last executing test programs: 1m27.753287591s ago: executing program 4 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) close(r0) 1m27.710323284s ago: executing program 4 (id=713): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000640)="02", 0x1}], 0x1, 0xd) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1m27.674484897s ago: executing program 4 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1m27.578093635s ago: executing program 4 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m27.466836283s ago: executing program 4 (id=725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}, 0x1, 0x0, 0x0, 0x8000}, 0x400c005) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048080) 1m27.355260852s ago: executing program 4 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1m27.352356062s ago: executing program 32 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1m17.10165749s ago: executing program 0 (id=1003): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 1m17.074128762s ago: executing program 0 (id=1004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xc, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01000000"], 0x8) 1m17.035050395s ago: executing program 0 (id=1005): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c00000001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1m16.877707428s ago: executing program 2 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r2 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x434002, 0xf8) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1m16.877130178s ago: executing program 0 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m16.848603061s ago: executing program 0 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 1m16.714706991s ago: executing program 0 (id=1015): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 1m16.714592941s ago: executing program 33 (id=1015): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 1m16.581472712s ago: executing program 2 (id=1019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x322c6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) 1m16.47514582s ago: executing program 2 (id=1021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @void}}}, 0x1c}}, 0x4044057) 1m16.325336122s ago: executing program 2 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m16.302983254s ago: executing program 2 (id=1026): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) listen(r1, 0x800) 1m15.34327696s ago: executing program 2 (id=1031): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1m15.343035781s ago: executing program 34 (id=1031): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1m8.288121293s ago: executing program 7 (id=1213): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x434002, 0xf8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1m7.930939311s ago: executing program 7 (id=1214): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000640)="02", 0x1}], 0x1, 0xd) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1m7.82926429s ago: executing program 7 (id=1215): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1m7.355756917s ago: executing program 7 (id=1228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m7.282647023s ago: executing program 7 (id=1233): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) 1m3.377443495s ago: executing program 7 (id=1334): writev(0xffffffffffffffff, 0x0, 0x0) utimes(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./bus/file0\x00', 0x2a000, &(0x7f0000000580)={[{@noquota}], [{@fowner_lt={'fowner<', 0xee01}}]}, 0x5, 0x645, &(0x7f0000001040)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m3.377312625s ago: executing program 35 (id=1334): writev(0xffffffffffffffff, 0x0, 0x0) utimes(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./bus/file0\x00', 0x2a000, &(0x7f0000000580)={[{@noquota}], [{@fowner_lt={'fowner<', 0xee01}}]}, 0x5, 0x645, &(0x7f0000001040)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 17.244234445s ago: executing program 3 (id=2451): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 17.202769558s ago: executing program 3 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r2, 0x7) 17.132788284s ago: executing program 3 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 17.105408076s ago: executing program 3 (id=2458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 17.087540797s ago: executing program 3 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") 17.001623244s ago: executing program 3 (id=2462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 16.992202965s ago: executing program 36 (id=2462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2.667961167s ago: executing program 1 (id=2852): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2.613205771s ago: executing program 1 (id=2865): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @multicast1}, {0x1}, 0x0, {0x2, 0x4e25, @private=0xa0100fd}}) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0xfffe, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x40000000000006a, 0x10003, 0x0) 2.308105366s ago: executing program 6 (id=2869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.949857834s ago: executing program 6 (id=2872): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_wait(r2, &(0x7f0000004140)=[{}], 0x1, 0x200000) 1.828154474s ago: executing program 8 (id=2877): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) mknod$loop(&(0x7f0000000040)='./file0/bus\x00', 0x8, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(0xffffffffffffffff) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 1.766891719s ago: executing program 8 (id=2879): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 1.700720564s ago: executing program 8 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r1}, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 1.603899402s ago: executing program 6 (id=2885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 1.38118615s ago: executing program 9 (id=2888): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 1.239860951s ago: executing program 9 (id=2889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r1, 0xffffffffffffffff, 0x0) 1.12398412s ago: executing program 9 (id=2892): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 1.087426793s ago: executing program 9 (id=2893): memfd_create(&(0x7f0000000180)='-&:\n\x03\x00\x00\x00\x00\x00\x00\x00V$&\xb8=\x94Z}~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m,\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xd0^\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xed\xf2\xde\xccx\x1f\x0fne\xe8G\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\bn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\xf7\x94\xc0rk\x88r\x94\xb6e\x98\xdf\xf36\x82\x8b\x9a\xb9\x10\xa0q\xd8n\x15\x02\xc2@\xa5\xbe\xab\x83\xf9-\x9f\x19\x05\x12*!>\xde\x18L#8\xa5\b^\x19\xeb\xba\xd7\xbdV\x02\xf2\xcf6w\x86\x01\x81\xe4E\v\xd4\xd9\xe7_\xc2\x80\xea\xf9A\xf0\xef\xde\xe3)\xa8\n\f\xb1\f\x159pV2\xf6FCw\xf3r:y\xb1\xee\xc4!\xbaW\xb8\xb1 \x8e\x98!\xd0LL\xec)N\xa1\xa0\x15\xea\xf8kZ\xca\x1eMU\xf6\xfb\xbd\xb2\xc3\a\xc9\xea\x1db\x9b\xd6\x94\x8em\x1b\xd3T\xef*\x1cI\x17:yu8\xb5\x04\xb4\x9e$\xf0\ruS\xee\t3\xeeUb\x10\xfeP\xb3GQ\xc3\xbfA1\atU\xc1\xd6a\x9f1\xe0\xf8.b\a\xe8v\xf7=\x8e\xf5\xfe\xd8Y\xf8\x99_\xe4%\xc54\x96\xf4\xe9\x80:\x8erg\xd8L\xd1\xe0\xc3\xf5\xfe\xa0Dm\xd8_\xf1\xca\x03\xdc\xad\x91\xa6\x18\t\x00'/450, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.064612225s ago: executing program 5 (id=2894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.034346197s ago: executing program 6 (id=2895): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 1.00192186s ago: executing program 5 (id=2896): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 802.800106ms ago: executing program 5 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e000000105000300000000002400010000000000000000"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 762.688809ms ago: executing program 5 (id=2898): unshare(0x20000480) syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x8, 0x3, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 589.050863ms ago: executing program 8 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 570.170324ms ago: executing program 8 (id=2900): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 398.793608ms ago: executing program 8 (id=2901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) 364.505701ms ago: executing program 1 (id=2903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 233.257431ms ago: executing program 9 (id=2904): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x2a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000840)=ANY=[], 0x18) 227.081752ms ago: executing program 1 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_type(r4, 0x0, 0xfffffd37) 213.255083ms ago: executing program 9 (id=2906): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) 173.810326ms ago: executing program 6 (id=2907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 173.608986ms ago: executing program 1 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r2, 0x0, 0x0) 136.474979ms ago: executing program 6 (id=2909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = syz_open_dev$sg(0x0, 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 129.918259ms ago: executing program 5 (id=2910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 238.33µs ago: executing program 1 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2912): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.019483][ T29] audit: type=1326 audit(1755422665.275:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.043070][ T29] audit: type=1326 audit(1755422665.275:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.066594][ T29] audit: type=1326 audit(1755422665.275:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.090123][ T29] audit: type=1326 audit(1755422665.275:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.113906][ T29] audit: type=1326 audit(1755422665.275:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 94.142201][ T7468] sd 0:0:1:0: device reset [ 94.157049][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 94.166090][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 94.346853][ T7492] ref_ctr increment failed for inode: 0x5c6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005b3c0 [ 94.361055][ T7349] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.373409][ T7491] uprobe: syz.3.1397:7491 failed to unregister, leaking uprobe [ 94.386018][ T7349] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.396617][ T7349] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.406417][ T7349] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.474553][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.503628][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.521640][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.528768][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.537615][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.544791][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.558764][ T7508] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1399'. [ 94.628439][ T7511] sd 0:0:1:0: device reset [ 94.703931][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.745745][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 94.754701][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1403'. [ 94.788842][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 94.797906][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1403'. [ 95.014276][ T7349] veth0_vlan: entered promiscuous mode [ 95.044531][ T7349] veth1_vlan: entered promiscuous mode [ 95.066818][ T7349] veth0_macvtap: entered promiscuous mode [ 95.074959][ T7349] veth1_macvtap: entered promiscuous mode [ 95.086710][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.098671][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.111826][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.137527][ T3827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.168110][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1411'. [ 95.169539][ T3827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.197375][ T3827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.206753][ T7550] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.276412][ T7559] ref_ctr increment failed for inode: 0x27 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005ed40 [ 95.322807][ T7558] uprobe: syz.8.1414:7558 failed to unregister, leaking uprobe [ 95.365884][ T7570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.423968][ T7570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.476979][ T7570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.563591][ T7570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.741779][ T7596] sd 0:0:1:0: device reset [ 95.788454][ T7594] loop5: detected capacity change from 0 to 8192 [ 95.815911][ T7594] syz.5.1429: attempt to access beyond end of device [ 95.815911][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 95.829384][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 95.926889][ T7594] syz.5.1429: attempt to access beyond end of device [ 95.926889][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 95.940480][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 95.950643][ T7594] syz.5.1429: