last executing test programs: 3m4.38109081s ago: executing program 32 (id=214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 2m58.680881321s ago: executing program 33 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10) fsync(0xffffffffffffffff) 2m58.32059312s ago: executing program 34 (id=401): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ptrace(0x10, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m23.367850699s ago: executing program 35 (id=1559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xb0783914ddc2892c, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.030883921s ago: executing program 36 (id=2128): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x400004, 0x0, 0x0, 0x3dd}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) close_range(r1, 0xffffffffffffffff, 0x0) 2m6.007675239s ago: executing program 37 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 2m5.303267198s ago: executing program 1 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m5.193709648s ago: executing program 1 (id=2188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) 2m5.156787088s ago: executing program 1 (id=2189): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000580)='fib_table_lookup\x00', r1, 0x0, 0xfffffffffffffff7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2m5.118782368s ago: executing program 1 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(0x0, 0xb) 2m4.956153188s ago: executing program 1 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd70000000200011"], 0x28}}, 0x0) 2m4.699146107s ago: executing program 1 (id=2202): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 2m4.691923147s ago: executing program 38 (id=2202): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 1m31.157346409s ago: executing program 8 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @local, 0x10, 0x7, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1m31.071542528s ago: executing program 8 (id=3317): socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m30.948233299s ago: executing program 8 (id=3318): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m30.859736879s ago: executing program 8 (id=3319): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m30.784873559s ago: executing program 8 (id=3320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r2, 0x0, 0x2) 1m30.746718348s ago: executing program 8 (id=3322): socket(0x8, 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m30.742009969s ago: executing program 39 (id=3322): socket(0x8, 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 57.455873261s ago: executing program 3 (id=4406): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe) 57.401939261s ago: executing program 3 (id=4407): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001180)={0x0, 0xfffffffffffffffb, 0x0, [0x0, 0xffffffffffffff80, 0x8000000000000001, 0xd], [0xb, 0x1a14, 0x9, 0x9, 0x1, 0x100000000, 0x1, 0x7, 0x3, 0x9, 0xbf, 0x401, 0x2, 0x100, 0xe, 0x7, 0x2, 0x800, 0x729, 0x0, 0x9, 0x0, 0xc, 0x7, 0xd, 0xffffffffffffffff, 0x6, 0xffff, 0x6, 0x800, 0x9, 0x5, 0xa5, 0x1bf0, 0x97e, 0x7, 0x0, 0x6, 0x7c, 0x216b4e6a, 0x0, 0x6, 0x100000000, 0x6, 0x8, 0xfffffffffffffffa, 0x3, 0x7, 0x4, 0x0, 0x7, 0x0, 0x4, 0x150, 0xff1, 0x2, 0x6b, 0x6, 0x4, 0x2, 0x9, 0x6, 0x4, 0x7, 0x7, 0x2, 0x6, 0x7, 0x85c0, 0x6, 0x7fffffffffffffff, 0x3, 0x2, 0xfffffffffffffffb, 0x800, 0x8, 0x9, 0x10, 0xc61, 0x5, 0xffffffffffffff00, 0x6, 0x3, 0x100, 0x80000000, 0xd1de, 0x3, 0x5, 0x5, 0x1, 0x6b1f, 0xffffffffffff5ea5, 0x8, 0x1, 0xbd44, 0x5, 0xb, 0x52b4, 0x6, 0x31e9, 0x2, 0x4, 0x200, 0xc37, 0x9, 0x100000001, 0x7ff, 0x8001, 0x9, 0x81, 0xc9f, 0xd26b, 0x7fffffff, 0x9, 0x9, 0x5, 0x40, 0xb, 0x4, 0x7ff, 0x8]}) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/69, 0x3b}, 0x4}, {{&(0x7f0000000e40)=@rc={0x1f, @none}, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/181}, {&(0x7f0000000700)=""/157}, {&(0x7f00000008c0)=""/203}, {&(0x7f00000010c0)=""/167}, {&(0x7f0000000bc0)=""/165}, {&(0x7f0000000c80)=""/249}, {&(0x7f0000000d80)=""/182}, {&(0x7f0000000600)=""/33}], 0x0, &(0x7f0000001000)=""/176}, 0x8}], 0x35, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 57.286872801s ago: executing program 3 (id=4408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.12866504s ago: executing program 3 (id=4413): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 57.064368211s ago: executing program 3 (id=4417): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 56.798891601s ago: executing program 3 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) 56.76504877s ago: executing program 40 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) 40.170253492s ago: executing program 4 (id=4969): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) 40.088910121s ago: executing program 4 (id=4974): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000006c0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@debug}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGflE7hw4Xu4cy+48Q0EH8Cdgwwcubm3SWzTtGlNK53fb9PDOd93z3dyTtvVPfn8teHB/cejh0+//j1arSxqvejFsyw6UYsj3wYAcJM8Syn+TKX1Muu1TdUEAGzWwv//xikh2ye73t50WQDABn340cfv393f3/sgz1sRw+/G/SzKn+X43YfxKAbxIG5HO55HpJmy/e57+3tRzwuduDWcjPtF5vCzX+ehMc3vRjs6y/O7eWkhfzLuN+LliCyLeNQrCrkT7XjlRH4xvndnSX70m/FGq1pkMf9utOO3L+JxDOJ+FLnz+b/p5vk76fu/vvqkCC7ys8m4vz2Nm0tbV703AAAAAAAAAAAAAAAAAAAAAADcXLv5TCduDYuu6v6drefT8d1/jU/v16lNx8v8LKI5bRy7H2iS4sej+3Vu53mesjJ+fr9PPV6tR/3aFg4AAAAAAAAAAAAAAAAAAAD/I6MnXx7cGwweHP4njeol/9lr/Rd9Tm+h5/VYHby91lyxVYUXtR6P6f7y6XDWUyziIsWPG3nEqpobJ3peKuo5+8l/p5RSlkVcbpsa55nrjMbO6pjiA/75h503D+5lZ32GraON+2lxqBmHoyfH9jSydSpMax2/5oqYZnVizvWcnUv+Er31RzlZ1ZOtsYpG1YjTjl9rrfN8dX+DAAAAAAAAAAAAAAAAAACA0vyl3yWDT1em1jZWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsfn3/6/RmFTJy2NSSpNZTzMOR9e8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4A/wQAAP//+YxnlA==") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x20f, 