffffe}, &(0x7f0000000340)=0x8000, 0x0, 0xfffffffffffffff7, 0x10, 0x1ac, 0x0, 0x20, 0xe}}], 0x58}, 0x0) 790.181426ms ago: executing program 5 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x801, 0x1000000, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008400}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000000680)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1001, 0xfffffffffffffffd) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000101030000000000000000000a0000003000018024000180140003"], 0x44}}, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 704.705387ms ago: executing program 5 (id=2040): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x300001a, &(0x7f00000003c0)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000280)=[{r3}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 573.187507ms ago: executing program 6 (id=2042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000280)={0x2, 0x2, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0xc, 0xfffffffe}, &(0x7f0000000340)=0x8000, 0x0, 0xfffffffffffffff7, 0x10, 0x1ac, 0x0, 0x20, 0xe}}], 0x58}, 0x0) 542.222348ms ago: executing program 6 (id=2043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffffff, 0x0, {{@in=@multicast1, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x1}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) 475.611708ms ago: executing program 6 (id=2044): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4b"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = epoll_create(0x3) epoll_pwait2(r5, &(0x7f0000001280)=[{}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000004180)) ioctl$FITHAW(r0, 0xc0045878) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)={{0x10b, 0x8, 0x2, 0x8, 0x290, 0x4cc, 0x58, 0x40}, "89106a40e07fe03093d36d2a01442101dbc235a04c0f92bb475f069a7f473f63dbc47a1e188cca366435263c220693c23154df2de97448792418799f8a3d7b2683119870818dd52c188fe7078e6e085482cd44f4cb6237a6e90a7896d50905ffb65d700c78d6e017c0df41ec2647b27872bdd658b8da4357b31590cc672e34c79b591063ede3a19803136b5f3bdd79d1a742a412fbdfe7dcdcbce9e4a0baa764aecb7504b4a0f3ae", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0) rmdir(0x0) 353.525739ms ago: executing program 6 (id=2046): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x55d, &(0x7f0000000700)="$eJzs3d9rXFkdAPDvncykSRtN1H1YhV2Lu9Au2kyzdXeDyLaC+LagrIJvNabTEDrJlMxk24RFUvwDBBFd8EWffBH8AwTpg++KsOC+iytK0a6C+6B7l/tjmnY6s5l2M5ky+XzgzD335/ecucm5P85NbgDH1umIuBQRUxHxQkTMl9MrZYq9ImXLvXf3zdUsJZGmr/8ziaScli2WlClzqlxtphj01d7ZvbbSbDa2yvF6Z+N6vb2ze259Y2WtsdbYvHBh6eXlV5ZfWj5/KPXM6vXq1//20x/96huv/u5LN/5y+R9nf5CVd66c363HYSu+k1r2XdxTjYitUQQbg6myPrXofgAA8CTLzvE/HRFfyM//52MqP5sbbPq+fDLy0gEAAACHIb04F/9LIlIAAABgYlXyZ2CTymL5LMBcVCqLi8UzvE/FyUqz1e588Wpre/NK8azsQtQqV9ebjfMRp+eL8SQbX7p3R6EYfzGfl6XkgWeAfzI/m89fXG01r4zjhgcAAAAcQ6d6rv//M19c/wMAAAATZmHcBQAAAABGzvU/AAAATL7HuP6fHkU5AAAAgJH45muvZSntvv/6yhs729dab5y70mhfW9zYXl1cbW1dX1xrtdaa6YmIjYO212y1rn85Nrdv1juNdqfe3tm9vNHa3uxcXn/gFdgAAADAEfrU52+/k0TE3ldm8xTdvv2pASv4WwGYGJUhl0uzj3dHWxbgaA06zAOTr/rRsz3mCxOsVgyScZcDGJ+DGoCZQUv8cRSlAQAARuHMZ2+/kyYP9/9X9+8NABNq2P5/YPIM6P9P54+6IMCRO6D/H5hgNU8AwrF3cP//AEX//6WDI6TpgdsCAABGai5PSWWx7Auci8r7aSEWopZcXW82zkfEJyPiz/O1E9n4Ur5m4o8GAAAAAAAAAAAAAAAAAAAAAAAAAGBIaZpE+hiqj7UWAAAAMA4Rlb8n5fu/zsw/P9d7f2A6eT9/FfAHaZre+PnrP7u50ulsLWXT/5VPn46Izlvl9BfHcQcDAAAA6Oq+5b+4Tq+NuTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATKr37r652k1HGffO1yJioV/8aszkw5moRcTJfydRvW+9JCKmDiH+3q2IeLpf/CQrViyUpeiNX4mI2bwUI4//TJqmfeOf+tjR4Xi7nbU/lx76/ZveX6L/73+1SBc/bvzB7V/lXvs31Ru/WrR/nxgyxufe/k39vtHv7GdPFPOr/dufbvxkQPv7XL9g1Ycnfe/bu7uDypb+MuJM3+NP8kCsemfjer29s3tufWNlrbHW2LxwYenl5VeWX1o+X7+63myUn31j/PiZ334wKP6d30ecLON3d3paHlgWisFXy/qv9Nb/+SxTG7Tlff9/++bdzxTZWs8m4s6tiLPP9d//T+fDvt//L/6b5vLjQDb/THlMSPaKfESc7i787K//9OzA+t+aKXOPvv/PHlz13Avf+uFfh1wUADgC7Z3dayvNZmNrlJnv34hovpWm6XBrZWelw4dIIvZ6Z2UncIdci9mIGDCrf6wYdstPDSzqu7MRo987j5W5+CgLpyce6Yct2XsCKniMM9P5D+QfvjvutgkAADhc+2f/4y4JAAAAAAAAAAAAAAAAAAAAHF9H8X/FemPujaeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6cMAAAD//yZi1lo=") syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/233, 0xe9) 347.696959ms ago: executing program 0 (id=2047): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4f8, 0x65, 0x200, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x401}, @filter_kind_options=@f_fw={{0x7}, {0x4b0, 0x2, [@TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x680000, 0x6, 0x1, 0x5, 0x7f, 0x3b8, 0x6, 0xe, 0x2, 0xc, 0x100, 0x6, 0x7, 0x7, 0x3, 0xec4, 0x6, 0x4, 0x7, 0x7, 0x3, 0xc3, 0x4cf6, 0xb716, 0xfa, 0x7fff, 0x9, 0x8, 0x7, 0x10001, 0x5, 0x2, 0x80000001, 0x9, 0x3, 0x3, 0xfffffffe, 0x9, 0x80000000, 0x72, 0x2, 0x1, 0x2, 0x200, 0x1, 0x1, 0x6, 0x2, 0x1, 0x3, 0x0, 0x9, 0xa, 0x5, 0x4, 0x1, 0x5, 0x7ff, 0x27, 0x4, 0x44b011db, 0x0, 0x3, 0x7fff, 0x0, 0xac, 0x4, 0x1ff, 0x10001, 0x1, 0x80, 0x78, 0x8, 0x5, 0x5, 0x49f, 0x2, 0x2c, 0x5, 0x6, 0x8, 0x7fff, 0x80, 0x6, 0x2, 0x8, 0xd76, 0x9, 0x6, 0x81, 0x8, 0x3, 0xffffffff, 0x8, 0x8, 0x408000, 0x29, 0x1, 0x22, 0x1, 0xb, 0x8001, 0x4, 0x3, 0x9, 0x6, 0x200, 0x9, 0x401, 0x3, 0x101, 0xa6a, 0xf, 0xc, 0xffffffff, 0xff, 0x3, 0x3, 0x2, 0xb, 0xfffffff7, 0x9, 0x1, 0x6, 0x3, 0x0, 0x8, 0x40, 0x9a68, 0x81, 0x10, 0x80000000, 0x5, 0xd, 0x80000000, 0x3, 0x7, 0x3, 0xa, 0x9, 0x7, 0x9, 0x100, 0x4, 0x5dd0, 0xffffffff, 0x10000, 0x6, 0x7ff, 0x8, 0x2, 0x10001, 0x0, 0x10001, 0xdd00, 0x6, 0x7ff, 0x7ff, 0x8, 0x0, 0x104, 0x7, 0x5, 0xc, 0x4d24a3b0, 0x7, 0x3b600000, 0x8, 0xc, 0x1, 0x0, 0x81, 0x1000, 0x9, 0x4f, 0x400, 0x7, 0x2, 0x5, 0x9, 0x0, 0xd7, 0x7, 0x2, 0x9, 0x21, 0x1, 0x10, 0x0, 0x401, 0x6, 0x200, 0x4, 0x2, 0x7, 0x4, 0xfffff001, 0xaa9b, 0xffffbeac, 0x9, 0x6, 0x1, 0x50260dd5, 0xedf, 0x1, 0x18000000, 0xff, 0x68, 0x7fffffff, 0x2, 0x6, 0x101, 0x8, 0x2, 0x1, 0x5, 0x0, 0x6, 0xccca, 0x1, 0x0, 0x5, 0x0, 0x5, 0x7, 0x8, 0x1, 0x9, 0x0, 0x3, 0x10, 0x3f4, 0xffffff13, 0x3, 0x10001, 0x1000, 0x5, 0x10000, 0x3, 0x0, 0x2, 0x7f, 0x1ff, 0x9, 0x5cea, 0x8, 0x7, 0x2, 0x80000001, 0x1, 0x16, 0x7, 0x0, 0x6, 0x54c, 0x5]}]}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0x7}}, @TCA_FW_ACT={0x44, 0x4, [@m_sample={0x40, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_POLICE={0x4}, @TCA_FW_MASK={0x8, 0x5, 0xe4}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x40090}, 0x48000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 273.140159ms ago: executing program 1 (id=2048): openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x42) ioprio_set$pid(0x3, 0x0, 0x0) 268.986199ms ago: executing program 0 (id=2049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x3e) 249.701029ms ago: executing program 6 (id=2050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x801, 0x1000000, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008400}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000000680)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1001, 0xfffffffffffffffd) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000101030000000000000000000a0000003000018024000180140003"], 0x44}}, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 243.766169ms ago: executing program 1 (id=2051): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @empty}, 0xfffffffffffffe57) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x4, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f80)='free_extent_state\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="cd5daec0b5bedb8b2f3cc2db61a7bd27ff924fbc11df95671073591cbcb4b2dae48bb48d79affb6f4045f6e0adf1335e96d43f2b70eb4a56a0a7ae5d18c35f0dda69d0362e397f6ac93334f1fc5dc17fbdda2c832ada524c19a33556d9a9a405e8e5d524476087f05a375f7238fa069373463df81600d0d427e777e74b15b7136c3195ce31d9174ba2c7c1187bbcdd27e0d6ded8e614cf7d4e05558dbff7f8f06710f56393bcfba1e2b55e", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000e80)=""/81}], 0xe) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000480), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4e}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @multicast2, 0xffffffff, 0xffffffff, 'tunl0\x00', 'pim6reg0\x00', {}, {0xff}, 0x67, 0x3, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x1, 0x9, 0x3a1a, 'snmp\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000640)={0x15, 0x1ff, 0x7ff}) r6 = socket$netlink(0x10, 0x3, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0100001a00012420041feea501b0080a0108010002000003000000000000000000000000000000000000000000810000000000000000000000000077430ff989bdac664700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000002000200000000000000000000004c00140078636263286165732900"/244], 0x13c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) close(r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f00000000c0), 0xfe, 0x499, &(0x7f0000001780)="$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") r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89fc, &(0x7f0000001440)={'veth0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x3, 0x30040001, 0x0, 0x9, 0x0, 0x400000, 0x0, 0x3}}) getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000240)=0xc) 173.531139ms ago: executing program 6 (id=2052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 144.27337ms ago: executing program 0 (id=2053): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000300)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000bc0)="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", 0x52, 0x0, &(0x7f0000000280)="6ee35acbb732f7d1ab2c4a84ea731b9c6c04015dbf4f4907e89974b1760e715709b5e38614d23dd444ec4772f46600939334675982b8ab4969c2324ca9a4f07b1866dff00e6b4ec9461bee2e8ef01c55aa66"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000180)={[{@grpid}, {@jqfmt_vfsold}]}, 0x1, 0x254, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)) fallocate(r3, 0x20, 0x0, 0x8000) 135.402079ms ago: executing program 4 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffffff, 0x0, {{@in=@multicast1, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x1}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) 98.58325ms ago: executing program 1 (id=2055): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8, 0x40, 0x0, 0x7}, {0x1ff, 0x3, 0x0, 0x8}, {0x5, 0x4e, 0x5, 0x5}, {0x9, 0x6, 0x4, 0x3}, {0x4, 0xc2, 0x0, 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000061108c000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffac, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000377400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000c14c693dc16762515577ed02d493bd2d82c8d7d16121de03168752112b8a231a5686a39a00000000"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='ext4_error\x00', r2, 0x0, 0x4}, 0x18) setfsuid(0x0) syz_clone(0x40005080, &(0x7f0000001580)="9329e9ca2b67b01fabae7de23c82693949cabbe152e5c050f5bbc001c3c5", 0x1e, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="adbdac82a67198ce579499982873d21c5803f0ac6ce2e6791293750a210e49d054e222127a041a70b6d3d120dc3fa754865428d357dd11f71e572dcbc152951732261db3d22a9ab8ce9381a751568821cb9a041b6ba35f217ff404d8ace21d92861548d57b72d4fc8f99cf48f967bddbe54805d268603f5d40b8c5e676f03bde25d6968092a6a4a21cb9fad8ac11aa9d233b110c996d58a519391f36aab8391fc6bd51bf8eb4cbd27af65269ac0125045414ffd31865178afeb3dfdbc19c579ca84deb34de412c4da384b3d0b9c978480d2a3e7c03") 98.05831ms ago: executing program 4 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004", @ANYRES32], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b9239f00d5245a1063659b79ea55d7f0b9c06794fd9496b370b42b4bf2b77bb0d5b52273b64214d0311f8e783c243c92fc0b90ececabd87e145f0bec9371968d848b57a4ac92930fef865a61377e662f", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25660000000800b700d10000000500190109000000050019010900000008002700020000000800b7005a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x13) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r7 = mq_open(&(0x7f00000015c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0yC\xb4{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\x91rZ\xec8\x92\xb4\x10J\xdew*\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15 p4 [ 108.905347][ T6901] loop3: p4 size 8388608 extends beyond EOD, truncated [ 108.918719][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.935283][ T2999] loop3: p1 < > p4 [ 108.953396][ T2999] loop3: p4 size 8388608 extends beyond EOD, truncated [ 108.971676][ T6907] loop0: detected capacity change from 0 to 512 [ 109.002274][ T6907] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1311: bg 0: block 5: invalid block bitmap [ 109.016258][ T6907] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 109.027873][ T6910] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 109.037807][ T6907] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1311: attempt to clear invalid blocks 9508352 len 1 [ 109.051578][ T6907] EXT4-fs (loop0): 1 orphan inode deleted [ 109.057817][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.123023][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.374287][ T6925] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.447107][ T6932] loop4: detected capacity change from 0 to 128 [ 109.460151][ T6932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.475463][ T6932] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.502279][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.530884][ T6940] loop4: detected capacity change from 0 to 256 [ 109.620174][ T6947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1327'. [ 109.694216][ T6947] veth0_vlan: left promiscuous mode [ 109.699944][ T6947] veth0_vlan: entered promiscuous mode [ 109.867755][ T6955] loop1: detected capacity change from 0 to 1024 [ 109.917204][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.988044][ T6955] EXT4-fs: Invalid want_extra_isize 256 [ 110.082428][ T6970] loop2: detected capacity change from 0 to 512 [ 110.089640][ T6972] loop3: detected capacity change from 0 to 512 [ 110.101248][ T6972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.105131][ T6970] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.125525][ T6972] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 110.135683][ T6970] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 110.142596][ T6972] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 110.153340][ T6972] EXT4-fs (loop3): 1 truncate cleaned up [ 110.155089][ T6970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 110.159338][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.178272][ T6970] System zones: 1-12 [ 110.184959][ T6970] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1336: corrupted in-inode xattr: e_value size too large [ 110.199381][ T6970] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1336: couldn't read orphan inode 15 (err -117) [ 110.212977][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.224007][ T6972] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm syz.3.1337: lblock 0 mapped to illegal pblock 4 (length 1) [ 110.243321][ T6972] EXT4-fs (loop3): Remounting filesystem read-only [ 110.256608][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.272853][ T6972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.320799][ T6977] netlink: 'syz.2.1338': attribute type 7 has an invalid length. [ 110.328658][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 110.366019][ T6980] loop3: detected capacity change from 0 to 512 [ 111.319616][ T7020] loop1: detected capacity change from 0 to 128 [ 111.343357][ T7022] loop0: detected capacity change from 0 to 512 [ 111.351466][ T7022] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1356: corrupted in-inode xattr: invalid ea_ino [ 111.365378][ T7022] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1356: couldn't read orphan inode 15 (err -117) [ 111.378109][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.397259][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 111.397276][ T29] audit: type=1400 audit(1733271945.901:7374): avc: denied { map } for pid=7021 comm="syz.0.1356" path="/258/file0/file0/memory.swap.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.434187][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.454922][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.454922][ T7024] loop1: rw=2049, sector=292, nr_sectors = 32 limit=128 [ 111.470470][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.470470][ T7024] loop1: rw=2049, sector=340, nr_sectors = 8 limit=128 [ 111.484870][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.484870][ T7024] loop1: rw=2049, sector=356, nr_sectors = 16 limit=128 [ 111.498725][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.498725][ T7024] loop1: rw=2049, sector=380, nr_sectors = 8 limit=128 [ 111.514778][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.514778][ T7024] loop1: rw=2049, sector=396, nr_sectors = 8 limit=128 [ 111.528566][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.528566][ T7024] loop1: rw=2049, sector=412, nr_sectors = 8 limit=128 [ 111.547517][ T7028] loop0: detected capacity change from 0 to 512 [ 111.554019][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.554019][ T7024] loop1: rw=2049, sector=428, nr_sectors = 8 limit=128 [ 111.567820][ T7028] EXT4-fs: Ignoring removed oldalloc option [ 111.575228][ T7028] EXT4-fs: quotafile must be on filesystem root [ 111.581801][ T7024] syz.1.1355: attempt to access beyond end of device [ 111.581801][ T7024] loop1: rw=2049, sector=444, nr_sectors = 41 limit=128 [ 111.618286][ T7030] loop3: detected capacity change from 0 to 512 [ 111.629081][ T7030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.651964][ T7030] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 111.660462][ T7030] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 111.669815][ T7030] EXT4-fs (loop3): 1 truncate cleaned up [ 111.671489][ T7035] loop0: detected capacity change from 0 to 164 [ 111.676065][ T7030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.697220][ T7030] serio: Serial port ptm0 [ 111.714027][ T7035] ISOFS: unable to read i-node block [ 111.719402][ T7035] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 111.729855][ T7030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.733997][ T7020] syz.1.1355: attempt to access beyond end of device [ 111.733997][ T7020] loop1: rw=2049, sector=324, nr_sectors = 16 limit=128 [ 111.752701][ T7020] syz.1.1355: attempt to access beyond end of device [ 111.752701][ T7020] loop1: rw=2049, sector=348, nr_sectors = 8 limit=128 [ 111.861808][ T7043] loop1: detected capacity change from 0 to 164 [ 111.879127][ T7047] loop3: detected capacity change from 0 to 512 [ 111.901457][ T7047] ext4: Unknown parameter '.' [ 111.969629][ T29] audit: type=1326 audit(1733271946.471:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.001313][ T29] audit: type=1326 audit(1733271946.501:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.024833][ T29] audit: type=1326 audit(1733271946.501:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.063000][ T29] audit: type=1326 audit(1733271946.501:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.086563][ T29] audit: type=1326 audit(1733271946.501:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.110103][ T29] audit: type=1326 audit(1733271946.501:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.133712][ T29] audit: type=1326 audit(1733271946.501:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.157337][ T29] audit: type=1326 audit(1733271946.501:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.180866][ T29] audit: type=1326 audit(1733271946.501:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 112.321206][ T7082] loop3: detected capacity change from 0 to 512 [ 112.344783][ T7082] EXT4-fs error (device loop3): ext4_quota_enable:7108: comm syz.3.1378: Bad quota inum: 1, type: 2 [ 112.363010][ T7082] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 112.389496][ T7087] loop4: detected capacity change from 0 to 512 [ 112.396292][ T7083] Â: renamed from pim6reg1 [ 112.405450][ T7082] EXT4-fs (loop3): mount failed [ 112.411191][ T7087] EXT4-fs (loop4): blocks per group (33) and clusters per group (32768) inconsistent [ 112.823218][ T7102] serio: Serial port pts0 [ 112.928640][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 112.937723][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1387'. [ 113.035794][ T7117] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1389'. [ 113.109606][ T7122] loop0: detected capacity change from 0 to 512 [ 113.122747][ T7120] rose0: tun_chr_ioctl cmd 62721 [ 113.139524][ T7122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.172294][ T7122] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 113.192108][ T7122] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 113.225935][ T7122] EXT4-fs (loop0): 1 truncate cleaned up [ 113.252204][ T7122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.305920][ T7122] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 4: comm syz.0.1393: lblock 0 mapped to illegal pblock 4 (length 1) [ 113.337946][ T7122] EXT4-fs (loop0): Remounting filesystem read-only [ 113.363842][ T7135] dvmrp1: entered allmulticast mode [ 113.369979][ T7122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.429203][ T7137] loop2: detected capacity change from 0 to 512 [ 113.463325][ T7141] loop0: detected capacity change from 0 to 512 [ 113.469858][ T7140] loop4: detected capacity change from 0 to 128 [ 113.470977][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.488381][ T7141] EXT4-fs: quotafile must be on filesystem root [ 113.500715][ T7140] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.526252][ T7137] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.547126][ T7140] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.642833][ T7140] EXT4-fs (loop4): shut down requested (0) [ 113.653762][ T7137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.727105][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.777038][ T7159] loop2: detected capacity change from 0 to 512 [ 113.826615][ T7159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.878913][ T7159] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.898425][ T7168] loop4: detected capacity change from 0 to 512 [ 113.916805][ T7168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.964127][ T7168] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 114.003459][ T7168] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 114.043889][ T7168] EXT4-fs (loop4): 1 truncate cleaned up [ 114.062282][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.088887][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.145777][ T7168] serio: Serial port ptm0 [ 114.152798][ T7171] loop2: detected capacity change from 0 to 128 [ 114.167021][ T7168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.191070][ T7171] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.243016][ T7171] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.279834][ T7171] EXT4-fs (loop2): shut down requested (0) [ 114.339032][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.487084][ T7184] loop4: detected capacity change from 0 to 512 [ 114.506315][ T7184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.514929][ T7184] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.524015][ T7184] EXT4-fs (loop4): blocks per group (64) and clusters per group (32768) inconsistent [ 114.746872][ T7196] loop1: detected capacity change from 0 to 2048 [ 114.747511][ T7201] loop4: detected capacity change from 0 to 128 [ 114.795385][ T7201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.812001][ T7196] loop1: p1 < > p4 [ 114.814208][ T7201] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.820419][ T7209] loop3: detected capacity change from 0 to 512 [ 114.829890][ T7201] EXT4-fs (loop4): shut down requested (0) [ 114.837306][ T7196] loop1: p4 size 8388608 extends beyond EOD, truncated [ 114.899522][ T2999] loop1: p1 < > p4 [ 114.907257][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.916891][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 114.924327][ T7212] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 114.965048][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.005254][ T7218] loop4: detected capacity change from 0 to 512 [ 115.033738][ T7209] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.061670][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.082520][ T7218] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.092838][ T7218] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 115.114217][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 115.128075][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 115.138277][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.171957][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.193529][ T7224] loop1: detected capacity change from 0 to 512 [ 115.204969][ T7224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.242641][ T7224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 115.251260][ T7224] System zones: 1-12 [ 115.255622][ T7224] EXT4-fs (loop1): 1 truncate cleaned up [ 115.307446][ T3304] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 115.327841][ T7233] loop3: detected capacity change from 0 to 128 [ 115.346365][ T7235] loop0: detected capacity change from 0 to 512 [ 115.370707][ T7233] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.400945][ T7242] loop4: detected capacity change from 0 to 2048 [ 115.413247][ T7235] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.420305][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.434340][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.444075][ T7233] EXT4-fs (loop3): shut down requested (0) [ 115.445170][ T7242] loop4: p1 < > p4 [ 115.455057][ T7242] loop4: p4 size 8388608 extends beyond EOD, truncated [ 115.469728][ T2999] loop4: p1 < > p4 [ 115.471907][ T7251] batadv_slave_1: entered promiscuous mode [ 115.474406][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 115.480138][ T7251] bridge0: entered promiscuous mode [ 115.492958][ T7250] bridge0: left promiscuous mode [ 115.498249][ T7250] batadv_slave_1: left promiscuous mode [ 115.537141][ T7242] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 115.598232][ T7257] loop0: detected capacity change from 0 to 4096 [ 115.688777][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 115.700132][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 115.721525][ T7265] loop0: detected capacity change from 0 to 512 [ 115.765834][ T7265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.779560][ T7265] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.941900][ T7277] loop2: detected capacity change from 0 to 128 [ 115.962952][ T7277] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.995712][ T7277] EXT4-fs (loop2): shut down requested (0) [ 116.140847][ T7282] loop1: detected capacity change from 0 to 2048 [ 116.213157][ T7282] loop1: p1 < > p4 [ 116.217933][ T7282] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.302309][ T7286] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 116.556764][ T7288] rose0: tun_chr_ioctl cmd 62721 [ 116.607274][ T7292] dvmrp1: entered allmulticast mode [ 116.708899][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 116.708927][ T29] audit: type=1400 audit(1733271951.211:7419): avc: denied { getopt } for pid=7299 comm="syz.2.1464" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.129869][ T7316] loop3: detected capacity change from 0 to 128 [ 117.172400][ T29] audit: type=1400 audit(1733271951.661:7420): avc: denied { read } for pid=7318 comm="syz.2.1472" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.195477][ T29] audit: type=1400 audit(1733271951.661:7421): avc: denied { open } for pid=7318 comm="syz.2.1472" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.219068][ T29] audit: type=1400 audit(1733271951.661:7422): avc: denied { ioctl } for pid=7318 comm="syz.2.1472" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.250503][ T7316] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.273955][ T7329] loop1: detected capacity change from 0 to 512 [ 117.289035][ T7329] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.297153][ T7316] EXT4-fs (loop3): shut down requested (0) [ 117.332371][ T7329] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #4: comm syz.1.1474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 117.353201][ T7331] loop4: detected capacity change from 0 to 128 [ 117.355347][ T7329] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.1474: Bad quota inode: 4, type: 1 [ 117.374266][ T7329] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.390128][ T7329] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 117.394220][ T7331] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.408465][ T7329] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.440912][ T7329] EXT4-fs warning (device loop1): ext4_multi_mount_protect:329: MMP interval 2680 higher than expected, please wait. [ 117.440912][ T7329] [ 117.460177][ T29] audit: type=1400 audit(1733271951.961:7423): avc: denied { bind } for pid=7320 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.479895][ T29] audit: type=1400 audit(1733271951.961:7424): avc: denied { name_bind } for pid=7320 comm="syz.4.1473" src=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 117.486068][ T7343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7343 comm=syz.3.1481 [ 117.500830][ T29] audit: type=1400 audit(1733271951.961:7425): avc: denied { node_bind } for pid=7320 comm="syz.4.1473" src=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 117.570987][ T29] audit: type=1326 audit(1733271952.071:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.0.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc184c8ff19 code=0x0 [ 117.889586][ T7356] dvmrp1: entered allmulticast mode [ 118.132580][ T7329] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 118.132580][ T7329] [ 118.328127][ T7368] loop4: detected capacity change from 0 to 512 [ 118.356581][ T7368] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.386277][ T7368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 118.403216][ T29] audit: type=1400 audit(1733271952.901:7427): avc: denied { nlmsg_read } for pid=7372 comm="syz.1.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.425412][ T7368] System zones: 1-12 [ 118.432048][ T7368] EXT4-fs (loop4): 1 truncate cleaned up [ 118.445069][ T7374] loop0: detected capacity change from 0 to 512 [ 118.488523][ T7374] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.527534][ T7376] loop1: detected capacity change from 0 to 2048 [ 118.583142][ T7376] loop1: p1 < > p4 [ 118.587646][ T7376] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.612518][ T29] audit: type=1400 audit(1733271953.111:7428): avc: denied { append } for pid=7375 comm="syz.1.1493" name="loop1p1" dev="devtmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.645834][ T7376] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 119.116963][ T7400] loop4: detected capacity change from 0 to 256 [ 119.191027][ T7400] vfat: Bad value for 'allow_utime' [ 119.403701][ T7406] loop1: detected capacity change from 0 to 2048 [ 119.446520][ T7408] dvmrp1: entered allmulticast mode [ 119.507320][ T7406] loop1: p1 < > p4 [ 119.617696][ T7406] loop1: p4 size 8388608 extends beyond EOD, truncated [ 119.853656][ T7416] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 120.084488][ T2999] loop1: p1 < > p4 [ 120.154700][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 120.292221][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 120.335048][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 120.543129][ T7444] loop1: detected capacity change from 0 to 1024 [ 120.583428][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 120.595494][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 120.605210][ T7444] EXT4-fs: Ignoring removed oldalloc option [ 120.622870][ T7444] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 120.635968][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.654643][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.663821][ T7444] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 120.681586][ T7453] loop2: detected capacity change from 0 to 512 [ 120.730480][ T7453] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.746895][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.760320][ T7462] loop3: detected capacity change from 0 to 512 [ 120.766971][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.769218][ T7462] EXT4-fs: Ignoring removed bh option [ 120.790498][ T7460] loop1: detected capacity change from 0 to 512 [ 120.802089][ T7460] EXT4-fs: Ignoring removed orlov option [ 120.810317][ T7460] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 120.811807][ T7462] EXT4-fs error (device loop3): ext4_quota_enable:7112: comm syz.3.1525: inode #33554432: comm syz.3.1525: iget: illegal inode # [ 120.834520][ T7462] EXT4-fs (loop3): Remounting filesystem read-only [ 120.841107][ T7462] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 120.856862][ T7462] EXT4-fs (loop3): mount failed [ 120.885658][ T7462] Cannot find set identified by id 0 to match [ 120.901893][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.912195][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.227786][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 121.335155][ T7496] loop4: detected capacity change from 0 to 128 [ 121.348786][ T7494] loop0: detected capacity change from 0 to 2048 [ 121.393277][ T7494] loop0: p1 < > p4 [ 121.398218][ T7494] loop0: p4 size 8388608 extends beyond EOD, truncated [ 121.417755][ T2999] loop0: p1 < > p4 [ 121.423109][ T2999] loop0: p4 size 8388608 extends beyond EOD, truncated [ 121.460241][ T7504] rose0: tun_chr_ioctl cmd 62721 [ 121.473708][ T7494] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 121.556102][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.568856][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.582942][ T7519] loop1: detected capacity change from 0 to 512 [ 121.589406][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.601185][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.622301][ T7519] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.767220][ T7539] loop1: detected capacity change from 0 to 1024 [ 121.841080][ T7545] loop1: detected capacity change from 0 to 512 [ 121.848142][ T7545] EXT4-fs: Ignoring removed bh option [ 121.853995][ T7545] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 121.869916][ T7545] EXT4-fs error (device loop1): __ext4_iget:4984: inode #15: block 1803188595: comm syz.1.1559: invalid block [ 121.878539][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 121.878558][ T29] audit: type=1400 audit(1733271956.371:7440): avc: denied { create } for pid=7548 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.894894][ T7545] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1559: couldn't read orphan inode 15 (err -117) [ 121.915508][ T29] audit: type=1400 audit(1733271956.421:7441): avc: denied { write } for pid=7548 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.949479][ T29] audit: type=1400 audit(1733271956.431:7442): avc: denied { nlmsg_read } for pid=7548 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.970858][ T29] audit: type=1400 audit(1733271956.461:7443): avc: denied { execute } for pid=7543 comm="syz.1.1559" path="/283/file0/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.995119][ T29] audit: type=1400 audit(1733271956.461:7444): avc: denied { getopt } for pid=7543 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.107072][ T7566] loop1: detected capacity change from 0 to 256 [ 122.150373][ T29] audit: type=1400 audit(1733271956.651:7445): avc: denied { create } for pid=7569 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.170395][ T29] audit: type=1400 audit(1733271956.651:7446): avc: denied { ioctl } for pid=7569 comm="syz.0.1570" path="socket:[18691]" dev="sockfs" ino=18691 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.226798][ T7575] loop4: detected capacity change from 0 to 2048 [ 122.234458][ T7579] loop0: detected capacity change from 0 to 128 [ 122.255083][ T7579] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.474988][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.484291][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.512837][ T29] audit: type=1400 audit(1733271957.011:7447): avc: denied { checkpoint_restore } for pid=7589 comm="syz.3.1578" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.661113][ T7604] loop3: detected capacity change from 0 to 1024 [ 122.667927][ T7604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.674919][ T7604] ext2: Unknown parameter 'uid>00000000000000000000' [ 122.704017][ T7606] loop0: detected capacity change from 0 to 128 [ 122.830608][ T7607] bio_check_eod: 6 callbacks suppressed [ 122.830639][ T7607] syz.0.1585: attempt to access beyond end of device [ 122.830639][ T7607] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.969376][ T7605] syz.0.1585: attempt to access beyond end of device [ 122.969376][ T7605] loop0: rw=524288, sector=145, nr_sectors = 88 limit=128 [ 122.984757][ T7605] syz.0.1585: attempt to access beyond end of device [ 122.984757][ T7605] loop0: rw=524288, sector=305, nr_sectors = 64 limit=128 [ 123.139438][ T7620] loop0: detected capacity change from 0 to 164 [ 123.178104][ T7622] loop4: detected capacity change from 0 to 128 [ 123.541224][ T7622] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.758100][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.809083][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.847320][ T7647] loop0: detected capacity change from 0 to 160 [ 124.047467][ T7657] loop3: detected capacity change from 0 to 512 [ 124.088322][ T7661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1604'. [ 124.106041][ T7657] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.149678][ T7657] capability: warning: `syz.3.1602' uses 32-bit capabilities (legacy support in use) [ 124.211704][ T7670] loop0: detected capacity change from 0 to 512 [ 124.265530][ T7674] loop2: detected capacity change from 0 to 128 [ 124.278424][ T7674] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.319962][ T7684] loop3: detected capacity change from 0 to 2048 [ 124.323565][ T7670] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.338685][ T7674] EXT4-fs (loop2): shut down requested (0) [ 124.347166][ T7670] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1606: corrupted xattr block 32: invalid header [ 124.361012][ T3486] loop3: p1 < > p4 [ 124.362289][ T7670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 