attempt to access beyond end of device [ 95.950643][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 95.964131][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 95.999841][ T7594] syz.5.1429: attempt to access beyond end of device [ 95.999841][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.013447][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.024605][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.024605][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.038137][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.048761][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.048761][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.048853][ T7602] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 96.062268][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.068778][ T7602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.077706][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.077706][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.084749][ T7602] vhci_hcd vhci_hcd.0: Device attached [ 96.098018][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.098351][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.098351][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.125226][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.139422][ T7594] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.328028][ T7633] ref_ctr increment failed for inode: 0x68e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005cac0 [ 96.359977][ T7632] uprobe: syz.1.1434:7632 failed to unregister, leaking uprobe [ 96.369598][ T7594] bio_check_eod: 4292 callbacks suppressed [ 96.369613][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.369613][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.397038][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.397038][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.412377][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.412377][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.426284][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.426284][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.456805][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.456805][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.471775][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.471775][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.489701][ T7650] vlan2: entered allmulticast mode [ 96.504809][ T7650] dummy0: entered allmulticast mode [ 96.523315][ T3410] usb 12-1: device descriptor read/8, error -110 [ 96.548152][ T3818] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.564701][ T7594] syz.5.1429: attempt to access beyond end of device [ 96.564701][ T7594] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.585504][ T3818] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.605537][ T3818] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.632543][ T3410] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 96.643671][ T3818] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686788][ T3410] usb 12-1: enqueue for inactive port 0 [ 96.702385][ T3410] usb 12-1: enqueue for inactive port 0 [ 96.722147][ T3410] usb 12-1: enqueue for inactive port 0 [ 96.785741][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.794695][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.805914][ T7680] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 96.950366][ T7701] loop5: detected capacity change from 0 to 1024 [ 96.960603][ T7701] EXT4-fs: Ignoring removed orlov option [ 97.376713][ T7746] vlan2: entered allmulticast mode [ 97.382570][ T7746] dummy0: entered allmulticast mode [ 97.502872][ T7763] macvlan2: entered promiscuous mode [ 97.517561][ T7763] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 97.565953][ T7763] macvlan3: entered promiscuous mode [ 97.601132][ T7763] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 97.715612][ T7785] loop5: detected capacity change from 0 to 8192 [ 97.752525][ T3410] usb usb12-port1: attempt power cycle [ 97.762606][ T7606] vhci_hcd: connection closed [ 97.764815][ T3867] vhci_hcd: stop threads [ 97.773897][ T3867] vhci_hcd: release socket [ 97.778519][ T3867] vhci_hcd: disconnect device [ 97.792886][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.808937][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.827151][ T7801] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 97.858245][ T7805] loop1: detected capacity change from 0 to 512 [ 97.872950][ T7805] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1466: error while reading EA inode 32 err=-116 [ 97.886199][ T7805] EXT4-fs (loop1): Remounting filesystem read-only [ 97.892763][ T7805] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 97.903063][ T7805] EXT4-fs (loop1): 1 orphan inode deleted [ 98.163567][ T7835] loop5: detected capacity change from 0 to 512 [ 98.175344][ T7835] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1479: error while reading EA inode 32 err=-116 [ 98.188028][ T7835] EXT4-fs (loop5): Remounting filesystem read-only [ 98.194837][ T7835] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 98.209691][ T7835] EXT4-fs (loop5): 1 orphan inode deleted [ 98.398464][ T7854] pimreg: entered allmulticast mode [ 98.441493][ T7854] pimreg: left allmulticast mode [ 98.456954][ T7857] loop5: detected capacity change from 0 to 8192 [ 98.531029][ T7868] netlink: 'syz.8.1494': attribute type 298 has an invalid length. [ 98.678696][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.687281][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.698896][ T7884] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 98.877062][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 98.877080][ T29] audit: type=1326 audit(1755422670.265:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 98.919304][ T29] audit: type=1326 audit(1755422670.265:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 98.942800][ T29] audit: type=1326 audit(1755422670.265:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 98.966486][ T29] audit: type=1326 audit(1755422670.265:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 98.989915][ T29] audit: type=1326 audit(1755422670.265:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.013664][ T29] audit: type=1326 audit(1755422670.265:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.037246][ T29] audit: type=1326 audit(1755422670.265:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.060628][ T29] audit: type=1326 audit(1755422670.265:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.084221][ T29] audit: type=1326 audit(1755422670.275:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.130193][ T7898] tipc: Started in network mode [ 99.135342][ T7898] tipc: Node identity 96322de9fa99, cluster identity 4711 [ 99.142616][ T7898] tipc: Enabled bearer , priority 0 [ 99.154279][ T7898] tipc: Disabling bearer [ 99.195982][ T7902] loop6: detected capacity change from 0 to 8192 [ 99.235810][ T29] audit: type=1326 audit(1755422670.625:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc043efebe9 code=0x7ffc0000 [ 99.279159][ T7907] loop1: detected capacity change from 0 to 2048 [ 99.320278][ T7910] loop5: detected capacity change from 0 to 1024 [ 99.326908][ T7907] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 99.329520][ T7910] EXT4-fs: Ignoring removed nobh option [ 99.337772][ T7907] EXT4-fs (loop1): group descriptors corrupted! [ 99.343385][ T7910] EXT4-fs: Ignoring removed bh option [ 99.398930][ T7910] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 99.414260][ T7912] loop3: detected capacity change from 0 to 1764 [ 99.424455][ T7907] loop1: detected capacity change from 0 to 1024 [ 99.448552][ T7907] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 99.582517][ T3410] usb usb12-port1: unable to enumerate USB device [ 99.589542][ T7926] netlink: 'syz.3.1518': attribute type 27 has an invalid length. [ 99.630115][ T7928] loop6: detected capacity change from 0 to 128 [ 99.655187][ T7928] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 99.663076][ T7928] FAT-fs (loop6): Filesystem has been set read-only [ 99.700658][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.701147][ T7928] syz.6.1517: attempt to access beyond end of device [ 99.701147][ T7928] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.707930][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.746470][ T7928] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 99.754468][ T7928] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 99.763075][ T7928] syz.6.1517: attempt to access beyond end of device [ 99.763075][ T7928] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.776813][ T7928] syz.6.1517: attempt to access beyond end of device [ 99.776813][ T7928] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.831125][ T7937] ref_ctr_offset mismatch. inode: 0x6e8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000200 [ 99.831496][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.877241][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.918282][ T7926] team1: left promiscuous mode [ 99.923159][ T7926] team1: left allmulticast mode [ 99.945389][ T3830] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.954315][ T3830] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.972488][ T3830] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.980958][ T3827] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.183041][ T7958] loop5: detected capacity change from 0 to 2048 [ 100.215720][ T7958] EXT4-fs mount: 14 callbacks suppressed [ 100.215751][ T7958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.403624][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.489124][ T7966] loop8: detected capacity change from 0 to 2048 [ 100.542503][ T7966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.577492][ T7973] netlink: 'syz.6.1536': attribute type 27 has an invalid length. [ 100.615293][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.622600][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.665023][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.675233][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.698573][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.732245][ T3828] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.746187][ T3828] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.769325][ T3828] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.778383][ T3828] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.947938][ T7995] loop6: detected capacity change from 0 to 1024 [ 100.958939][ T7995] EXT4-fs: Ignoring removed orlov option [ 100.980113][ T7995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.023364][ T8001] loop1: detected capacity change from 0 to 128 [ 101.062537][ T8001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.070523][ T8001] FAT-fs (loop1): Filesystem has been set read-only [ 101.096356][ T8001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.104298][ T8001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.148829][ T8011] loop8: detected capacity change from 0 to 1024 [ 101.171253][ T8011] EXT4-fs: Ignoring removed nobh option [ 101.176994][ T8011] EXT4-fs: Ignoring removed bh option [ 101.205495][ T8011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.264531][ T8011] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 101.305762][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.372344][ T8001] bio_check_eod: 20335 callbacks suppressed [ 101.372414][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.372414][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.392114][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.392114][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.405716][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.405716][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.441659][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.441659][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.460434][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.460434][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.478002][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.478002][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.503211][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.503211][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.503786][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.517117][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.517117][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.542475][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.542475][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.557351][ T8001] syz.1.1548: attempt to access beyond end of device [ 101.557351][ T8001] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.571385][ T8022] __nla_validate_parse: 7 callbacks suppressed [ 101.571441][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1556'. [ 101.617465][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1557'. [ 101.816784][ T8030] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 101.823521][ T8030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.831251][ T8030] vhci_hcd vhci_hcd.0: Device attached [ 102.122569][ T3383] usb 18-1: SetAddress Request (2) to port 0 [ 102.128743][ T3383] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 