0x778}}}}}, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 40.003427741s ago: executing program 4 (id=4977): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r1 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'veth0_vlan\x00', 0x4a}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', r0, 0x2f, 0x45, 0xa, 0x8, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7800, 0x0, 0xd}}) 39.858273811s ago: executing program 4 (id=4984): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x2000410, &(0x7f0000000140), 0x1, 0x7b1, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 39.686786461s ago: executing program 4 (id=4991): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 37.932821971s ago: executing program 4 (id=5009): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) open(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 37.93267164s ago: executing program 41 (id=5009): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) open(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 29.231048906s ago: executing program 6 (id=5375): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.230626026s ago: executing program 6 (id=5376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xbfd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x60, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x3, 0x4}, {0x4, 0x2, 0xf, 0xffffffb5}}}]}, @TCA_EMATCH_TREE_HDR={0x7, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x100000000000000}, 0x20040054) 29.104326566s ago: executing program 6 (id=5380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) mq_unlink(&(0x7f0000000000)='eth0\x00') 29.102611156s ago: executing program 6 (id=5382): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x300001a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1023, @ANYRES16, @ANYRESOCT, @ANYBLOB="bb959014fe42bd878edddb9788f4cec96dd69d130caf3587695510e2e5987ce4e8cbaff59efc3d3c58c0c3439984819fc27464bed0d18293eda9357efd79ab67bf796f5164692cf674a118050b7e8ff6eb204c5edb96fbd5ceda7b64ad7d0fea8dc14cc2c51d75c9d7f9da697eb093587e71b198fa9138a6df88de934750de851b955b1bdc4ab72d5ef6bd1f12dee6476705b678d54b3a090958e506f98abb503521dd4c874d61017a6ec5a772fa084b992fc638e44ebe8261b74243d71c88146ffffeb84b108e736f"], 0xd, 0x2a0, &(0x7f0000000840)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x15, "ef359f413bb90152f7d6d1ceed29c3ee5e0200000000000000c2aac63a01000000000000004faa2ad9c084a003ea000000000000b60000000000000000007e00", "036c475263bdbcef549ba197fce4000000000000000400002a00ffffffff89ffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x201, 0xb1) 28.955785296s ago: executing program 6 (id=5387): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 28.581908525s ago: executing program 6 (id=5398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) 28.581397886s ago: executing program 42 (id=5398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) 1.431080811s ago: executing program 9 (id=6327): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000380)='stack\x00') pread64(r2, &(0x7f0000001580)=""/4101, 0x1005, 0xa) 1.376486261s ago: executing program 0 (id=6331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.345618261s ago: executing program 0 (id=6334): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") unlink(&(0x7f0000000180)='./file1\x00') 1.225045231s ago: executing program 0 (id=6336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r1 = syz_open_pts(r0, 0x8000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 1.04295629s ago: executing program 9 (id=6344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r2 = syz_io_uring_setup(0x24fd, &(0x7f00000003c0)={0x0, 0x20, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r2, 0x1d2d, 0x0, 0x0, 0x0, 0x0) 1.008263341s ago: executing program 9 (id=6347): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x810) 823.10283ms ago: executing program 9 (id=6353): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 811.693ms ago: executing program 9 (id=6355): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x10, 0x20000000, 0x20004, 0xc, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 790.344121ms ago: executing program 9 (id=6356): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x277, &(0x7f0000000200)={0x0, 0xebc2, 0x10100, 0x2, 0x25e}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x677c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2ac}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x3701, 0x0, 0x0, 0x0, 0x0) 430.19585ms ago: executing program 5 (id=6379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) 420.159191ms ago: executing program 2 (id=6380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 371.49741ms ago: executing program 2 (id=6381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000001c0), 0x4) 336.31641ms ago: executing program 7 (id=6382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 313.56478ms ago: executing program 5 (id=6383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x14) syz_emit_ethernet(0xdc0, &(0x7f00000001c0)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 311.74252ms ago: executing program 0 (id=6384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r0, 0x0}]) 292.72372ms ago: executing program 5 (id=6385): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 275.19878ms ago: executing program 2 (id=6386): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) close(r0) 253.76989ms ago: executing