124.365558][ T3486] loop3: p4 size 8388608 extends beyond EOD, truncated [ 124.373974][ T7670] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1606: corrupted xattr block 32: invalid header [ 124.395381][ T7684] loop3: p1 < > p4 [ 124.400773][ T7670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 124.410012][ T7670] EXT4-fs error (device loop0): ext4_xattr_block_list:768: inode #15: comm syz.0.1606: corrupted xattr block 32: invalid header [ 124.410068][ T7684] loop3: p4 size 8388608 extends beyond EOD, truncated [ 124.429816][ T29] audit: type=1326 audit(1733271958.931:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 124.454487][ T29] audit: type=1326 audit(1733271958.931:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 124.571384][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 124.574300][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 124.604905][ T7697] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1613'. [ 124.647430][ T7704] loop4: detected capacity change from 0 to 1024 [ 124.695922][ T7704] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.759602][ T7718] loop2: detected capacity change from 0 to 128 [ 124.785266][ T7718] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.810903][ T7718] EXT4-fs (loop2): shut down requested (0) [ 124.909293][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.919085][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.955329][ T7730] usb usb7: usbfs: process 7730 (syz.1.1628) did not claim interface 0 before use [ 125.002947][ T7736] rose0: tun_chr_ioctl cmd 62721 [ 125.185863][ T7754] loop1: detected capacity change from 0 to 128 [ 125.207680][ T7754] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.238595][ T7754] EXT4-fs (loop1): shut down requested (0) [ 125.661770][ T7776] loop4: detected capacity change from 0 to 512 [ 125.662183][ T7776] EXT4-fs: test_dummy_encryption option not supported [ 125.820423][ T7785] loop4: detected capacity change from 0 to 128 [ 125.919725][ T7791] loop2: detected capacity change from 0 to 512 [ 126.154728][ T7791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.200884][ T7785] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.228454][ T7785] EXT4-fs (loop4): shut down requested (0) [ 126.239734][ T7791] EXT4-fs (loop2): 1 truncate cleaned up [ 126.265501][ T7788] veth0_vlan: left promiscuous mode [ 126.294505][ T7788] veth0_vlan: entered promiscuous mode [ 126.772812][ T7791] loop2: detected capacity change from 512 to 0 [ 126.796942][ T3309] syz-executor: attempt to access beyond end of device [ 126.796942][ T3309] loop2: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 126.870387][ T7559] syz.2.1565: attempt to access beyond end of device [ 126.870387][ T7559] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 126.883740][ T7559] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 126.894768][ T7559] EXT4-fs (loop2): I/O error while writing superblock [ 126.905679][ T7819] loop4: detected capacity change from 0 to 512 [ 127.012877][ T7819] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.095078][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 127.095097][ T29] audit: type=1400 audit(1733271961.601:7463): avc: denied { mount } for pid=7818 comm="syz.4.1662" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.142662][ T29] audit: type=1400 audit(1733271961.641:7464): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.165830][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.227207][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.227479][ T29] audit: type=1400 audit(1733271961.731:7465): avc: denied { mounton } for pid=7834 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.261700][ T7837] cgroup: Unknown subsys name 'cpuset' [ 127.268532][ T7833] loop4: detected capacity change from 0 to 128 [ 127.312984][ T7833] EXT4-fs: test_dummy_encryption option not supported [ 127.328709][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 127.361034][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.378561][ T7850] loop4: detected capacity change from 0 to 512 [ 127.412424][ T7850] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.419393][ T7850] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 127.429956][ T7850] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 127.433865][ T7858] loop1: detected capacity change from 0 to 128 [ 127.439458][ T7850] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1674: Failed to acquire dquot type 1 [ 127.465902][ T7850] EXT4-fs (loop4): 1 truncate cleaned up [ 127.521746][ T7850] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.579996][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.605593][ T7872] loop3: detected capacity change from 0 to 128 [ 127.632320][ T7872] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.669589][ T29] audit: type=1400 audit(1733271962.171:7466): avc: denied { create } for pid=7871 comm="syz.3.1683" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.703324][ T29] audit: type=1400 audit(1733271962.211:7467): avc: denied { write } for pid=7871 comm="syz.3.1683" name="encrypted_dir" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.736759][ T29] audit: type=1400 audit(1733271962.231:7468): avc: denied { add_name } for pid=7871 comm="syz.3.1683" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.757234][ T29] audit: type=1400 audit(1733271962.231:7469): avc: denied { create } for pid=7871 comm="syz.3.1683" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 127.773552][ T7883] loop1: detected capacity change from 0 to 2048 [ 127.777967][ T29] audit: type=1400 audit(1733271962.231:7470): avc: denied { read } for pid=7871 comm="syz.3.1683" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 127.850171][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 127.857427][ T7883] loop1: p1 < > p4 [ 127.862025][ T7883] loop1: p4 size 8388608 extends beyond EOD, truncated [ 127.865911][ T7887] loop4: detected capacity change from 0 to 8192 [ 127.887749][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.902669][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.923887][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.939778][ T36] bridge_slave_1: left allmulticast mode [ 127.945530][ T36] bridge_slave_1: left promiscuous mode [ 127.951377][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.960693][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.005852][ T36] bridge_slave_0: left allmulticast mode [ 128.011642][ T36] bridge_slave_0: left promiscuous mode [ 128.017331][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.205415][ T7900] loop3: detected capacity change from 0 to 1024 [ 128.271903][ T36] dvmrp1 (unregistering): left allmulticast mode [ 128.348370][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.378602][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.516637][ T36] bond0 (unregistering): Released all slaves [ 128.531825][ T7900] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 128.599635][ T7907] loop0: detected capacity change from 0 to 1024 [ 128.609889][ T7900] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 128.622300][ T7900] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.622300][ T7900] [ 128.632162][ T7900] EXT4-fs (loop3): Total free blocks count 0 [ 128.638353][ T7900] EXT4-fs (loop3): Free/Dirty block details [ 128.644295][ T7900] EXT4-fs (loop3): free_blocks=68451041280 [ 128.650164][ T7900] EXT4-fs (loop3): dirty_blocks=16 [ 128.655350][ T7900] EXT4-fs (loop3): Block reservation details [ 128.661543][ T7900] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 128.684484][ T7907] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.817703][ T7900] syz.3.1691 (7900) used greatest stack depth: 9320 bytes left [ 128.855016][ T7913] loop0: detected capacity change from 0 to 4096 [ 128.904353][ T7913] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 128.921665][ T7919] cgroup: Unknown subsys name 'cpuset' [ 129.023509][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.030952][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.041576][ T7834] bridge_slave_0: entered allmulticast mode [ 129.048184][ T7834] bridge_slave_0: entered promiscuous mode [ 129.062835][ T2999] udevd[2999]: worker [3486] terminated by signal 33 (Unknown signal 33) [ 129.079155][ T2999] udevd[2999]: worker [3486] failed while handling '/devices/virtual/block/loop0' [ 129.117160][ T2999] udevd[2999]: worker [3644] terminated by signal 33 (Unknown signal 33) [ 129.129455][ T2999] udevd[2999]: worker [3644] failed while handling '/devices/virtual/block/loop1/loop1p4' [ 129.147204][ T36] hsr_slave_0: left promiscuous mode [ 129.160923][ T36] hsr_slave_1: left promiscuous mode [ 129.170689][ T2999] udevd[2999]: worker [3647] terminated by signal 33 (Unknown signal 33) [ 129.191793][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.194513][ T2999] udevd[2999]: worker [3647] failed while handling '/devices/virtual/block/loop4' [ 129.199342][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.217101][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.224589][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.241480][ T36] veth1_macvtap: left promiscuous mode [ 129.247205][ T36] veth0_macvtap: left promiscuous mode [ 129.252766][ T36] veth1_vlan: left promiscuous mode [ 129.258031][ T36] veth0_vlan: left promiscuous mode [ 129.265990][ T2999] udevd[2999]: worker [3645] terminated by signal 33 (Unknown signal 33) [ 129.274613][ T2999] udevd[2999]: worker [3645] failed while handling '/devices/virtual/block/loop1' [ 129.294556][ T2999] udevd[2999]: worker [3643] terminated by signal 33 (Unknown signal 33) [ 129.304998][ T2999] udevd[2999]: worker [3643] failed while handling '/devices/virtual/block/loop3' [ 129.371868][ T36] team0 (unregistering): Port device team_slave_1 removed [ 129.385981][ T36] team0 (unregistering): Port device team_slave_0 removed [ 129.417614][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.424791][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.432136][ T7834] bridge_slave_1: entered allmulticast mode [ 129.439393][ T7834] bridge_slave_1: entered promiscuous mode [ 129.460110][ T7944] batadv_slave_1: entered promiscuous mode [ 129.472830][ T7946] bridge0: entered promiscuous mode [ 129.499066][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.511824][ T7943] bridge0: left promiscuous mode [ 129.517133][ T7943] batadv_slave_1: left promiscuous mode [ 129.524158][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.558826][ T7834] team0: Port device team_slave_0 added [ 129.575402][ T7834] team0: Port device team_slave_1 added [ 129.600454][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1709'. [ 129.610136][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.617220][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.643468][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.659629][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.667086][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.693493][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.723008][ T7974] loop1: detected capacity change from 0 to 256 [ 129.812259][ T7834] hsr_slave_0: entered promiscuous mode [ 129.826846][ T7834] hsr_slave_1: entered promiscuous mode [ 129.836359][ T7834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.845657][ T7834] Cannot create hsr debugfs directory [ 130.327751][ T7995] loop1: detected capacity change from 0 to 512 [ 130.344042][ T7995] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 130.389354][ T7834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.433017][ T7834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.441764][ T7995] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.451960][ T7995] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1717: bad orphan inode 15 [ 130.508979][ T7995] ext4_test_bit(bit=14, block=18) = 1 [ 130.514448][ T7995] is_bad_inode(inode)=0 [ 130.518675][ T7995] NEXT_ORPHAN(inode)=1023 [ 130.523107][ T7995] max_ino=32 [ 130.526325][ T7995] i_nlink=0 [ 130.532208][ T7995] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.1717: corrupted xattr block 19: e_value size too large [ 130.548228][ T7995] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 130.565968][ T7834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.608530][ T7834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.777692][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'. [ 130.814968][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.823738][ T8016] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1717: path /318/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 