102.316172][ T8091] loop1: detected capacity change from 0 to 1024 [ 102.342986][ T8091] EXT4-fs: Ignoring removed nobh option [ 102.348659][ T8091] EXT4-fs: Ignoring removed bh option [ 102.393145][ T8091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.420443][ T8091] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 102.460164][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.469120][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.482287][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.492586][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.520845][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.529816][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.547668][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.594365][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.594979][ T8120] loop1: detected capacity change from 0 to 2048 [ 102.603329][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 102.643401][ T8120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.736612][ T8138] loop5: detected capacity change from 0 to 512 [ 102.764689][ T8138] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1570: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 102.799841][ T8138] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1570: Bad quota inode: 3, type: 0 [ 102.835423][ T8138] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.878034][ T8138] EXT4-fs (loop5): mount failed [ 102.888886][ T8151] netlink: 'syz.3.1572': attribute type 298 has an invalid length. [ 102.898893][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.025168][ T8168] loop3: detected capacity change from 0 to 1024 [ 103.043001][ T8162] loop1: detected capacity change from 0 to 8192 [ 103.060212][ T8168] EXT4-fs: Ignoring removed orlov option [ 103.076591][ T8168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.391691][ T8031] vhci_hcd: connection reset by peer [ 103.397829][ T3818] vhci_hcd: stop threads [ 103.402093][ T3818] vhci_hcd: release socket [ 103.406656][ T3818] vhci_hcd: disconnect device [ 103.448479][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.492162][ T8212] netlink: 'syz.3.1578': attribute type 10 has an invalid length. [ 103.504107][ T8212] dummy0: entered promiscuous mode [ 103.516414][ T8212] bond0: (slave dummy0): Releasing backup interface [ 103.528077][ T8216] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.011991][ T8262] loop1: detected capacity change from 0 to 1024 [ 104.029122][ T8262] EXT4-fs: Ignoring removed orlov option [ 104.034899][ T8262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.066362][ T8262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.153390][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.258322][ T8285] loop3: detected capacity change from 0 to 128 [ 104.290638][ T8285] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.319470][ T8285] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.449202][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.563616][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 104.563630][ T29] audit: type=1400 audit(1755422675.955:2480): avc: denied { read } for pid=8312 comm="syz.1.1619" name="event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.593188][ T29] audit: type=1400 audit(1755422675.955:2481): avc: denied { open } for pid=8312 comm="syz.1.1619" path="/dev/input/event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.692277][ T29] audit: type=1400 audit(1755422676.075:2482): avc: denied { bind } for pid=8322 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.713360][ T29] audit: type=1400 audit(1755422676.075:2483): avc: denied { setopt } for pid=8322 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.963553][ T29] audit: type=1326 audit(1755422676.355:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.6.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 104.987065][ T29] audit: type=1326 audit(1755422676.355:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.6.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 105.010939][ T29] audit: type=1326 audit(1755422676.375:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.6.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 105.034565][ T29] audit: type=1326 audit(1755422676.375:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.6.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 105.058182][ T29] audit: type=1326 audit(1755422676.375:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.6.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 105.183823][ T8348] loop5: detected capacity change from 0 to 128 [ 105.192060][ T8348] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.207160][ T8348] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.234666][ T5564] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.425063][ T8357] IPv4: Oversized IP packet from 127.202.26.0 [ 105.457016][ T29] audit: type=1326 audit(1755422676.845:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 105.975397][ T8398] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.034303][ T8398] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.079223][ T8398] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.133334][ T8398] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.146556][ T8407] loop6: detected capacity change from 0 to 512 [ 106.166819][ T8407] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.180728][ T8407] EXT4-fs (loop6): 1 truncate cleaned up [ 106.190792][ T8407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.209438][ T3828] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.245561][ T3828] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.264779][ T3828] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.300102][ T3828] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.347812][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.653178][ T8432] __nla_validate_parse: 25 callbacks suppressed [ 106.653193][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 106.671063][ T8436] loop6: detected capacity change from 0 to 1024 [ 106.679669][ T8436] EXT4-fs: Ignoring removed orlov option [ 106.700722][ T8436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.754305][ T8432] bond0: (slave macvlan2): Releasing backup interface [ 107.104869][ T8454] loop5: detected capacity change from 0 to 512 [ 107.120625][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.126851][ T8454] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.163058][ T8454] EXT4-fs (loop5): 1 truncate cleaned up [ 107.169164][ T8454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.208750][ T8463] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 107.215318][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.223244][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 107.233314][ T3383] usb 18-1: device descriptor read/8, error -110 [ 107.313773][ T8473] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 107.341939][ T8476] syz_tun: entered promiscuous mode [ 107.347644][ T3383] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 107.358355][ T8476] macvtap1: entered promiscuous mode [ 107.371481][ T8476] syz_tun: left promiscuous mode [ 107.377359][ T3383] usb 18-1: enqueue for inactive port 0 [ 107.392319][ T3383] usb 18-1: enqueue for inactive port 0 [ 107.398203][ T3383] usb 18-1: enqueue for inactive port 0 [ 107.406925][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'. [ 107.427898][ T8473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.464950][ T8481] bond1 (unregistering): Released all slaves [ 107.492283][ T3410] usb 14-1: SetAddress Request (2) to port 0 [ 107.498330][ T3410] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 107.676781][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.906430][ T8533] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1698'. [ 107.931541][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1691'. [ 108.403405][ T8591] netlink: 'syz.3.1699': attribute type 10 has an invalid length. [ 108.411369][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1699'. [ 108.433621][ T3383] usb usb18-port1: attempt power cycle [ 108.439493][ T8591] batman_adv: batadv0: Adding interface: macvlan0 [ 108.446007][ T8591] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.475405][ T8591] batman_adv: batadv0: Interface activated: macvlan0 [ 108.906519][ T8465] vhci_hcd: connection reset by peer [ 108.914640][ T52] vhci_hcd: stop threads [ 108.919001][ T52] vhci_hcd: release socket [ 108.923602][ T52] vhci_hcd: disconnect device [ 109.216323][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 109.243746][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 109.254972][ T8671] ip6gre1: entered allmulticast mode [ 109.443687][ T8685] loop6: detected capacity change from 0 to 1024 [ 109.457317][ T8685] EXT4-fs: Ignoring removed bh option [ 109.477834][ T8685] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.490082][ T8685] EXT4-fs error (device loop6): ext4_quota_enable:7124: comm syz.6.1719: inode #2304: comm syz.6.1719: iget: illegal inode # [ 109.503856][ T8685] EXT4-fs (loop6): Remounting filesystem read-only [ 109.510448][ T8685] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 109.525741][ T8685] EXT4-fs (loop6): mount failed [ 109.572499][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 109.572591][ T29] audit: type=1326 audit(1755422680.965:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.602194][ T29] audit: type=1326 audit(1755422680.965:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.602738][ T8693] loop6: detected capacity change from 0 to 1024 [ 109.628153][ T29] audit: type=1326 audit(1755422680.965:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.633406][ T8693] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.655635][ T29] audit: type=1326 audit(1755422680.965:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.669790][ T8693] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.1722: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.689418][ T29] audit: type=1326 audit(1755422680.965:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.704283][ T8693] Quota error (device loop6): write_blk: dquota write failed [ 109.726897][ T29] audit: type=1326 audit(1755422680.965:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.6.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 109.734294][ T8693] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 109.734736][ T8693] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1722: Failed to acquire dquot type 0 [ 109.757613][ T29] audit: type=1400 audit(1755422680.965:2539): avc: denied { map } for pid=8692 comm="syz.6.1722" path="socket:[23319]" dev="sockfs" ino=23319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.757664][ T29] audit: type=1400 audit(1755422680.965:2540): avc: denied { read accept } for pid=8692 comm="syz.6.1722" path="socket:[23319]" dev="sockfs" ino=23319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.828888][ T8693] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1722: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.845893][ T8693] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1722: Invalid inode bitmap blk 0 in block_group 0 [ 109.858866][ T8693] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 109.868061][ T52] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.885950][ T52] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 109.897528][ T8693] EXT4-fs (loop6): 1 orphan inode deleted [ 109.906233][ T8693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.921834][ T8698] pim6reg1: entered promiscuous mode [ 109.927211][ T8698] pim6reg1: entered allmulticast mode [ 109.951858][ T8693] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 16: comm syz.6.1722: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 109.987617][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.157213][ T8710] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 110.163775][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.171490][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 110.243883][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 110.276067][ T8724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.362535][ T3383] usb usb18-port1: unable to enumerate USB device [ 110.452271][ T3470] usb 12-1: SetAddress Request (6) to port 0 [ 110.458364][ T3470] usb 12-1: new SuperSpeed USB device number 6 using vhci_hcd [ 110.469214][ T8752] pim6reg1: entered promiscuous mode [ 110.474635][ T8752] pim6reg1: entered allmulticast mode [ 110.508655][ T8755] loop1: detected capacity change from 0 to 1024 [ 110.517193][ T8755] EXT4-fs: Ignoring removed bh option [ 110.523813][ T8755] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.541372][ T8755] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.1739: inode #2304: comm syz.1.1739: iget: illegal inode # [ 110.561085][ T8755] EXT4-fs (loop1): Remounting filesystem read-only [ 110.567758][ T8755] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 110.583693][ T8755] EXT4-fs (loop1): mount failed [ 110.647019][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 110.685388][ T8767] netlink: 'syz.8.1741': attribute type 2 has an invalid length. [ 110.693201][ T8767] netlink: 'syz.8.1741': attribute type 1 has an invalid length. [ 110.700943][ T8767] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.1741'. [ 110.732103][ T8771] netlink: 'syz.6.1742': attribute type 1 has an invalid length. [ 110.770298][ T8779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8779 comm=syz.3.1743 [ 110.771201][ T8771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.805023][ T8781] bond1 (unregistering): Released all slaves [ 110.925361][ T8798] ip6gre1: entered allmulticast mode [ 111.341928][ T8846] netlink: 'syz.8.1759': attribute type 1 has an invalid length. [ 111.380427][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.426684][ T8846] bond1 (unregistering): Released all slaves [ 111.435956][ T8855] loop3: detected capacity change from 0 to 128 [ 111.665598][ T8881] loop6: detected capacity change from 0 to 512 [ 111.710044][ T8881] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.747754][ T8881] EXT4-fs (loop6): mount failed [ 111.788987][ T8896] __nla_validate_parse: 4 callbacks suppressed [ 111.789003][ T8896] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1772'. [ 111.877979][ T8906] loop3: detected capacity change from 0 to 128 [ 111.922151][ T8906] FAT-fs (loop3): Directory bread(block 32) failed [ 111.943963][ T8906] FAT-fs (loop3): Directory bread(block 33) failed [ 111.962442][ T8906] FAT-fs (loop3): Directory bread(block 34) failed [ 111.981963][ T8906] FAT-fs (loop3): Directory bread(block 35) failed [ 111.993342][ T8906] FAT-fs (loop3): Directory bread(block 36) failed [ 112.000270][ T8906] FAT-fs (loop3): Directory bread(block 37) failed [ 112.007345][ T8906] FAT-fs (loop3): Directory bread(block 38) failed [ 112.013992][ T8906] FAT-fs (loop3): Directory bread(block 39) failed [ 112.047462][ T8906] FAT-fs (loop3): Directory bread(block 40) failed [ 112.057604][ T8906] FAT-fs (loop3): Directory bread(block 41) failed [ 112.101737][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'. [ 112.156142][ T8934] netlink: 'syz.3.1778': attribute type 2 has an invalid length. [ 112.164133][ T8934] netlink: 'syz.3.1778': attribute type 1 has an invalid length. [ 112.171868][ T8934] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1778'. [ 112.278668][ T8955] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1786'. [ 112.287971][ T8953] loop3: detected capacity change from 0 to 1024 [ 112.311206][ T8953] EXT4-fs: Ignoring removed bh option [ 112.322717][ T8953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.336935][ T8953] EXT4-fs error (device loop3): ext4_quota_enable:7124: comm syz.3.1796: inode #2304: comm syz.3.1796: iget: illegal inode # [ 112.354974][ T8953] EXT4-fs (loop3): Remounting filesystem read-only [ 112.361551][ T8953] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 112.386801][ T8953] EXT4-fs (loop3): mount failed [ 112.486516][ T8980] loop6: detected capacity change from 0 to 1024 [ 112.495691][ T8983] loop3: detected capacity change from 0 to 1024 [ 112.500463][ T8980] EXT4-fs: inline encryption not supported [ 112.514129][ T8983] EXT4-fs: Ignoring removed orlov option [ 112.517874][ T8980] EXT4-fs: Ignoring removed bh option [ 112.529486][ T8983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.545564][ T8980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.592325][ T3410] usb 14-1: device descriptor read/8, error -110 [ 112.601153][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.696383][ T8712] vhci_hcd: connection reset by peer [ 112.701948][ T3827] vhci_hcd: stop threads [ 112.702506][ T3410] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 112.706245][ T3827] vhci_hcd: release socket [ 112.718176][ T3827] vhci_hcd: disconnect device [ 112.733895][ T8996] netlink: 'syz.6.1794': attribute type 4 has an invalid length. [ 112.751879][ T3410] usb 14-1: enqueue for inactive port 0 [ 112.762287][ T3410] usb 14-1: enqueue for inactive port 0 [ 112.768646][ T3410] usb 14-1: enqueue for inactive port 0 [ 112.779624][ T8998] netlink: 'syz.6.1795': attribute type 13 has an invalid length. [ 112.820507][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.830268][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.841196][ T8998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.888648][ T9000] netlink: 'syz.6.1797': attribute type 2 has an invalid length. [ 112.896485][ T9000] netlink: 'syz.6.1797': attribute type 1 has an invalid length. [ 112.904386][ T9000] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1797'. [ 112.951765][ T9002] netlink: 'syz.6.1798': attribute type 39 has an invalid length. [ 112.974573][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.046355][ T9012] loop8: detected capacity change from 0 to 128 [ 113.176305][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 113.204652][ T9025] netlink: 'syz.3.1810': attribute type 12 has an invalid length. [ 113.244878][ T9027] loop5: detected capacity change from 0 to 1024 [ 113.257377][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 113.277787][ T9027] EXT4-fs: Ignoring removed bh option [ 113.310806][ T9027] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.315404][ T9033] loop3: detected capacity change from 0 to 1024 [ 113.328056][ T9033] EXT4-fs: Ignoring removed orlov option [ 113.343349][ T9033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.343853][ T9027] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.1811: inode #2304: comm syz.5.1811: iget: illegal inode # [ 113.370749][ T9027] EXT4-fs (loop5): Remounting filesystem read-only [ 113.377335][ T9027] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 113.419762][ T9027] EXT4-fs (loop5): mount failed [ 113.426663][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.492874][ T9044] SELinux: ebitmap: truncated map [ 113.504361][ T9044] SELinux: failed to load policy [ 113.589651][ T9056] loop8: detected capacity change from 0 to 1024 [ 113.597335][ T9056] EXT4-fs: Ignoring removed orlov option [ 113.603135][ T9056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.641074][ T9056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.696107][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1831'. [ 113.812818][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.813307][ T3410] usb usb14-port1: attempt power cycle [ 113.912539][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1846'. [ 113.913691][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1836'. [ 113.983498][ T9095] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 114.005600][ T9097] loop8: detected capacity change from 0 to 1024 [ 114.018048][ T9097] EXT4-fs: Ignoring removed bh option [ 114.042434][ T9097] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.069135][ T9097] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.1838: inode #2304: comm syz.8.1838: iget: illegal inode # [ 114.097679][ T9097] EXT4-fs (loop8): Remounting filesystem read-only [ 114.104354][ T9097] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 114.115906][ T9109] loop1: detected capacity change from 0 to 1024 [ 114.130192][ T9097] EXT4-fs (loop8): mount failed [ 114.133117][ T9109] EXT4-fs: Ignoring removed orlov option [ 114.140821][ T9109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.169279][ T9109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.238536][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.357293][ T9126] SELinux: ebitmap: truncated map [ 114.363736][ T9126] SELinux: failed to load policy [ 114.461387][ T9143] loop3: detected capacity change from 0 to 1024 [ 114.468506][ T9143] EXT4-fs: Ignoring removed orlov option [ 114.474245][ T9143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.496627][ T9143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.510650][ T9147] syzkaller1: entered promiscuous mode [ 114.516289][ T9147] syzkaller1: entered allmulticast mode [ 114.544565][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.547047][ T9149] loop8: detected capacity change from 0 to 128 [ 114.563660][ T9149] FAT-fs (loop8): Directory bread(block 32) failed [ 114.570304][ T9149] FAT-fs (loop8): Directory bread(block 33) failed [ 114.577173][ T9149] FAT-fs (loop8): Directory bread(block 34) failed [ 114.583850][ T9149] FAT-fs (loop8): Directory bread(block 35) failed [ 114.590478][ T9149] FAT-fs (loop8): Directory bread(block 36) failed [ 114.597607][ T9149] FAT-fs (loop8): Directory bread(block 37) failed [ 114.609923][ T9149] FAT-fs (loop8): Directory bread(block 38) failed [ 114.618169][ T9149] FAT-fs (loop8): Directory bread(block 39) failed [ 114.624827][ T9149] FAT-fs (loop8): Directory bread(block 40) failed [ 114.631438][ T9149] FAT-fs (loop8): Directory bread(block 41) failed [ 115.035466][ T9181] netlink: 'syz.6.1875': attribute type 13 has an invalid length. [ 115.043493][ T9181] netlink: 'syz.6.1875': attribute type 17 has an invalid length. [ 115.071608][ T9181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.118629][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 115.118647][ T29] audit: type=1326 audit(1755422686.505:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.150543][ T29] audit: type=1326 audit(1755422686.535:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.174077][ T29] audit: type=1326 audit(1755422686.535:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.197564][ T29] audit: type=1326 audit(1755422686.535:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.221157][ T29] audit: type=1326 audit(1755422686.535:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.244698][ T29] audit: type=1326 audit(1755422686.535:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.268426][ T29] audit: type=1326 audit(1755422686.535:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.291909][ T29] audit: type=1326 audit(1755422686.535:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.338541][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.353925][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.358008][ T29] audit: type=1326 audit(1755422686.715:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.361812][ T9190] dummy0: left promiscuous mode [ 115.384071][ T29] audit: type=1326 audit(1755422686.715:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.6.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 115.421902][ T9190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.504935][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.505141][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.553336][ T3470] usb 12-1: device descriptor read/8, error -110 [ 115.662406][ T3470] usb 12-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.683594][ T3410] usb usb14-port1: unable to enumerate USB device [ 115.693110][ T3470] usb 12-1: enqueue for inactive port 0 [ 115.693135][ T3470] usb 12-1: enqueue for inactive port 0 [ 115.693156][ T3470] usb 12-1: enqueue for inactive port 0 [ 115.738004][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9214 comm=syz.8.1890 [ 115.977026][ T9226] loop5: detected capacity change from 0 to 1024 [ 116.036480][ T9226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.060537][ T9231] netlink: 'syz.8.1896': attribute type 3 has an invalid length. [ 116.437788][ T9245] netlink: zone id is out of range [ 116.442989][ T9245] netlink: set zone limit has 4 unknown bytes [ 116.532729][ T9252] team0 (unregistering): Port device team_slave_0 removed [ 116.561885][ T9252] team0 (unregistering): Port device team_slave_1 removed [ 116.684374][ T9254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.722543][ T3470] usb usb12-port1: attempt power cycle [ 116.791811][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.810520][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.851203][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.908685][ T9264] loop3: detected capacity change from 0 to 8192 [ 116.918689][ T9268] syzkaller0: entered promiscuous mode [ 116.924289][ T9268] syzkaller0: entered allmulticast mode [ 117.072688][ T9289] loop1: detected capacity change from 0 to 1024 [ 117.094441][ T9289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.147261][ T9285] loop5: detected capacity change from 0 to 32768 [ 117.193346][ T9285] loop5: p1 p2 p3 < p5 p6 > [ 117.201861][ T9285] loop5: p2 size 16775168 extends beyond EOD, truncated [ 117.217649][ T9285] loop5: p5 start 4294970168 is beyond EOD, truncated [ 117.338709][ T9300] loop6: detected capacity change from 0 to 8192 [ 117.368825][ T9302] lo speed is unknown, defaulting to 1000 [ 117.375985][ T9302] lo speed is unknown, defaulting to 1000 [ 117.381914][ T9302] lo speed is unknown, defaulting to 1000 [ 117.388296][ T9302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.397585][ T9302] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.408685][ T9302] lo speed is unknown, defaulting to 1000 [ 117.416181][ T9302] lo speed is unknown, defaulting to 1000 [ 117.423082][ T9302] lo speed is unknown, defaulting to 1000 [ 117.429459][ T9302] lo speed is unknown, defaulting to 1000 [ 117.439384][ T9302] lo speed is unknown, defaulting to 1000 [ 117.508768][ T9309] syzkaller0: entered promiscuous mode [ 117.514358][ T9309] syzkaller0: entered allmulticast mode [ 117.578799][ T9317] loop5: detected capacity change from 0 to 512 [ 117.603574][ T9317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.621368][ T9317] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.684881][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.746192][ T9323] lo speed is unknown, defaulting to 1000 [ 117.800238][ T9324] loop8: detected capacity change from 0 to 8192 [ 117.808996][ T9324] msdos: Unknown parameter 'A' [ 117.986160][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.005822][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.033942][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.592493][ T3470] usb usb12-port1: unable to enumerate USB device [ 118.906155][ T9407] loop6: detected capacity change from 0 to 1024 [ 118.916812][ T9407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.954163][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.556222][ T9416] lo speed is unknown, defaulting to 1000 [ 119.817580][ T9437] __nla_validate_parse: 3 callbacks suppressed [ 119.817594][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 119.837484][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 119.916576][ T9445] loop1: detected capacity change from 0 to 512 [ 119.935587][ T9445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.948567][ T9445] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.991941][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.129996][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 120.130013][ T29] audit: type=1326 audit(1755422691.515:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 120.159896][ T29] audit: type=1326 audit(1755422691.515:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd330ecec23 code=0x7ffc0000 [ 120.236348][ T29] audit: type=1400 audit(1755422691.615:3014): avc: denied { associate } for pid=9463 comm="syz.8.2001" name="file0" dev="tmpfs" ino=587 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 120.322311][ T29] audit: type=1400 audit(1755422691.655:3015): avc: denied { rmdir } for pid=7182 comm="syz-executor" name="file0" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 120.348650][ T29] audit: type=1326 audit(1755422691.705:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd330ecd69f code=0x7ffc0000 [ 120.475443][ T9482] loop3: detected capacity change from 0 to 512 [ 120.498495][ T9481] loop8: detected capacity change from 0 to 128 [ 120.512140][ T29] audit: type=1326 audit(1755422691.895:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd330ecec77 code=0x7ffc0000 [ 120.544288][ T29] audit: type=1326 audit(1755422691.935:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd330ecd550 code=0x7ffc0000 [ 120.545083][ T9462] loop1: detected capacity change from 0 to 32768 [ 120.568727][ T29] audit: type=1326 audit(1755422691.935:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd330ece7eb code=0x7ffc0000 [ 120.600994][ T29] audit: type=1326 audit(1755422691.985:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd330ecd84a code=0x7ffc0000 [ 120.624359][ T29] audit: type=1326 audit(1755422691.985:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd330ece7eb code=0x7ffc0000 [ 120.666140][ T9482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.679252][ T9482] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.679308][ T9462] loop1: p1 p2 p3 < p5 p6 > [ 120.695536][ T9462] loop1: p2 size 16775168 extends beyond EOD, truncated [ 120.722926][ T9462] loop1: p5 start 4294970168 is beyond EOD, truncated [ 120.732008][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.827584][ T9498] netlink: 536 bytes leftover after parsing attributes in process `syz.8.2014'. [ 120.859018][ T9498] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2014'. [ 121.081205][ T9455] lo speed is unknown, defaulting to 1000 [ 121.139350][ T9514] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 121.139350][ T9514] program syz.8.2019 not setting count and/or reply_len properly [ 121.181189][ T9516] loop8: detected capacity change from 0 to 512 [ 121.195703][ T9516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.217133][ T9516] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.316184][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.672383][ T9543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9543 comm=syz.1.2033 [ 121.777500][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'. [ 121.787157][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.802797][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.821463][ T9549] batman_adv: batadv0: Interface deactivated: macvlan0 [ 121.828440][ T9549] batman_adv: batadv0: Removing interface: macvlan0 [ 121.945042][ T9566] loop6: detected capacity change from 0 to 512 [ 122.125665][ T9574] SELinux: failed to load policy [ 122.158528][ T9581] loop3: detected capacity change from 0 to 1024 [ 122.165483][ T9581] EXT4-fs: inline encryption not supported [ 122.171432][ T9581] EXT4-fs: Ignoring removed bh option [ 122.188247][ T9581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.226056][ T3470] Process accounting resumed [ 122.235359][ T9581] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.295372][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.531224][ T9603] syzkaller1: entered promiscuous mode [ 122.536861][ T9603] syzkaller1: entered allmulticast mode [ 122.797407][ T9610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.873421][ T9614] loop5: detected capacity change from 0 to 512 [ 122.888242][ T9614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.910776][ T9614] EXT4-fs (loop5): 1 truncate cleaned up [ 122.925302][ T9614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.985690][ T9587] lo speed is unknown, defaulting to 1000 [ 123.054474][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.466252][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 123.708037][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2078'. [ 124.470613][ T9717] tipc: Started in network mode [ 124.475797][ T9717] tipc: Node identity ac14140f, cluster identity 4711 [ 124.484721][ T9717] tipc: New replicast peer: 255.255.255.255 [ 124.490850][ T9717] tipc: Enabled bearer , priority 10 [ 124.497793][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2105'. [ 124.508163][ T9718] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2105'. [ 124.774702][ T9733] netlink: 1272 bytes leftover after parsing attributes in process `syz.6.2111'. [ 125.114902][ T9747] syzkaller1: entered promiscuous mode [ 125.120427][ T9747] syzkaller1: entered allmulticast mode [ 125.302285][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 125.302300][ T29] audit: type=1326 audit(1755422696.685:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.382298][ T29] audit: type=1326 audit(1755422696.685:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.405830][ T29] audit: type=1326 audit(1755422696.735:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.429326][ T29] audit: type=1326 audit(1755422696.735:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.452788][ T29] audit: type=1326 audit(1755422696.735:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.476203][ T29] audit: type=1326 audit(1755422696.735:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.499656][ T29] audit: type=1326 audit(1755422696.735:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.523060][ T29] audit: type=1326 audit(1755422696.735:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.546494][ T29] audit: type=1326 audit(1755422696.735:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.569968][ T29] audit: type=1326 audit(1755422696.735:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330ecebe9 code=0x7ffc0000 [ 125.602298][ T3410] tipc: Node number set to 2886997007 [ 125.756635][ T9790] loop6: detected capacity change from 0 to 512 [ 125.814337][ T9790] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.834060][ T9790] EXT4-fs (loop6): 1 truncate cleaned up [ 125.840363][ T9790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.885187][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.963208][ T9810] lo speed is unknown, defaulting to 1000 [ 125.969096][ T9810] lo speed is unknown, defaulting to 1000 [ 125.977152][ T9810] lo speed is unknown, defaulting to 1000 [ 125.984301][ T9810] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 125.995582][ T9810] lo speed is unknown, defaulting to 1000 [ 126.007844][ T9810] lo speed is unknown, defaulting to 1000 [ 126.014314][ T9810] lo speed is unknown, defaulting to 1000 [ 126.021031][ T9810] lo speed is unknown, defaulting to 1000 [ 126.039242][ T9810] lo speed is unknown, defaulting to 1000 [ 126.125380][ T9818] loop3: detected capacity change from 0 to 128 [ 126.200598][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2146'. [ 126.245012][ T9827] team1: entered promiscuous mode [ 126.250194][ T9827] team1: entered allmulticast mode [ 126.295705][ T9835] 9pnet_fd: Insufficient options for proto=fd [ 126.353222][ T9843] loop5: detected capacity change from 0 to 512 [ 126.366155][ T9843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.407040][ T9843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.429838][ T9843] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.452876][ T9843] validate_nla: 3 callbacks suppressed [ 126.452891][ T9843] netlink: 'syz.5.2154': attribute type 27 has an invalid length. [ 126.514672][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.531523][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.543203][ T9843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.550516][ T9859] IPv6: Can't replace route, no match found [ 126.619759][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.891968][ T9880] SELinux: ebitmap start bit (1633759333) is not a multiple of the map unit size (64) [ 126.924477][ T9880] SELinux: failed to load policy [ 127.061573][ T9905] loop1: detected capacity change from 0 to 128 [ 127.145255][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2187'. [ 127.154692][ T9916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2187'. [ 127.163701][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2187'. [ 127.181840][ T9916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2187'. [ 127.181976][ T3867] bio_check_eod: 7050 callbacks suppressed [ 127.181994][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.181994][ T3867] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 127.203220][ T9918] loop3: detected capacity change from 0 to 256 [ 127.216933][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.216933][ T3867] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 127.252873][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.252873][ T3867] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 127.276317][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.276317][ T3867] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 127.299460][ T9918] FAT-fs (loop3): IO charset iso8859-2 not found [ 127.309318][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.309318][ T3867] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 127.324776][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.324776][ T3867] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 127.362258][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.362258][ T3867] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 127.385233][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.385233][ T3867] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 127.414760][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.414760][ T3867] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 127.440740][ T3867] kworker/u8:60: attempt to access beyond end of device [ 127.440740][ T3867] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 127.950285][ T9994] can0: slcan on ttyS3. [ 127.966274][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.975019][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.992339][ T9994] can0 (unregistered): slcan off ttyS3. [ 128.040412][T10004] loop1: detected capacity change from 0 to 256 [ 128.488305][T10014] 9pnet: p9_errstr2errno: server reported unknown error [ 128.571308][T10021] loop1: detected capacity change from 0 to 512 [ 128.596360][T10021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.609318][T10021] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.628911][T10032] syz_tun: entered allmulticast mode [ 128.635134][T10031] syz_tun: left allmulticast mode [ 128.681772][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.174482][T10084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.298229][T10086] SELinux: failed to load policy [ 129.488641][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2257'. [ 129.504755][T10097] netlink: 'syz.8.2257': attribute type 1 has an invalid length. [ 129.710028][T10119] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2267'. [ 129.853730][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2273'. [ 129.875394][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 129.884371][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2273'. [ 129.964797][T10144] serio: Serial port ptm1 [ 130.170925][T10167] netlink: 'syz.8.2287': attribute type 1 has an invalid length. [ 130.186948][T10167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.204752][T10167] bond1 (unregistering): Released all slaves [ 130.335054][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 130.335149][ T29] audit: type=1400 audit(1755422701.725:3682): avc: denied { bind } for pid=10179 comm="syz.3.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.403777][ T29] audit: type=1400 audit(1755422701.755:3683): avc: denied { setopt } for pid=10179 comm="syz.3.