program 7 (id=6387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x9}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 198.9891ms ago: executing program 0 (id=6388): syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000040)='./bus\x00', 0x176) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x1000) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r0, &(0x7f0000000000)="96", 0x1, 0x4, 0x0, 0x0, r0}]) 198.83037ms ago: executing program 2 (id=6389): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0xc}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 198.64766ms ago: executing program 7 (id=6390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 198.51723ms ago: executing program 5 (id=6391): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1907000004000000080000000800000000000000", @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a"], 0x58}}, 0x0) 157.88134ms ago: executing program 2 (id=6392): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 156.71531ms ago: executing program 7 (id=6393): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 119.71818ms ago: executing program 7 (id=6394): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 74.87923ms ago: executing program 5 (id=6395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 71.17337ms ago: executing program 2 (id=6396): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x2, 0x7, 0x0, 0x0) 8.68405ms ago: executing program 5 (id=6398): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x10, 0x20000000, 0x20004, 0xc, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 0s ago: executing program 7 (id=6399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): T4-fs: dax option not supported [ 183.241355][T15170] lo speed is unknown, defaulting to 1000 [ 183.721491][T15194] loop4: detected capacity change from 0 to 512 [ 183.749487][T15194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.763991][T15194] ext4 filesystem being mounted at /580/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.789412][T15194] Process accounting resumed [ 183.795557][T15194] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 183.820486][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.907132][T15207] loop9: detected capacity change from 0 to 512 [ 183.930267][T15207] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.951884][T15207] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.009882][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.078994][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4888'. [ 184.083609][T15237] syz.2.4889[15237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.088361][T15237] syz.2.4889[15237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.089182][T15235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.102751][T15237] syz.2.4889[15237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.218469][T15255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.241266][T15255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.781838][T15278] loop7: detected capacity change from 0 to 512 [ 184.783599][T15274] ALSA: seq fatal error: cannot create timer (-22) [ 184.796092][T15277] netlink: 'syz.9.4911': attribute type 1 has an invalid length. [ 184.806423][T15278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.821025][T15276] hub 2-0:1.0: USB hub found [ 184.826844][T15276] hub 2-0:1.0: 8 ports detected [ 184.848799][T15278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.864079][T15278] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.881824][T15278] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 184.936546][T15291] loop2: detected capacity change from 0 to 256 [ 184.988293][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.188461][T15329] loop7: detected capacity change from 0 to 164 [ 185.204206][T15329] syz.7.4936: attempt to access beyond end of device [ 185.204206][T15329] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 185.218925][T15329] syz.7.4936: attempt to access beyond end of device [ 185.218925][T15329] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 185.283615][T15341] atomic_op ffff888116a0dd28 conn xmit_atomic 0000000000000000 [ 185.312924][T15343] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4931'. [ 185.463883][T15356] loop4: detected capacity change from 0 to 164 [ 185.471293][T15356] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 185.481922][T15356] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 185.628224][T15371] syz.0.4945[15371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.773867][T15382] loop4: detected capacity change from 0 to 512 [ 185.808632][T15382] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.861478][T15390] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 185.950174][T15400] loop2: detected capacity change from 0 to 512 [ 185.957870][T15400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.993023][T15400] EXT4-fs (loop2): 1 truncate cleaned up [ 186.112566][T15417] loop9: detected capacity change from 0 to 128 [ 186.137239][T15422] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 186.148888][T15420] loop7: detected capacity change from 0 to 512 [ 186.188142][T15426] netlink: 133492 bytes leftover after parsing attributes in process `syz.4.4967'. [ 186.196954][T15420] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.319673][T15441] loop0: detected capacity change from 0 to 512 [ 186.329726][T15441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.340390][T15445] loop4: detected capacity change from 0 to 256 [ 186.346891][T15441] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.361482][T15441] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 