130.931573][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.001206][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.008381][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.107001][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.114203][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.220239][ T7834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.230686][ T7834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.319298][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 131.326965][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 131.348489][ T8033] loop0: detected capacity change from 0 to 1024 [ 131.411903][ T8033] EXT4-fs: test_dummy_encryption option not supported [ 131.414359][ T35] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 131.455182][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1731'. [ 131.799165][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.864822][ T8066] loop3: detected capacity change from 0 to 128 [ 131.912426][ T8066] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 131.921422][ T8074] loop1: detected capacity change from 0 to 764 [ 131.953323][ T8074] rock: directory entry would overflow storage [ 131.959624][ T8074] rock: sig=0x4654, size=5, remaining=4 [ 132.132371][ T8097] loop4: detected capacity change from 0 to 512 [ 132.139897][ T8097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.254643][ T7834] veth0_vlan: entered promiscuous mode [ 132.368855][ T7834] veth1_vlan: entered promiscuous mode [ 132.405211][ T8097] EXT4-fs (loop4): 1 truncate cleaned up [ 132.460281][ T8097] EXT4-fs mount: 66 callbacks suppressed [ 132.460332][ T8097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.545674][ T7834] veth0_macvtap: entered promiscuous mode [ 132.626983][ T7834] veth1_macvtap: entered promiscuous mode [ 132.707012][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.717732][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.727622][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.738193][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.748159][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.758694][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.768548][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.779098][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.823670][ T8120] loop0: detected capacity change from 0 to 1024 [ 132.883084][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.932897][ T8120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.088888][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.117402][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.127975][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.137823][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.148297][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.158258][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.168703][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.178581][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.189060][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.199782][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.208247][ T7834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.217019][ T7834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.225871][ T7834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.234629][ T7834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.273049][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 133.273066][ T29] audit: type=1400 audit(1733271967.771:7493): avc: denied { sys_chroot } for pid=8139 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.301007][ T29] audit: type=1400 audit(1733271967.771:7494): avc: denied { setgid } for pid=8139 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.322129][ T29] audit: type=1400 audit(1733271967.771:7495): avc: denied { setuid } for pid=8139 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.343184][ T29] audit: type=1400 audit(1733271967.771:7496): avc: denied { setrlimit } for pid=8139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 133.373444][ T29] audit: type=1400 audit(1733271967.871:7497): avc: denied { mounton } for pid=7834 comm="syz-executor" path="/root/syzkaller.CH0A1Q/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 133.398357][ T29] audit: type=1400 audit(1733271967.871:7498): avc: denied { mounton } for pid=7834 comm="syz-executor" path="/root/syzkaller.CH0A1Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 133.425287][ T29] audit: type=1400 audit(1733271967.871:7499): avc: denied { mounton } for pid=7834 comm="syz-executor" path="/root/syzkaller.CH0A1Q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 133.453079][ T29] audit: type=1400 audit(1733271967.881:7500): avc: denied { mounton } for pid=7834 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 133.494772][ T8145] loop3: detected capacity change from 0 to 512 [ 133.501442][ T29] audit: type=1400 audit(1733271968.001:7501): avc: denied { ioctl } for pid=8147 comm="syz.4.1753" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.559841][ T8145] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.575109][ T8145] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 133.610841][ T8145] EXT4-fs error (device loop3): ext4_orphan_get:1389: comm syz.3.1752: inode #15: comm syz.3.1752: iget: illegal inode # [ 133.675454][ T8145] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1752: couldn't read orphan inode 15 (err -117) [ 133.728221][ T8145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.807446][ T8182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1752: bg 0: block 19: invalid block bitmap [ 133.866344][ T3424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 133.882184][ T3308] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /343/bus: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 133.901769][ T3424] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 133.901813][ T3424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.901813][ T3424] [ 133.901828][ T3424] EXT4-fs (loop0): Total free blocks count 0 [ 133.930195][ T3424] EXT4-fs (loop0): Free/Dirty block details [ 133.936195][ T3424] EXT4-fs (loop0): free_blocks=68451041280 [ 133.942296][ T3424] EXT4-fs (loop0): dirty_blocks=16816 [ 133.947959][ T3424] EXT4-fs (loop0): Block reservation details [ 133.954085][ T3424] EXT4-fs (loop0): i_reserved_data_blocks=855 [ 133.974314][ T8196] loop5: detected capacity change from 0 to 1024 [ 133.980591][ T3424] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.043025][ T8196] EXT4-fs: Ignoring removed i_version option [ 134.050584][ T8196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.065614][ T8201] loop4: detected capacity change from 0 to 512 [ 134.084230][ T8201] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.084315][ T7285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.126920][ T8196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.161371][ T8201] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 134.187817][ T8201] System zones: 0-2, 18-18, 34-35 [ 134.196834][ T8201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.225220][ T8211] xt_limit: Overflow, try lower: 687865856/40 [ 134.235576][ T8201] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1764: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 134.281936][ T7834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.294263][ T8201] EXT4-fs (loop4): Remounting filesystem read-only [ 134.555466][ T8254] loop0: detected capacity change from 0 to 512 [ 134.598526][ T8254] EXT4-fs: Ignoring removed orlov option [ 134.608637][ T8254] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1773: casefold flag without casefold feature [ 134.621765][ T8254] EXT4-fs (loop0): Remounting filesystem read-only [ 134.656865][ T8259] dvmrp1: entered allmulticast mode [ 134.666126][ T8254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.692668][ T8254] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 134.699982][ T8254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.024467][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 135.192863][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.411483][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.418720][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.431881][ T8217] bridge_slave_0: entered allmulticast mode [ 135.438799][ T8217] bridge_slave_0: entered promiscuous mode [ 135.844922][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.852046][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.867215][ T8217] bridge_slave_1: entered allmulticast mode [ 135.875028][ T8217] bridge_slave_1: entered promiscuous mode [ 135.912275][ T8302] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.944572][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.959425][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.994436][ T8217] team0: Port device team_slave_0 added [ 136.008792][ T8311] loop4: detected capacity change from 0 to 512 [ 136.012990][ T8217] team0: Port device team_slave_1 added [ 136.026602][ T8311] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 136.040881][ T8311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.047665][ T8311] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1787: bad orphan inode 15 [ 136.058148][ T8311] ext4_test_bit(bit=14, block=18) = 1 [ 136.059440][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.063621][ T8311] is_bad_inode(inode)=0 [ 136.063631][ T8311] NEXT_ORPHAN(inode)=1023 [ 136.063640][ T8311] max_ino=32 [ 136.063649][ T8311] i_nlink=0 [ 136.070599][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.076770][ T8311] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.1787: corrupted xattr block 19: e_value size too large [ 136.079147][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.096695][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.143231][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.169167][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.180138][ T8311] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 136.191409][ T8311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.271892][ T8217] hsr_slave_0: entered promiscuous mode [ 136.278454][ T8217] hsr_slave_1: entered promiscuous mode [ 136.286786][ T8217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.294628][ T8217] Cannot create hsr debugfs directory [ 136.311408][ T8321] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1787: path /388/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 136.417177][ T8217] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.439999][ T8217] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.454233][ T8217] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.469909][ T8217] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.664489][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.686629][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.771262][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.778495][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.797810][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.804983][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.005526][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.105308][ T8336] loop0: detected capacity change from 0 to 512 [ 137.122747][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.163710][ T29] audit: type=1400 audit(1733271971.671:7502): avc: denied { create } for pid=8339 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.189380][ T8340] atomic_op ffff88811846a128 conn xmit_atomic 0000000000000000 [ 137.244654][ T8336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.279657][ T8336] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.363967][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.386304][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.498682][ T8217] veth0_vlan: entered promiscuous mode [ 137.507814][ T8217] veth1_vlan: entered promiscuous mode [ 137.557267][ T8217] veth0_macvtap: entered promiscuous mode [ 137.570614][ T8217] veth1_macvtap: entered promiscuous mode [ 137.571162][ T8368] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 137.585490][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.597487][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.607371][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.617944][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.627808][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.638331][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.648334][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.658964][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.669100][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.679695][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.691043][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.710287][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.720801][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.730744][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.741258][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.751381][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.762074][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.772144][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.782727][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.792819][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.803359][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.806637][ T8376] loop4: detected capacity change from 0 to 2048 [ 137.814816][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.828322][ T8217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.837132][ T8217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.845913][ T8217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.854721][ T8217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.867773][ T8374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.874281][ T8376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.908800][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.912269][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 137.926958][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 137.970252][ T8386] atomic_op ffff888113b7d128 conn xmit_atomic 0000000000000000 [ 138.005824][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.018407][ T3377] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 138.026626][ T3377] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.191460][ T8402] loop5: detected capacity change from 0 to 736 [ 138.255652][ T8407] vhci_hcd: invalid port number 255 [ 138.260982][ T8407] vhci_hcd: default hub control req: 000c vffff i00ff l0 [ 138.297901][ T8414] loop1: detected capacity change from 0 to 736 [ 138.460511][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 138.460530][ T29] audit: type=1326 audit(1733271972.961:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.496537][ T29] audit: type=1326 audit(1733271973.001:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.520068][ T29] audit: type=1326 audit(1733271973.001:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.543693][ T29] audit: type=1326 audit(1733271973.001:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.567372][ T29] audit: type=1326 audit(1733271973.001:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.591214][ T29] audit: type=1326 audit(1733271973.001:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.614853][ T29] audit: type=1326 audit(1733271973.001:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.638394][ T29] audit: type=1326 audit(1733271973.001:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.661965][ T29] audit: type=1326 audit(1733271973.001:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.685551][ T29] audit: type=1326 audit(1733271973.001:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fd7b5ff19 code=0x7ffc0000 [ 138.729901][ T8435] loop1: detected capacity change from 0 to 8192 [ 138.772944][ T8435] loop1: p2 p3 p4 [ 138.777296][ T8435] loop1: p2 start 14935 is beyond EOD, truncated [ 138.783948][ T8435] loop1: p3 size 196608 extends beyond EOD, truncated [ 138.793520][ T8435] loop1: p4 start 4026530307 is beyond EOD, truncated [ 138.805034][ T2999] loop1: p2 p3 p4 [ 138.808974][ T2999] loop1: p2 start 14935 is beyond EOD, truncated [ 138.815505][ T2999] loop1: p3 size 196608 extends beyond EOD, truncated [ 138.816014][ T8441] loop5: detected capacity change from 0 to 4096 [ 138.830060][ T2999] loop1: p4 start 4026530307 is beyond EOD, truncated [ 138.842202][ T8441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.889335][ T8441] EXT4-fs (loop5): shut down requested (0) [ 138.909672][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 138.919989][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 138.929607][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 138.938654][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 138.949612][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 138.952508][ T8447] loop4: detected capacity change from 0 to 256 [ 138.959138][ T8441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 138.983147][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 138.990786][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 138.998266][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.005787][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.013308][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.020751][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.028598][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.028607][ T8450] loop0: detected capacity change from 0 to 736 [ 139.036041][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.049779][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.057237][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.064913][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.072337][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.079898][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.087550][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.095128][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.102704][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.110142][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.117644][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.125062][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.132615][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.140048][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.147489][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.154900][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.162302][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.169722][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.177133][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.184552][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.191948][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.199370][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.206861][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.214308][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.221768][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.229275][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.236807][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.244271][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.251759][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.259193][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.266674][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.274085][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.281572][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.288991][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.296542][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.303972][ T35] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 139.314100][ T35] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.405626][ T7834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.533428][ T8466] x_tables: duplicate underflow at hook 3 [ 139.568449][ T8474] atomic_op ffff888116236128 conn xmit_atomic 0000000000000000 [ 139.575723][ T8466] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1838'. [ 139.605818][ T8466] loop6: detected capacity change from 0 to 512 [ 139.615153][ T8466] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 139.741802][ T8481] vhci_hcd: invalid port number 255 [ 139.747157][ T8481] vhci_hcd: default hub control req: 000c vffff i00ff l0 [ 139.777025][ T8486] loop1: detected capacity change from 0 to 4096 [ 139.820597][ T8486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.835754][ T8494] loop5: detected capacity change from 0 to 736 [ 139.840805][ T8488] loop6: detected capacity change from 0 to 8192 [ 139.859426][ T8486] EXT4-fs (loop1): shut down requested (0) [ 139.871227][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 139.880583][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 139.900480][ T8488] loop6: p2 p3 p4 [ 139.900551][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 139.908183][ T8488] loop6: p2 start 14935 is beyond EOD, truncated [ 139.915802][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 139.919716][ T8488] loop6: p3 size 196608 extends beyond EOD, truncated [ 139.936289][ T8488] loop6: p4 start 4026530307 is beyond EOD, truncated [ 139.945541][ T8500] x_tables: duplicate underflow at hook 3 [ 139.952687][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 139.970207][ T8486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 139.970850][ T8500] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1852'. [ 140.003556][ T8500] loop5: detected capacity change from 0 to 512 [ 140.022281][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.031576][ T8500] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 140.206161][ T8522] loop0: detected capacity change from 0 to 736 [ 140.227027][ T8523] loop4: detected capacity change from 0 to 256 [ 140.361989][ T8532] dvmrp1: entered allmulticast mode [ 140.437920][ T8540] x_tables: duplicate underflow at hook 3 [ 140.469922][ T8542] loop0: detected capacity change from 0 to 4096 [ 140.470669][ T8540] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1868'. [ 140.492309][ T8542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.495495][ T8540] loop5: detected capacity change from 0 to 512 [ 140.514228][ T8540] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 140.527031][ T8542] EXT4-fs (loop0): shut down requested (0) [ 140.551549][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 140.560553][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 140.567624][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1872'. [ 140.572181][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 140.588111][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 140.602782][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 140.625529][ T8552] loop6: detected capacity change from 0 to 128 [ 140.632430][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 140.641691][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 140.647133][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.650694][ T8542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 140.657913][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.674176][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.681739][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.689309][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.696778][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.704220][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.712242][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.719887][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.727355][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.731205][ T8559] loop5: detected capacity change from 0 to 736 [ 140.734785][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.748528][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.755993][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.763428][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.770922][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.778367][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.782098][ T8552] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.785876][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.800101][ T8552] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.805372][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.823472][ T8552] EXT4-fs (loop6): shut down requested (0) [ 140.829383][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.836979][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.844403][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.851890][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.859328][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.866906][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.874329][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.881801][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.889225][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.896685][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.904260][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.911671][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.919133][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.926686][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.934249][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.941747][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.949194][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.956668][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.964088][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.971513][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.978931][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.986376][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 