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.430767][T10186] loop8: detected capacity change from 0 to 128 [ 130.440457][ T29] audit: type=1400 audit(1755422701.825:3684): avc: denied { mount } for pid=10184 comm="syz.8.2295" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 130.467457][ T29] audit: type=1400 audit(1755422701.855:3685): avc: denied { write } for pid=10182 comm="syz.5.2294" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.538679][T10197] wireguard0: entered promiscuous mode [ 130.544222][T10197] wireguard0: entered allmulticast mode [ 130.563868][ T29] audit: type=1400 audit(1755422701.955:3686): avc: denied { unmount } for pid=7182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 130.589309][ T29] audit: type=1400 audit(1755422701.975:3687): avc: denied { create } for pid=10199 comm="syz.3.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.611085][ T29] audit: type=1400 audit(1755422702.005:3688): avc: denied { ioctl } for pid=10199 comm="syz.3.2301" path="socket:[27811]" dev="sockfs" ino=27811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.739790][ T29] audit: type=1400 audit(1755422702.125:3689): avc: denied { name_bind } for pid=10207 comm="syz.5.2304" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.801833][ T29] audit: type=1326 audit(1755422702.185:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb92ccebe9 code=0x7ffc0000 [ 130.825602][ T29] audit: type=1326 audit(1755422702.185:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb92ccebe9 code=0x7ffc0000 [ 131.005639][T10224] netlink: 'syz.5.2311': attribute type 4 has an invalid length. [ 131.304359][T10247] __nla_validate_parse: 4 callbacks suppressed [ 131.304377][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2320'. [ 131.337009][T10249] veth0: entered promiscuous mode [ 131.342580][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2321'. [ 131.352763][T10249] veth0 (unregistering): left promiscuous mode [ 131.591311][T10266] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2329'. [ 131.675357][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 131.688872][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2332'. [ 131.714761][T10278] @: renamed from vlan0 [ 131.782840][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2337'. [ 131.856657][T10299] tipc: Enabled bearer , priority 0 [ 131.864466][T10299] tipc: Disabling bearer [ 132.809874][T10338] loop6: detected capacity change from 0 to 128 [ 132.844908][T10338] bio_check_eod: 67 callbacks suppressed [ 132.844928][T10338] syz.6.2360: attempt to access beyond end of device [ 132.844928][T10338] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 133.025206][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 133.154245][ T3383] hid_parser_main: 18 callbacks suppressed [ 133.154268][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.182330][ T3383] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.274920][T10370] hub 6-0:1.0: USB hub found [ 133.290275][T10370] hub 6-0:1.0: 8 ports detected [ 133.320760][T10374] loop1: detected capacity change from 0 to 2048 [ 133.337717][T10376] netlink: 'syz.5.2376': attribute type 39 has an invalid length. [ 133.365438][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.419165][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.117542][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 134.126572][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 134.206076][T10417] loop6: detected capacity change from 0 to 512 [ 134.255309][T10417] EXT4-fs: Ignoring removed bh option [ 134.298438][T10417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.307105][T10417] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 134.466740][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.476486][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.605855][T10430] loop1: detected capacity change from 0 to 512 [ 134.654393][T10430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.732305][T10430] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.784765][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.080122][T10447] loop3: detected capacity change from 0 to 1024 [ 135.130407][T10447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.188409][T10447] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.267367][T10447] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.347364][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 135.347382][ T29] audit: type=1400 audit(1755422706.735:4054): avc: denied { mount } for pid=10463 comm="syz.6.2407" name="/" dev="ramfs" ino=28212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.444432][ T29] audit: type=1400 audit(1755422706.805:4055): avc: denied { cpu } for pid=10467 comm="syz.8.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.466129][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.512856][T10472] loop3: detected capacity change from 0 to 1024 [ 135.532622][T10472] EXT4-fs: Ignoring removed bh option [ 135.552438][T10472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.618327][T10476] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2413'. [ 135.699516][ T29] audit: type=1400 audit(1755422707.075:4056): avc: denied { append } for pid=10471 comm="syz.3.2411" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.752407][ T29] audit: type=1326 audit(1755422707.115:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9eb0ebe9 code=0x7ffc0000 [ 135.775996][ T29] audit: type=1326 audit(1755422707.115:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1d9eb0ebe9 code=0x7ffc0000 [ 135.799761][ T29] audit: type=1326 audit(1755422707.115:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9eb0ebe9 code=0x7ffc0000 [ 135.831499][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.892314][ T29] audit: type=1400 audit(1755422707.275:4060): avc: denied { mount } for pid=10489 comm="syz.8.2418" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.935608][ T29] audit: type=1326 audit(1755422707.315:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.8.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb92ccebe9 code=0x7ffc0000 [ 135.959266][ T29] audit: type=1326 audit(1755422707.315:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.8.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb92ccebe9 code=0x7ffc0000 [ 135.982913][ T29] audit: type=1326 audit(1755422707.315:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.8.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb92ccebe9 code=0x7ffc0000 [ 136.319276][T10535] __nla_validate_parse: 1 callbacks suppressed [ 136.319294][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 136.353216][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 136.526853][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2443'. [ 136.607915][T10559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.616684][T10559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.649704][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2452'. [ 136.763577][T10578] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2457'. [ 136.845883][ T3410] Process accounting resumed [ 137.020944][T10606] pim6reg1: entered promiscuous mode [ 137.026327][T10606] pim6reg1: entered allmulticast mode [ 137.072388][T10595] lo speed is unknown, defaulting to 1000 [ 137.078613][T10595] lo speed is unknown, defaulting to 1000 [ 137.149092][T10595] chnl_net:caif_netlink_parms(): no params data found [ 137.232679][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.239825][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.256447][T10627] loop1: detected capacity change from 0 to 512 [ 137.263040][T10595] bridge_slave_0: entered allmulticast mode [ 137.269676][T10595] bridge_slave_0: entered promiscuous mode [ 137.284421][T10627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.290439][T10625] loop8: detected capacity change from 0 to 8192 [ 137.300570][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.304101][T10627] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.310622][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.328055][T10595] bridge_slave_1: entered allmulticast mode [ 137.334675][T10595] bridge_slave_1: entered promiscuous mode [ 137.340793][T10627] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.353014][T10627] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2476: mark_inode_dirty error [ 137.365057][T10627] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.380061][T10631] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.393344][T10631] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2476: mark_inode_dirty error [ 137.405058][T10631] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.417232][ T31] bridge_slave_1: left allmulticast mode [ 137.418423][T10631] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2476: mark_inode_dirty error [ 137.423070][ T31] bridge_slave_1: left promiscuous mode [ 137.437044][T10631] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.439813][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.452156][T10631] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2476: mark_inode_dirty error [ 137.470601][T10627] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2476: corrupted inode contents [ 137.483005][ T31] bridge_slave_0: left allmulticast mode [ 137.488872][ T31] bridge_slave_0: left promiscuous mode [ 137.494597][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.522424][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.681398][T10653] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 137.692305][T10653] siw: device registration error -23 [ 137.700563][T10655] IPv4: Oversized IP packet from 127.202.26.0 [ 137.797677][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.810501][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.820847][ T31] bond0 (unregistering): Released all slaves [ 137.840229][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.850662][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.884438][ T31] tipc: Disabling bearer [ 137.889722][ T31] tipc: Left network mode [ 137.893270][T10666] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 137.904115][T10595] team0: Port device team_slave_0 added [ 137.921233][T10595] team0: Port device team_slave_1 added [ 137.993449][ T31] team0 (unregistering): Port device team_slave_1 removed [ 138.005099][ T31] team0 (unregistering): Port device team_slave_0 removed [ 138.051641][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.058754][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.084759][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.099364][T10672] netlink: 'syz.6.2492': attribute type 3 has an invalid length. [ 138.107313][ T36] lo speed is unknown, defaulting to 1000 [ 138.113124][ T36] infiniband syz0: ib_query_port failed (-19) [ 138.120575][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.127572][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.153556][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.186858][T10681] loop6: detected capacity change from 0 to 512 [ 138.195106][T10681] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 138.210492][T10681] EXT4-fs (loop6): 1 truncate cleaned up [ 138.221057][T10595] hsr_slave_0: entered promiscuous mode [ 138.227058][T10681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.229921][T10595] hsr_slave_1: entered promiscuous mode [ 138.245394][T10595] debugfs: 'hsr0' already exists in 'hsr' [ 138.251162][T10595] Cannot create hsr debugfs directory [ 138.279274][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.309781][T10691] IPv4: Oversized IP packet from 127.202.26.0 [ 138.326817][T10689] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.374630][T10689] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.434169][T10689] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.458872][T10595] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 138.476091][T10595] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 138.495738][T10689] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.511172][T10595] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 138.532139][T10595] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 138.582580][T10721] IPv4: Oversized IP packet from 127.202.26.0 [ 138.599993][T10723] lo speed is unknown, defaulting to 1000 [ 138.606135][T10723] lo speed is unknown, defaulting to 1000 [ 138.612873][T10723] lo speed is unknown, defaulting to 1000 [ 138.619756][T10723] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.627619][ T3830] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.639822][ T3830] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.648186][T10723] lo speed is unknown, defaulting to 1000 [ 138.656990][ T3830] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.665382][ T3830] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.673698][T10723] lo speed is unknown, defaulting to 1000 [ 138.685691][T10595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.694390][T10723] lo speed is unknown, defaulting to 1000 [ 138.702513][T10723] lo speed is unknown, defaulting to 1000 [ 138.709695][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.717228][T10723] lo speed is unknown, defaulting to 1000 [ 