186.409436][T15449] loop7: detected capacity change from 0 to 256 [ 186.416471][T15449] FAT-fs (loop7): bogus number of FAT sectors [ 186.422601][T15449] FAT-fs (loop7): Can't find a valid FAT filesystem [ 186.564025][T15475] loop4: detected capacity change from 0 to 2048 [ 186.625261][T15475] loop4: detected capacity change from 2048 to 0 [ 186.637557][T15475] syz.4.4984: attempt to access beyond end of device [ 186.637557][T15475] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 186.657341][T15475] EXT4-fs error (device loop4): __ext4_find_entry:1641: inode #2: comm syz.4.4984: reading directory lblock 0 [ 186.669350][T15475] syz.4.4984: attempt to access beyond end of device [ 186.669350][T15475] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 186.680718][T15488] loop9: detected capacity change from 0 to 164 [ 186.682656][T15475] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 186.697600][T15475] EXT4-fs (loop4): I/O error while writing superblock [ 186.716849][ T8719] syz-executor: attempt to access beyond end of device [ 186.716849][ T8719] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 186.734020][T15490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4990'. [ 186.747886][T15488] syz.9.4987: attempt to access beyond end of device [ 186.747886][T15488] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 186.761874][T15488] syz.9.4987: attempt to access beyond end of device [ 186.761874][T15488] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 186.785950][ T8719] syz-executor: attempt to access beyond end of device [ 186.785950][ T8719] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 186.799420][ T8719] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 186.808373][ T8719] EXT4-fs (loop4): I/O error while writing superblock [ 186.815386][T15480] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 187.021511][T15505] loop2: detected capacity change from 0 to 512 [ 187.294091][T15492] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.301322][T15492] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.545029][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 187.545129][ T29] audit: type=1400 audit(2000000093.480:7191): avc: denied { setopt } for pid=15519 comm="syz.9.5002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 187.629783][ T29] audit: type=1400 audit(2000000093.570:7192): avc: denied { ioctl } for pid=15521 comm="syz.9.5003" path="socket:[46241]" dev="sockfs" ino=46241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.662734][T15526] loop2: detected capacity change from 0 to 512 [ 187.676897][T15526] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.690693][T15492] bridge_slave_0: left allmulticast mode [ 187.691587][T15526] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 187.696446][T15492] bridge_slave_0: left promiscuous mode [ 187.713304][T15526] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 187.716866][T15492] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.726562][T15526] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.5005: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 187.751497][T15526] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.5005: couldn't read orphan inode 13 (err -117) [ 187.794703][T15526] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 187.804736][T15526] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 187.826270][T15492] bridge_slave_1: left allmulticast mode [ 187.832019][T15492] bridge_slave_1: left promiscuous mode [ 187.837772][T15492] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.865962][T15492] bond0: (slave bond_slave_0): Releasing backup interface [ 187.885218][T15492] bond0: (slave bond_slave_1): Releasing backup interface [ 187.918022][T15492] team0: Port device team_slave_0 removed [ 187.948082][T15492] team0: Port device team_slave_1 removed [ 187.967509][T15492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.040646][T15492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.059961][T15492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.087029][T15492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.278031][T15492] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.287033][T15492] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.296040][T15492] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.304936][T15492] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.481750][T15547] loop7: detected capacity change from 0 to 512 [ 188.491829][T15547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.507996][T15522] bridge0: port 3(vlan0) entered blocking state [ 188.514338][T15522] bridge0: port 3(vlan0) entered disabled state [ 188.514368][ T29] audit: type=1400 audit(2000000094.450:7193): avc: denied { mounton } for pid=15548 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 188.522344][T15522] vlan0: entered allmulticast mode [ 188.552344][T15547] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.563153][T15522] vlan0: left allmulticast mode [ 188.571247][T15547] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 188.635586][ T29] audit: type=1326 audit(2000000094.580:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.9.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 188.668322][ T29] audit: type=1326 audit(2000000094.580:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.9.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 188.680191][T15548] lo speed is unknown, defaulting to 1000 [ 188.691948][ T29] audit: type=1326 audit(2000000094.580:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.9.