140.993810][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 141.001224][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 141.008670][ T8] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 141.016937][ T8] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.101869][ T8217] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.154406][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.156841][ T8577] x_tables: duplicate underflow at hook 3 [ 141.211067][ T8577] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1882'. [ 141.226310][ T8577] loop4: detected capacity change from 0 to 512 [ 141.244512][ T8577] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 141.253321][ T8578] loop6: detected capacity change from 0 to 8192 [ 141.294162][ T8578] loop6: p2 p3 p4 [ 141.298015][ T8578] loop6: p2 start 14935 is beyond EOD, truncated [ 141.304511][ T8578] loop6: p3 size 196608 extends beyond EOD, truncated [ 141.319284][ T8589] hugetlbfs: Unknown parameter 's01777777777777777777777' [ 141.329299][ T8578] loop6: p4 start 4026530307 is beyond EOD, truncated [ 141.431324][ T8593] loop4: detected capacity change from 0 to 128 [ 141.447013][ T8593] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.459829][ T8593] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.479215][ T8593] EXT4-fs (loop4): shut down requested (0) [ 141.496890][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.576486][ T8602] loop4: detected capacity change from 0 to 512 [ 141.583471][ T8602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.595039][ T8602] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1891: invalid indirect mapped block 4294967295 (level 0) [ 141.609251][ T8602] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1891: invalid indirect mapped block 4294967295 (level 1) [ 141.625453][ T8602] EXT4-fs (loop4): 1 orphan inode deleted [ 141.631288][ T8602] EXT4-fs (loop4): 1 truncate cleaned up [ 141.637436][ T8602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.729426][ T8606] loop1: detected capacity change from 0 to 256 [ 141.923351][ T8611] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 142.089225][ T8620] loop6: detected capacity change from 0 to 736 [ 142.099181][ T8621] siw: device registration error -23 [ 142.111924][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 142.147065][ T8623] hugetlbfs: Unknown parameter 's01777777777777777777777' [ 142.190975][ T8625] loop0: detected capacity change from 0 to 128 [ 142.204883][ T8625] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.221803][ T8625] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.237136][ T8625] EXT4-fs (loop0): shut down requested (0) [ 142.260152][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.363067][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.390507][ T8643] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 142.439046][ T8641] loop0: detected capacity change from 0 to 512 [ 142.448839][ T8641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.460281][ T8641] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1903: invalid indirect mapped block 4294967295 (level 0) [ 142.474799][ T8641] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1903: invalid indirect mapped block 4294967295 (level 1) [ 142.489518][ T8641] EXT4-fs (loop0): 1 orphan inode deleted [ 142.495402][ T8641] EXT4-fs (loop0): 1 truncate cleaned up [ 142.501673][ T8641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.594323][ T8650] x_tables: duplicate underflow at hook 3 [ 142.616982][ T8650] loop1: detected capacity change from 0 to 512 [ 142.626227][ T8650] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 143.061346][ T8664] hugetlbfs: Unknown parameter 's01777777777777777777777' [ 143.089523][ T8666] __nla_validate_parse: 3 callbacks suppressed [ 143.089542][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1912'. [ 143.123132][ T8668] loop6: detected capacity change from 0 to 128 [ 143.136347][ T8668] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.149925][ T8668] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.165110][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.166191][ T8668] EXT4-fs (loop6): shut down requested (0) [ 143.198958][ T8217] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.310147][ T8694] loop0: detected capacity change from 0 to 256 [ 143.344259][ T8697] loop4: detected capacity change from 0 to 736 [ 143.384958][ T8704] hugetlbfs: Unknown parameter 'siz01777777777777777777777' [ 143.446453][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1923'. [ 143.518958][ T8717] loop4: detected capacity change from 0 to 128 [ 143.525656][ T8715] loop6: detected capacity change from 0 to 4096 [ 143.531736][ T8717] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.545218][ T8717] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.559323][ T8715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.561151][ T8717] EXT4-fs (loop4): shut down requested (0) [ 143.582028][ T8715] EXT4-fs (loop6): shut down requested (0) [ 143.590802][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 143.600011][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 143.600134][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.609789][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 143.627520][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 143.636522][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 143.636578][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 143.636668][ T29] audit: type=1400 audit(1733271978.141:7927): avc: denied { write } for pid=8713 comm="syz.6.1925" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.650201][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.681360][ T8715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 143.681370][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.681438][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.705884][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.713625][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.717396][ T29] audit: type=1400 audit(1733271978.151:7928): avc: denied { read write } for pid=8713 comm="syz.6.1925" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.721026][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.744449][ T29] audit: type=1400 audit(1733271978.151:7929): avc: denied { open } for pid=8713 comm="syz.6.1925" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.744531][ T29] audit: type=1400 audit(1733271978.211:7930): avc: denied { remove_name } for pid=8713 comm="syz.6.1925" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.744593][ T29] audit: type=1400 audit(1733271978.211:7931): avc: denied { unlink } for pid=8713 comm="syz.6.1925" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 143.744626][ T29] audit: type=1400 audit(1733271978.221:7932): avc: denied { write } for pid=8713 comm="syz.6.1925" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.752021][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.779217][ T29] audit: type=1326 audit(1733271978.281:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d919dff19 code=0x7ffc0000 [ 143.797903][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.820640][ T29] audit: type=1326 audit(1733271978.281:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d919dff19 code=0x7ffc0000 [ 143.843417][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.850731][ T29] audit: type=1326 audit(1733271978.281:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d919dff19 code=0x7ffc0000 [ 143.874190][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.881541][ T29] audit: type=1326 audit(1733271978.281:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d919dff19 code=0x7ffc0000 [ 143.893250][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 143.905220][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.905250][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.905275][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.912665][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 143.919855][ T8725] x_tables: duplicate underflow at hook 3 [ 143.936197][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.936229][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.960257][ T8725] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1927'. [ 143.967021][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.981822][ T8725] loop4: detected capacity change from 0 to 512 [ 143.983493][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.983524][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 143.994580][ T8725] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 143.998326][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.080461][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.087953][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.095443][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.102878][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.110345][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.117799][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.125213][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.132797][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.140187][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.147713][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.155126][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.162570][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.170122][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.177578][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.185005][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.192443][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.199877][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.207406][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.214859][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.222321][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.229912][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.237455][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.245062][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.252465][ T35] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 144.261296][ T35] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.396927][ T8217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.411974][ T8743] hugetlbfs: Unknown parameter 'siz01777777777777777777777' [ 144.468632][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1936'. [ 144.471441][ T8749] loop5: detected capacity change from 0 to 128 [ 144.512439][ T8749] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.538177][ T8749] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.549771][ T8754] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.576067][ T8749] EXT4-fs (loop5): shut down requested (0) [ 144.644952][ T8761] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 144.656091][ T8761] bond0: (slave netdevsim1): Releasing backup interface [ 144.666059][ T8761] team0: Port device netdevsim1 added [ 144.691804][ T7834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.701453][ T8765] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 144.722253][ T8765] team0: Port device netdevsim1 removed [ 144.748351][ T8765] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 144.807470][ T8772] x_tables: duplicate underflow at hook 3 [ 144.823676][ T8772] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1942'. [ 144.836899][ T8772] loop5: detected capacity change from 0 to 512 [ 144.844467][ T8772] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 144.851466][ T8775] loop6: detected capacity change from 0 to 256 [ 144.914377][ T8783] hugetlbfs: Unknown parameter 'siz01777777777777777777777' [ 144.945486][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=8790 comm=syz.0.1948 [ 145.059859][ T8804] loop0: detected capacity change from 0 to 512 [ 145.068476][ T8804] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.080779][ T8804] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1950: invalid indirect mapped block 4294967295 (level 0) [ 145.096636][ T8804] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1950: invalid indirect mapped block 4294967295 (level 1) [ 145.111601][ T8804] EXT4-fs (loop0): 1 orphan inode deleted [ 145.117497][ T8804] EXT4-fs (loop0): 1 truncate cleaned up [ 145.125212][ T8804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.156777][ T8809] loop5: detected capacity change from 0 to 2048 [ 145.173835][ T8809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.196321][ T7834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.222779][ T8813] loop5: detected capacity change from 0 to 128 [ 145.250385][ T8813] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.261146][ T8818] loop4: detected capacity change from 0 to 128 [ 145.263355][ T8813] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.286021][ T8818] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.308767][ T8813] EXT4-fs (loop5): shut down requested (0) [ 145.310301][ T8818] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.331503][ T8818] EXT4-fs (loop4): shut down requested (0) [ 145.338159][ T7834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.355451][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.454080][ T8833] hugetlbfs: Unknown parameter 'size01777777777777777777777' [ 145.511940][ T8839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=8839 comm=syz.5.1960 [ 145.687203][ T8862] loop4: detected capacity change from 0 to 128 [ 145.700509][ T8862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.740402][ T8862] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.756653][ T8862] EXT4-fs (loop4): shut down requested (0) [ 145.791510][ T8872] x_tables: duplicate underflow at hook 3 [ 145.801765][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.811513][ T8872] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1967'. [ 145.827222][ T8872] loop6: detected capacity change from 0 to 512 [ 145.835896][ T8872] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 145.880155][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.881478][ T8878] hugetlbfs: Unknown parameter 'size01777777777777777777777' [ 145.918866][ T8873] veth0_vlan: left promiscuous mode [ 145.925488][ T8881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=8881 comm=syz.4.1972 [ 145.934592][ T8873] veth0_vlan: entered promiscuous mode [ 145.950837][ T8883] loop0: detected capacity change from 0 to 128 [ 145.971458][ T8883] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.996467][ T8883] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.071327][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.089452][ T8895] netlink: 'syz.4.1977': attribute type 10 has an invalid length. [ 146.110978][ T8899] loop5: detected capacity change from 0 to 256 [ 146.139212][ T8901] loop6: detected capacity change from 0 to 128 [ 146.146461][ T8902] netlink: 'syz.4.1977': attribute type 10 has an invalid length. [ 146.156145][ T8901] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.168988][ T8901] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.185928][ T8901] EXT4-fs (loop6): shut down requested (0) [ 146.194729][ T8895] bond0: (slave netdevsim1): Releasing backup interface [ 146.206172][ T8895] team0: Port device netdevsim1 added [ 146.206992][ T8217] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.225356][ T8902] team0: Port device netdevsim1 removed [ 146.234539][ T8902] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 146.300075][ T8912] hugetlbfs: Unknown parameter 'size01777777777777777777777' [ 146.335540][ T8914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=8914 comm=syz.6.1983 [ 146.433156][ T8922] x_tables: duplicate underflow at hook 3 [ 146.453782][ T8924] siw: device registration error -23 [ 146.455544][ T8922] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1986'. [ 146.476146][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 146.503503][ T8922] loop1: detected capacity change from 0 to 512 [ 146.521286][ T8922] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 146.577507][ T8937] loop4: detected capacity change from 0 to 128 [ 146.600609][ T8937] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.627593][ T8937] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.684492][ T8937] EXT4-fs (loop4): shut down requested (0) [ 146.704187][ T8957] siw: device registration error -23 [ 146.716314][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.848902][ T8976] loop4: detected capacity change from 0 to 2048 [ 146.858533][ T8980] siw: device registration error -23 [ 146.911192][ T8976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.923539][ T8983] loop6: detected capacity change from 0 to 128 [ 146.942709][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.959723][ T8991] x_tables: duplicate underflow at hook 3 [ 146.964891][ T8983] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.980491][ T8983] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.019440][ T8217] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.052320][ T9004] netlink: 'syz.6.2004': attribute type 10 has an invalid length. [ 147.064815][ T9006] loop4: detected capacity change from 0 to 128 [ 147.070525][ T8991] loop5: detected capacity change from 0 to 512 [ 147.089192][ T9004] team0: Port device netdevsim1 added [ 147.090001][ T8991] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 147.131717][ T9012] netlink: 'syz.6.2004': attribute type 10 has an invalid length. [ 147.154923][ T9006] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.197073][ T9019] loop5: detected capacity change from 0 to 736 [ 147.208729][ T9006] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.222725][ T9012] team0: Port device netdevsim1 removed [ 147.231669][ T9012] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 147.258392][ T9023] rose0: tun_chr_ioctl cmd 62721 [ 147.281001][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.401372][ T9042] loop5: detected capacity change from 0 to 2048 [ 147.434850][ T9050] loop4: detected capacity change from 0 to 256 [ 147.484198][ T9048] loop1: detected capacity change from 0 to 8192 [ 147.515926][ T9048] loop1: p2 p3 p4 [ 147.519809][ T9048] loop1: p2 start 14935 is beyond EOD, truncated [ 147.526371][ T9048] loop1: p3 size 196608 extends beyond EOD, truncated [ 147.537251][ T9048] loop1: p4 start 4026530307 is beyond EOD, truncated [ 147.720459][ T9078] loop6: detected capacity change from 0 to 128 [ 147.741515][ T9078] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.491766][ T9122] __nla_validate_parse: 6 callbacks suppressed [ 148.491787][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2035'. [ 148.601103][ T9128] atomic_op ffff88810c724128 conn xmit_atomic 0000000000000000 [ 148.637106][ T9131] siw: device registration error -23 [ 148.647216][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 148.647233][ T29] audit: type=1400 audit(1733271983.151:8160): avc: denied { create } for pid=9130 comm="syz.5.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.676657][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2039'. [ 148.685623][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 148.707234][ T29] audit: type=1400 audit(1733271983.181:8161): avc: denied { write } for pid=9130 comm="syz.5.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.728018][ T29] audit: type=1400 audit(1733271983.221:8162): avc: denied { read } for pid=9132 comm="syz.5.2040" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.750788][ T29] audit: type=1400 audit(1733271983.221:8163): avc: denied { open } for pid=9132 comm="syz.5.2040" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.774120][ T29] audit: type=1400 audit(1733271983.221:8164): avc: denied { ioctl } for pid=9132 comm="syz.5.2040" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.803857][ T9134] loop5: detected capacity change from 0 to 256 [ 148.823025][ T29] audit: type=1400 audit(1733271983.331:8165): avc: denied { mount } for pid=9132 comm="syz.5.2040" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 148.846955][ T9136] atomic_op ffff88810c724d28 conn xmit_atomic 0000000000000000 [ 148.858890][ T29] audit: type=1400 audit(1733271983.361:8166): avc: denied { create } for pid=9137 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.881211][ T29] audit: type=1400 audit(1733271983.381:8167): avc: denied { create } for pid=9137 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.903069][ T29] audit: type=1400 audit(1733271983.411:8168): avc: denied { setopt } for pid=9137 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.964914][ T29] audit: type=1400 audit(1733271983.471:8169): avc: denied { create } for pid=9144 comm="syz.0.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.985441][ T9145] loop0: detected capacity change from 0 to 128 [ 149.003612][ T9145] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.020525][ T9145] EXT4-fs (loop0): shut down requested (0) [ 149.028105][ T9149] loop6: detected capacity change from 0 to 512 [ 149.035425][ T9149] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 149.044930][ T9149] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.051563][ T9149] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.2046: bad orphan inode 15 [ 149.062295][ T9149] ext4_test_bit(bit=14, block=18) = 1 [ 149.067861][ T9149] is_bad_inode(inode)=0 [ 149.072249][ T9149] NEXT_ORPHAN(inode)=1023 [ 149.076616][ T9149] max_ino=32 [ 149.079893][ T9149] i_nlink=0 [ 149.083384][ T9149] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2046: corrupted xattr block 19: e_value size too large [ 149.104038][ T9149] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 149.119958][ T9149] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 3: comm syz.6.2046: path /58/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 149.175746][ T9158] siw: device registration error -23 [ 149.191127][ T9160] x_tables: duplicate underflow at hook 3 [ 149.191636][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2050'. [ 149.205913][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2050'. [ 149.208835][ T9160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2051'. [ 149.228630][ T9160] loop1: detected capacity change from 0 to 512 [ 149.237203][ T9160] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 149.290876][ T9165] loop0: detected capacity change from 0 to 128 [ 149.301931][ T9165] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.328412][ T9165] EXT4-fs (loop0): shut down requested (0) [ 149.427275][ T9184] loop4: detected capacity change from 0 to 512 [ 149.434737][ T9184] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 149.447271][ T9184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.453880][ T9184] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.2060: bad orphan inode 15 [ 149.464896][ T9184] ext4_test_bit(bit=14, block=18) = 1 [ 149.470348][ T9184] is_bad_inode(inode)=0 [ 149.474641][ T9184] NEXT_ORPHAN(inode)=1023 [ 149.478979][ T9184] max_ino=32 [ 149.482198][ T9184] i_nlink=0 [ 149.485668][ T3377] ================================================================== [ 149.486493][ T9184] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2060: corrupted xattr block 19: e_value size too large [ 149.493772][ T3377] BUG: KCSAN: data-race in __tun_detach / tun_net_xmit [ 149.508859][ T9184] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 149.514816][ T3377] [ 149.514828][ T3377] read-write to 0xffff888114f95280 of 4 bytes by task 9179 on cpu 0: [ 149.514884][ T3377] __tun_detach+0x1cd/0xaa0 [ 149.538827][ T3377] tun_chr_close+0x58/0xf0 [ 149.543318][ T3377] __fput+0x17a/0x6d0 [ 149.547320][ T3377] ____fput+0x1c/0x30 [ 149.551318][ T3377] task_work_run+0x13a/0x1a0 [ 149.555922][ T3377] syscall_exit_to_user_mode+0xa8/0x120 [ 149.561492][ T3377] do_syscall_64+0xd6/0x1c0 [ 149.566016][ T3377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.571937][ T3377] [ 149.574265][ T3377] read to 0xffff888114f95280 of 4 bytes by task 3377 on cpu 1: [ 149.581813][ T3377] tun_net_xmit+0xa6/0xa90 [ 149.586255][ T3377] dev_hard_start_xmit+0x119/0x3f0 [ 149.591381][ T3377] sch_direct_xmit+0x1a9/0x580 [ 149.596153][ T3377] __dev_queue_xmit+0xf6a/0x2090 [ 149.601098][ T3377] neigh_resolve_output+0x3d8/0x450 [ 149.606304][ T3377] ip6_finish_output2+0xa65/0xd00 [ 149.611357][ T3377] ip6_finish_output+0x438/0x540 [ 149.616313][ T3377] ip6_output+0xf5/0x230 [ 149.620572][ T3377] mld_sendpack+0x421/0x6d0 [ 149.625091][ T3377] mld_ifc_work+0x51a/0x7e0 [ 149.629604][ T3377] process_scheduled_works+0x483/0x9a0 [ 149.635083][ T3377] worker_thread+0x51d/0x6f0 [ 149.639696][ T3377] kthread+0x1d1/0x210 [ 149.643769][ T3377] ret_from_fork+0x4b/0x60 [ 149.648190][ T3377] ret_from_fork_asm+0x1a/0x30 [ 149.652960][ T3377] [ 149.655281][ T3377] value changed: 0x00000001 -> 0x00000000 [ 149.660996][ T3377] [ 149.663320][ T3377] Reported by Kernel Concurrency Sanitizer on: [ 149.669487][ T3377] CPU: 1 UID: 0 PID: 3377 Comm: kworker/1:3 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 149.680253][ T3377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.690331][ T3377] Workqueue: mld mld_ifc_work [ 149.695037][ T3377] ================================================================== [ 149.720223][ T9184] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.2060: path /436/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0