138.725648][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.732808][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.754276][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.761467][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.772347][T10726] loop5: detected capacity change from 0 to 512 [ 138.780292][T10726] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 138.792145][T10726] EXT4-fs (loop5): 1 truncate cleaned up [ 138.815198][T10726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.828030][T10595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.881993][T10734] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.894911][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.907802][T10742] netlink: 536 bytes leftover after parsing attributes in process `syz.6.2518'. [ 138.921546][T10742] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2518'. [ 138.935141][T10734] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.974897][T10595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.988256][T10747] loop5: detected capacity change from 0 to 512 [ 139.006958][T10747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.024094][T10734] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.029950][T10747] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.084019][T10734] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.109656][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.138961][T10767] loop5: detected capacity change from 0 to 512 [ 139.164300][T10767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.177749][T10767] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.191146][T10767] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.204549][T10767] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2524: mark_inode_dirty error [ 139.211330][T10595] veth0_vlan: entered promiscuous mode [ 139.223749][T10767] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.227921][T10595] veth1_vlan: entered promiscuous mode [ 139.238993][T10767] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.253223][T10767] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2524: mark_inode_dirty error [ 139.256173][T10595] veth0_macvtap: entered promiscuous mode [ 139.271107][T10767] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.274244][T10595] veth1_macvtap: entered promiscuous mode [ 139.290778][T10767] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2524: mark_inode_dirty error [ 139.303375][T10767] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.308485][T10595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.324994][T10767] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2524: mark_inode_dirty error [ 139.327488][T10595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.337140][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2524: corrupted inode contents [ 139.350270][ T3828] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.367486][ T3828] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.380531][ T3828] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.395161][ T3828] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.408479][T10778] loop6: detected capacity change from 0 to 512 [ 139.416919][T10777] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 139.416919][T10777] program syz.1.2537 not setting count and/or reply_len properly [ 139.436141][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.456885][T10778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.470680][T10778] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.487982][T10785] siw: device registration error -23 [ 139.543805][T10789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.553069][T10789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.557972][T10792] loop1: detected capacity change from 0 to 512 [ 139.568210][T10789] loop5: detected capacity change from 0 to 1024 [ 139.576938][T10789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.578087][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.595906][T10789] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.597289][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.617911][T10792] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 139.628378][T10792] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2529: Corrupt directory, running e2fsck is recommended [ 139.628534][T10789] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 139.649782][T10789] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.660869][T10792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 139.669746][T10789] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2528: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.687129][T10792] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2529: corrupted in-inode xattr: invalid ea_ino [ 139.701669][T10792] EXT4-fs (loop1): Remounting filesystem read-only [ 139.703189][T10789] EXT4-fs (loop5): 1 orphan inode deleted [ 139.710131][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.727216][T10789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.745952][T10798] loop6: detected capacity change from 0 to 128 [ 139.778053][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.789818][T10792] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 139.800109][T10792] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2529: Corrupt directory, running e2fsck is recommended [ 139.816989][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.828601][T10792] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 139.838892][T10792] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2529: Corrupt directory, running e2fsck is recommended [ 139.853190][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.864900][T10792] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 139.875141][T10792] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2529: Corrupt directory, running e2fsck is recommended [ 139.889911][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.915903][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.057958][T10822] loop9: detected capacity change from 0 to 512 [ 140.065067][T10824] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 140.065067][T10824] program syz.6.2546 not setting count and/or reply_len properly [ 140.107606][T10822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.130932][T10822] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.231049][T10595] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.261874][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10841 comm=syz.6.2553 [ 140.314130][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.344934][T10845] SELinux: failed to load policy [ 140.415918][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 140.415937][ T29] audit: type=1326 audit(1755422711.805:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.448234][T10856] loop1: detected capacity change from 0 to 512 [ 140.471493][ T29] audit: type=1326 audit(1755422711.805:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.495206][ T29] audit: type=1326 audit(1755422711.805:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.519189][ T29] audit: type=1326 audit(1755422711.805:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.542714][ T29] audit: type=1326 audit(1755422711.805:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.566392][ T29] audit: type=1326 audit(1755422711.805:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.589971][ T29] audit: type=1326 audit(1755422711.805:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.613694][ T29] audit: type=1326 audit(1755422711.805:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.637226][ T29] audit: type=1326 audit(1755422711.805:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.660863][ T29] audit: type=1326 audit(1755422711.805:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996e4aebe9 code=0x7ffc0000 [ 140.723963][T10856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.736664][T10856] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.755162][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.770405][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.814450][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 140.823589][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 140.850467][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.317790][T10891] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 141.317790][T10891] program syz.9.2572 not setting count and/or reply_len properly [ 141.479132][T10907] loop9: detected capacity change from 0 to 512 [ 141.487875][T10907] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 141.500367][T10907] EXT4-fs (loop9): 1 truncate cleaned up [ 141.508653][T10907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.661507][T10595] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.006695][T10957] loop5: detected capacity change from 0 to 1024 [ 142.013889][T10957] EXT4-fs: inline encryption not supported [ 142.019827][T10957] EXT4-fs: Ignoring removed bh option [ 142.034162][T10957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.052076][ T3383] Process accounting resumed [ 142.062279][T10957] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 142.081349][ T5564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.238426][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.250497][ T3867] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.262388][ T3867] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.274248][ T3867] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.624729][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 142.680849][T10991] loop8: detected capacity change from 0 to 1024 [ 142.691945][T10991] EXT4-fs: inline encryption not supported [ 142.697435][T10993] syzkaller1: entered promiscuous mode [ 142.703368][T10993] syzkaller1: entered allmulticast mode [ 142.703553][T10991] EXT4-fs: Ignoring removed bh option [ 142.734074][T10991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.753561][ T3410] Process accounting resumed [ 142.763377][T10991] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 142.792359][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.133725][T11045] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.2626'. [ 143.311885][T11065] loop9: detected capacity change from 0 to 512 [ 143.329812][T11065] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 143.356299][T11065] EXT4-fs (loop9): 1 truncate cleaned up [ 143.364804][T11065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.466519][T10595] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.509009][T11088] netlink: 'syz.9.2640': attribute type 10 has an invalid length. [ 143.536235][T11088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.577815][T11100] loop9: detected capacity change from 0 to 1024 [ 143.585682][T11100] EXT4-fs: Ignoring removed nobh option [ 143.591354][T11100] EXT4-fs: Ignoring removed bh option [ 143.606170][T11100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.635506][T10595] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.667743][T11111] netlink: 'syz.9.2643': attribute type 3 has an invalid length. [ 143.880926][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2649'. [ 143.931752][T11156] serio: Serial port ptm0 [ 143.979012][T11166] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2655'. [ 144.049741][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.056982][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.067293][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 144.139002][T11166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.148673][T11166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.185002][T11177] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 144.228279][ T3855] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.244860][ T3855] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.253952][ T3817] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.275085][ T3817] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.303083][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2667'. [ 144.331185][T11207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11207 comm=syz.8.2672 [ 144.359849][T11210] IPv6: Can't replace route, no match found [ 144.455185][T11212] SELinux: ebitmap start bit (1633759333) is not a multiple of the map unit size (64) [ 144.478705][T11212] SELinux: failed to load policy [ 144.721472][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 144.830366][ T3361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3361 comm=kworker/0:2 [ 144.935851][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 145.009106][T11289] SELinux: ebitmap: truncated map [ 145.025440][T11289] SELinux: failed to load policy [ 145.331666][T11325] loop9: detected capacity change from 0 to 256 [ 145.353002][T11325] FAT-fs (loop9): IO charset iso8859-2 not found [ 145.454253][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 145.454267][ T29] audit: type=1400 audit(1755422716.845:4982): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.484920][ T29] audit: type=1400 audit(1755422716.845:4983): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.565596][ T29] audit: type=1400 audit(1755422716.905:4984): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.591388][ T29] audit: type=1400 audit(1755422716.915:4985): avc: denied { create } for pid=11338 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.610999][ T29] audit: type=1400 audit(1755422716.915:4986): avc: denied { setopt } for pid=11338 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.630694][ T29] audit: type=1400 audit(1755422716.925:4987): avc: denied { open } for pid=11340 comm="syz.8.