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 188.721250][ T29] audit: type=1326 audit(2000000094.580:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.9.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 188.745044][ T29] audit: type=1326 audit(2000000094.600:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.9.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 188.804783][T15548] chnl_net:caif_netlink_parms(): no params data found [ 188.848096][ T29] audit: type=1400 audit(2000000094.790:7199): avc: denied { connect } for pid=15576 comm="syz.7.5019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.918087][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.925368][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.932657][T15548] bridge_slave_0: entered allmulticast mode [ 188.939351][T15548] bridge_slave_0: entered promiscuous mode [ 188.946765][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.953899][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.961264][T15548] bridge_slave_1: entered allmulticast mode [ 188.967928][T15548] bridge_slave_1: entered promiscuous mode [ 188.986400][ T29] audit: type=1400 audit(2000000094.920:7200): avc: denied { cpu } for pid=15583 comm="syz.7.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.010163][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.021095][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.055967][T15596] bpf_get_probe_write_proto: 5 callbacks suppressed [ 189.055988][T15596] syz.7.5026[15596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.062714][T15596] syz.7.5026[15596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.079493][T15596] syz.7.5026[15596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.099014][T15548] team0: Port device team_slave_0 added [ 189.133088][T15548] team0: Port device team_slave_1 added [ 189.175792][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.182758][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.208897][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.220282][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.227286][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.253302][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.301143][T15548] hsr_slave_0: entered promiscuous mode [ 189.311928][T15548] hsr_slave_1: entered promiscuous mode [ 189.335381][T15548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.344672][T15548] Cannot create hsr debugfs directory [ 189.451597][T15627] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 189.497489][T15634] syz.0.5045[15634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.497563][T15634] syz.0.5045[15634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.513011][T15634] syz.0.5045[15634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.587751][T15548] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.638844][T15648] loop9: detected capacity change from 0 to 512 [ 189.654040][T15648] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.5051: casefold flag without casefold feature [ 189.668461][T15648] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5051: couldn't read orphan inode 15 (err -117) [ 189.690591][T15548] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.747832][T15548] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.811991][T15548] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.887710][T15548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.898873][T15671] SELinux: syz.9.5061 (15671) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 189.900458][T15548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.930756][T15548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.955596][T15548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.981531][T15675] loop9: detected capacity change from 0 to 512 [ 190.000608][T15675] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.024503][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.037910][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.056924][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.064068][ T3397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.078318][ T3397] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.085425][ T3397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.102294][T15548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.112832][T15548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.166271][T15695] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.203638][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.306428][T15716] loop2: detected capacity change from 0 to 164 [ 190.335390][T15716] bio_check_eod: 1 callbacks suppressed [ 190.335404][T15716] syz.2.5076: attempt to access beyond end of device [ 190.335404][T15716] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 190.367836][T15716] syz.2.5076: attempt to access beyond end of device [ 190.367836][T15716] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 190.414833][T15548] veth0_vlan: entered promiscuous mode [ 190.424042][T15548] veth1_vlan: entered promiscuous mode [ 190.447772][T15548] veth0_macvtap: entered promiscuous mode [ 190.462848][T15548] veth1_macvtap: entered promiscuous mode [ 190.469889][T15731] syz.2.5079: attempt to access beyond end of device [ 190.469889][T15731] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.491794][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.502315][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.512219][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.522877][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.532842][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.543396][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.553267][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.563789][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.574786][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.585379][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.595943][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.605878][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.616412][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.626273][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.637085][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.646969][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.657554][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.668334][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.682655][T15548] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.691581][T15548] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.700360][T15548] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.709174][T15548] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.813086][T15756] loop7: detected capacity change from 0 to 164 [ 190.834952][T15756] syz.7.5089: attempt to access beyond end of device [ 190.834952][T15756] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 190.855332][T15756] syz.7.5089: attempt to access beyond end of device [ 190.855332][T15756] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 190.898128][T15767] syz.0.5094[15767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.898240][T15767] syz.0.5094[15767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.905742][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.910273][T15767] syz.0.5094[15767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.921475][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.947877][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.955532][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.962846][ T3377] rtc rtc0: __rtc_set_alarm: err=-22 [ 191.062541][T15778] netlink: 'syz.6.5100': attribute type 1 has an invalid length. [ 191.070471][T15778] netlink: 'syz.6.5100': attribute type 4 has an invalid length. [ 191.078297][T15778] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.5100'. [ 191.154618][T15788] syz.6.5104[15788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.200463][T15790] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5105'. [ 191.468298][T15805] loop0: detected capacity change from 0 to 512 [ 191.530222][T15805] ext4 filesystem being mounted at /633/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.619728][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5117'. [ 191.628806][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5117'. [ 191.933857][T15843] ref_ctr_offset mismatch. inode: 0xba8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 192.121628][T15861] loop6: detected capacity change from 0 to 164 [ 192.184255][T15871] loop6: detected capacity change from 0 to 164 [ 192.201337][T15871] syz.6.5140: attempt to access beyond end of device [ 192.201337][T15871] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 192.215733][T15871] syz.6.5140: attempt to access beyond end of device [ 192.215733][T15871] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 192.253583][T15875] loop6: detected capacity change from 0 to 512 [ 192.260402][T15875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 192.271846][T15875] EXT4-fs (loop6): 1 truncate cleaned up [ 192.278192][T15875] EXT4-fs mount: 20 callbacks suppressed [ 192.278204][T15875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.311035][T15548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.330183][T15878] loop6: detected capacity change from 0 to 512 [ 192.344671][T15878] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.5143: casefold flag without casefold feature [ 192.357569][T15878] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5143: couldn't read orphan inode 15 (err -117) [ 192.371270][T15878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.521512][T15548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.563305][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 192.563321][ T29] audit: type=1400 audit(2000000098.497:7388): avc: denied { relabelfrom } for pid=15894 comm="syz.0.5160" name="NETLINK" dev="sockfs" ino=48003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.601852][ T29] audit: type=1400 audit(2000000098.497:7389): avc: denied { relabelto } for pid=15894 comm="syz.0.5160" name="NETLINK" dev="sockfs" ino=48003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 192.732940][ T29] audit: type=1326 audit(2000000098.667:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 192.757742][ T29] audit: type=1400 audit(2000000098.667:7391): avc: denied { getopt } for pid=15910 comm="syz.9.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.779611][ T29] audit: type=1326 audit(2000000098.717:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 192.804138][ T29] audit: type=1326 audit(2000000098.747:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 192.827721][ T29] audit: type=1326 audit(2000000098.747:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 192.851053][T15917] loop6: detected capacity change from 0 to 128 [ 192.851258][ T29] audit: type=1326 audit(2000000098.747:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 192.900643][T15917] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.923839][T15917] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.972317][T15925] loop2: detected capacity change from 0 to 8192 [ 192.975094][ T29] audit: type=1326 audit(2000000098.857:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 