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.650084][ T29] audit: type=1400 audit(1755422716.925:4988): avc: denied { perfmon } for pid=11340 comm="syz.8.2734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.671199][ T29] audit: type=1400 audit(1755422716.925:4989): avc: denied { kernel } for pid=11340 comm="syz.8.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.690723][ T29] audit: type=1400 audit(1755422716.925:4990): avc: denied { bind } for pid=11338 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.710181][ T29] audit: type=1400 audit(1755422716.935:4991): avc: denied { prog_load } for pid=11340 comm="syz.8.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.079280][T11358] loop8: detected capacity change from 0 to 2048 [ 146.119841][T11358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.205903][T11375] EXT4-fs (loop8): shut down requested (1) [ 146.254744][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.280673][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2748'. [ 146.294070][T11382] IPv6: Can't replace route, no match found [ 146.301085][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 146.766134][T11388] geneve2: entered promiscuous mode [ 146.772568][ T3828] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.786592][ T3828] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.795642][ T3828] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.812719][ T3828] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.905504][ T3818] nci: nci_ntf_packet: unknown ntf opcode 0x406 [ 147.156550][T11414] netlink: 'syz.6.2760': attribute type 1 has an invalid length. [ 147.265793][T11422] SELinux: failed to load policy [ 147.316454][T11430] loop1: detected capacity change from 0 to 128 [ 147.352135][T11430] syz.1.2778: attempt to access beyond end of device [ 147.352135][T11430] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 147.426261][T11439] netlink: 'syz.6.2771': attribute type 1 has an invalid length. [ 147.440338][T11439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.457061][T11439] bond1 (unregistering): Released all slaves [ 147.649854][T11457] wireguard0: entered promiscuous mode [ 147.655508][T11457] wireguard0: entered allmulticast mode [ 147.690715][T11462] __nla_validate_parse: 2 callbacks suppressed [ 147.690732][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2781'. [ 147.797730][T11471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'. [ 147.885149][T11480] veth0: entered promiscuous mode [ 147.901848][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 147.904713][T11484] loop5: detected capacity change from 0 to 256 [ 147.919651][T11480] veth0 (unregistering): left promiscuous mode [ 147.936748][T11484] FAT-fs (loop5): IO charset iso8859-2 not found [ 147.997233][T11492] loop6: detected capacity change from 0 to 128 [ 148.005641][T11490] loop9: detected capacity change from 0 to 512 [ 148.015434][T11492] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 148.023416][T11492] FAT-fs (loop6): Filesystem has been set read-only [ 148.032241][T11492] ¬í: attempt to access beyond end of device [ 148.032241][T11492] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 148.081780][T11490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.086366][T11492] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 148.102444][T11492] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 148.110403][T11490] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.111115][T11495] syz.6.2791: attempt to access beyond end of device [ 148.111115][T11495] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 148.134117][T11495] buffer_io_error: 4298 callbacks suppressed [ 148.134135][T11495] Buffer I/O error on dev loop6, logical block 2065, async page read [ 148.153949][T11495] syz.6.2791: attempt to access beyond end of device [ 148.153949][T11495] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 148.167690][T11495] Buffer I/O error on dev loop6, logical block 2066, async page read [ 148.175858][T11495] syz.6.2791: attempt to access beyond end of device [ 148.175858][T11495] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 148.189113][T11495] Buffer I/O error on dev loop6, logical block 2067, async page read [ 148.197320][T11495] syz.6.2791: attempt to access beyond end of device [ 148.197320][T11495] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 148.210656][T11495] Buffer I/O error on dev loop6, logical block 2068, async page read [ 148.218877][T11495] syz.6.2791: attempt to access beyond end of device [ 148.218877][T11495] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 148.232249][T11495] Buffer I/O error on dev loop6, logical block 2069, async page read [ 148.240468][T11495] syz.6.2791: attempt to access beyond end of device [ 148.240468][T11495] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 148.254184][T11495] Buffer I/O error on dev loop6, logical block 2070, async page read [ 148.262414][T11495] syz.6.2791: attempt to access beyond end of device [ 148.262414][T11495] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 148.275732][T11495] Buffer I/O error on dev loop6, logical block 2071, async page read [ 148.283904][T11495] syz.6.2791: attempt to access beyond end of device [ 148.283904][T11495] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 148.297191][T11495] Buffer I/O error on dev loop6, logical block 2072, async page read [ 148.305448][T11492] Buffer I/O error on dev loop6, logical block 2065, async page read [ 148.313719][T11492] Buffer I/O error on dev loop6, logical block 2066, async page read [ 148.373156][T10595] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.442883][T11510] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2799'. [ 148.506747][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2800'. [ 148.721317][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2805'. [ 148.933315][T11543] loop6: detected capacity change from 0 to 512 [ 148.947429][T11543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.960370][T11543] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.014615][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.079345][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 149.565269][T11563] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 149.591716][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 149.606853][T11566] team1: entered promiscuous mode [ 149.611952][T11566] team1: entered allmulticast mode [ 149.684174][T11574] siw: device registration error -23 [ 149.797897][T11582] geneve2: entered promiscuous mode [ 149.812154][ T3817] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.831836][ T3817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.861038][ T3817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.871345][ T3817] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.899491][T11586] loop9: detected capacity change from 0 to 128 [ 150.424294][T11614] loop8: detected capacity change from 0 to 512 [ 150.436066][T11614] EXT4-fs: Ignoring removed bh option [ 150.449339][T11614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.457854][T11614] EXT4-fs (loop8): fragment/cluster size (4096) != block size (2048) [ 150.688393][T11620] loop5: detected capacity change from 0 to 128 [ 150.729021][T11622] veth0: entered promiscuous mode [ 150.739352][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2838'. [ 150.864674][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 150.864693][ T29] audit: type=1326 audit(1755422722.255:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 150.895010][ T29] audit: type=1326 audit(1755422722.255:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 150.918563][ T29] audit: type=1326 audit(1755422722.255:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 150.942041][ T29] audit: type=1326 audit(1755422722.255:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 150.965576][ T29] audit: type=1326 audit(1755422722.255:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 150.989140][ T29] audit: type=1326 audit(1755422722.255:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f613714a5 code=0x7ffc0000 [ 151.017421][ T29] audit: type=1326 audit(1755422722.265:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 151.042673][ T29] audit: type=1326 audit(1755422722.435:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 151.079323][ T29] audit: type=1326 audit(1755422722.435:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 151.102940][ T29] audit: type=1326 audit(1755422722.435:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6133ebe9 code=0x7ffc0000 [ 151.132306][T11642] loop8: detected capacity change from 0 to 512 [ 151.139414][T11642] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 151.140417][T11643] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2846'. [ 151.151621][T11642] EXT4-fs (loop8): 1 truncate cleaned up [ 151.164916][T11642] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.347302][ T7182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.498673][T11681] 9pnet_fd: Insufficient options for proto=fd [ 151.950732][T11698] netlink: 'syz.5.2875': attribute type 1 has an invalid length. [ 151.968074][T11704] loop6: detected capacity change from 0 to 512 [ 151.986189][T11704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.992377][T11698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.013237][T11704] EXT4-fs (loop6): 1 truncate cleaned up [ 152.014047][T11708] bond1 (unregistering): Released all slaves [ 152.019478][T11704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.080583][ T3416] Process accounting resumed [ 152.285078][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.312711][T11729] pim6reg1: entered promiscuous mode [ 152.318071][T11729] pim6reg1: entered allmulticast mode [ 153.143335][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.162747][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.326263][T11768] netlink: 'syz.8.2900': attribute type 39 has an invalid length. [ 153.530703][T11772] 9pnet: p9_errstr2errno: server reported unknown error [ 153.722177][T11783] __nla_validate_parse: 4 callbacks suppressed [ 153.728452][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 153.758592][T11786] loop6: detected capacity change from 0 to 128 [ 153.797684][T11786] bio_check_eod: 35994 callbacks suppressed [ 153.797702][T11786] syz.6.2909: attempt to access beyond end of device [ 153.797702][T11786] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 153.892247][T11796] loop5: detected capacity change from 0 to 128 [ 153.921340][T11796] ================================================================== [ 153.929470][T11796] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 153.936867][T11796] [ 153.939190][T11796] read-write to 0xffff888119ea0fe0 of 8 bytes by interrupt on cpu 1: [ 153.947261][T11796] __xa_clear_mark+0xf5/0x1e0 [ 153.951978][T11796] __folio_end_writeback+0x177/0x470 [ 153.957288][T11796] folio_end_writeback+0x71/0x3d0 [ 153.962330][T11796] mpage_write_end_io+0x274/0x390 [ 153.967369][T11796] bio_endio+0x374/0x410 [ 153.971613][T11796] blk_update_request+0x336/0x730 [ 153.976652][T11796] blk_mq_end_request+0x26/0x50 [ 153.981521][T11796] lo_complete_rq+0x98/0x140 [ 153.986133][T11796] blk_done_softirq+0x74/0xb0 [ 153.990823][T11796] handle_softirqs+0xba/0x290 [ 153.995595][T11796] run_ksoftirqd+0x1c/0x30 [ 154.000107][T11796] smpboot_thread_fn+0x32b/0x530 [ 154.005069][T11796] kthread+0x489/0x510 [ 154.009150][T11796] ret_from_fork+0xda/0x150 [ 154.013672][T11796] ret_from_fork_asm+0x1a/0x30 [ 154.018463][T11796] [ 154.020817][T11796] read to 0xffff888119ea0fe0 of 8 bytes by task 11796 on cpu 0: [ 154.028458][T11796] xas_find_marked+0x218/0x620 [ 154.033246][T11796] find_get_entry+0x5d/0x380 [ 154.037860][T11796] filemap_get_folios_tag+0x13b/0x210 [ 154.043238][T11796] filemap_write_and_wait_range+0x1d3/0x340 [ 154.049158][T11796] generic_file_read_iter+0x101/0x330 [ 154.054664][T11796] aio_read+0x1da/0x2e0 [ 154.058842][T11796] io_submit_one+0xab2/0x11d0 [ 154.063541][T11796] __se_sys_io_submit+0xfb/0x280 [ 154.068577][T11796] __x64_sys_io_submit+0x43/0x50 [ 154.073533][T11796] x64_sys_call+0x2d5d/0x2ff0 [ 154.078245][T11796] do_syscall_64+0xd2/0x200 [ 154.082803][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.088697][T11796] [ 154.091032][T11796] value changed: 0xfffffff000000000 -> 0xfffe000000000000 [ 154.098140][T11796] [ 154.100460][T11796] Reported by Kernel Concurrency Sanitizer on: [ 154.106619][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.5.2912 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 154.119128][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.129186][T11796] ================================================================== [ 154.145308][T11796] syz.5.2912: attempt to access beyond end of device [ 154.145308][T11796] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 154.149244][T11797] hub 6-0:1.0: USB hub found [ 154.165229][T11797] hub 6-0:1.0: 8 ports detected