193.002259][ T29] audit: type=1326 audit(2000000098.857:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 193.026268][T15918] xt_hashlimit: max too large, truncated to 1048576 [ 193.033062][T15918] No such timeout policy "syz1" [ 193.058143][T15925] loop2: p1 p2 p3 [ 193.062013][T15925] loop2: p1 size 67108864 extends beyond EOD, truncated [ 193.084729][T15925] loop2: p2 start 98631679 is beyond EOD, truncated [ 193.091526][T15925] loop2: p3 size 423702036 extends beyond EOD, truncated [ 193.116065][T15931] tipc: Started in network mode [ 193.121003][T15931] tipc: Node identity ac14140f, cluster identity 4711 [ 193.128628][T15931] tipc: New replicast peer: 255.255.255.255 [ 193.134940][T15931] tipc: Enabled bearer , priority 10 [ 193.143497][T15548] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.190884][T15938] loop9: detected capacity change from 0 to 164 [ 193.342210][T15954] SELinux: Context @ is not valid (left unmapped). [ 193.763129][T16016] tipc: Enabling of bearer rejected, already enabled [ 193.840263][T16022] loop0: detected capacity change from 0 to 512 [ 193.850703][T16022] EXT4-fs: Ignoring removed i_version option [ 193.856779][T16022] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.871291][T16022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.921569][T16023] syzkaller0: entered promiscuous mode [ 193.927123][T16023] syzkaller0: entered allmulticast mode [ 193.934238][T16022] EXT4-fs (loop0): 1 truncate cleaned up [ 193.942469][T16022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.987441][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.131444][T16040] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5217'. [ 194.245106][ T2963] tipc: Node number set to 2886997007 [ 194.279063][T16064] IPVS: Error connecting to the multicast addr [ 194.368324][T16071] syzkaller0: entered promiscuous mode [ 194.373855][T16071] syzkaller0: entered allmulticast mode [ 194.383281][T16081] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 194.389295][T16081] syzkaller0: Linktype set failed because interface is up [ 194.421948][ T2963] IPVS: starting estimator thread 0... [ 194.465125][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.472623][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.480151][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.480149][T16083] syzkaller0: entered promiscuous mode [ 194.483254][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.487575][T16083] syzkaller0: entered allmulticast mode [ 194.493035][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.513544][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.520989][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.526358][T16086] IPVS: using max 2016 ests per chain, 100800 per kthread [ 194.528436][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.542973][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.550489][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.558088][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.565532][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.572950][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.580389][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.588700][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.596152][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.603554][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.611029][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.618444][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.625934][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.633344][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.640795][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.648262][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.655711][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.663254][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.670756][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.678175][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.685694][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.693102][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.700536][T15531] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.712486][T15531] hid-generic 0000:0000:0000.000F: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 194.769294][T16106] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5247'. [ 194.810685][T16115] bpf_get_probe_write_proto: 5 callbacks suppressed [ 194.810706][T16115] syz.9.5248[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.818438][T16115] syz.9.5248[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.823076][T16113] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 194.832504][T16115] syz.9.5248[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.021396][T16140] loop9: detected capacity change from 0 to 1024 [ 195.040061][T16140] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.052275][T16140] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 195.060382][T16140] EXT4-fs (loop9): orphan cleanup on readonly fs [ 195.067382][T16140] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 195.077122][T16140] EXT4-fs (loop9): Remounting filesystem read-only [ 195.083826][T16140] EXT4-fs (loop9): 1 orphan inode deleted [ 195.090504][T16140] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.102561][T16140] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 195.109441][T16140] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.192146][T16155] vhci_hcd: default hub control req: 1f06 vfffa i0008 l0 [ 195.216148][T16157] syz.7.5269[16157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.216269][T16157] syz.7.5269[16157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.228427][T16157] syz.7.5269[16157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.274911][T16160] IPVS: Error joining to the multicast group [ 195.530701][T16201] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 195.530701][T16201] program syz.7.5290 not setting count and/or reply_len properly [ 195.695024][T16215] syz.6.5297[16215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.695089][T16215] syz.6.5297[16215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.712186][T16215] syz.6.5297[16215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.769100][T16225] netlink: 'syz.7.5302': attribute type 21 has an invalid length. [ 195.791138][T16223] syz.6.5301[16223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.848747][T16233] vlan2: entered promiscuous mode [ 195.869574][T16233] bond0: (slave vlan2): Opening slave failed [ 196.057346][T16266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16266 comm=syz.6.5322 [ 196.070023][T16266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16266 comm=syz.6.5322 [ 196.187456][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5327'. [ 196.190671][T16282] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5328'. [ 196.317502][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5333'. [ 196.432993][T16306] loop7: detected capacity change from 0 to 128 [ 196.461509][T16306] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.483242][T16306] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.544257][T16314] loop2: detected capacity change from 0 to 512 [ 196.552045][T14150] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.564761][T16314] EXT4-fs: Ignoring removed i_version option [ 196.570861][T16314] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.592419][T16314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.614691][T16314] EXT4-fs (loop2): 1 truncate cleaned up [ 196.621121][T16314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.652522][T11498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.689325][T16327] netlink: 1328 bytes leftover after parsing attributes in process `syz.7.5344'. [ 196.701487][T16328] Falling back ldisc for ttyS3. [ 196.770505][T16340] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.790256][T16343] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 196.791567][T16342] IPVS: stopping master sync thread 16343 ... [ 196.835709][T16349] loop9: detected capacity change from 0 to 512 [ 196.850125][T16349] EXT4-fs: Ignoring removed i_version option [ 196.856318][T16349] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.868623][T16349] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 196.888106][T16353] xt_HMARK: spi-set and port-set can't be combined [ 196.904699][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.912542][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.920177][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.927833][ T3377] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.935156][ T3377] rtc rtc0: __rtc_set_alarm: err=-22 [ 196.943164][T16349] EXT4-fs (loop9): 1 truncate cleaned up [ 196.949223][T16349] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.995983][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.067928][T16378] IPVS: stopping master sync thread 16379 ... [ 197.161432][T16390] loop9: detected capacity change from 0 to 8192 [ 197.207226][T16390] loop9: p1 p2 p3 [ 197.211170][T16390] loop9: p1 size 67108864 extends beyond EOD, truncated [ 197.214104][T16398] ebtables: ebtables: counters copy to user failed while replacing table [ 197.218820][T16390] loop9: p2 start 98631679 is beyond EOD, truncated [ 197.233455][T16390] loop9: p3 size 423702036 extends beyond EOD, truncated [ 197.255549][T16402] loop2: detected capacity change from 0 to 1024 [ 197.262983][T16402] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.277403][T16402] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 197.304236][T16407] loop6: detected capacity change from 0 to 256 [ 197.306617][T16402] EXT4-fs (loop2): orphan cleanup on readonly fs [ 197.320449][T16402] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 197.330893][T16402] EXT4-fs (loop2): Remounting filesystem read-only [ 197.337799][T16402] EXT4-fs (loop2): 1 orphan inode deleted [ 197.346425][T16402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.358532][T16402] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 197.365813][T16402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.395136][T16407] loop6: detected capacity change from 256 to 0 [ 197.398715][T16414] syz.6.5382: attempt to access beyond end of device [ 197.398715][T16414] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 197.417335][T16414] FAT-fs (loop6): unable to read inode block for updating (i_pos 196) [ 197.440921][T15548] syz-executor: attempt to access beyond end of device [ 197.440921][T15548] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 197.465185][T15548] FAT-fs (loop6): Directory bread(block 3) failed [ 197.484944][ T8872] kworker/u8:8: attempt to access beyond end of device [ 197.484944][ T8872] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 197.487960][T16422] loop9: detected capacity change from 0 to 128 [ 197.498164][ T8872] FAT-fs (loop6): unable to read inode block for updating (i_pos 196) [ 197.515501][T15548] syz-executor: attempt to access beyond end of device [ 197.515501][T15548] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 197.529409][T15548] FAT-fs (loop6): unable to read inode block for updating (i_pos 196) [ 197.537801][T15548] syz-executor: attempt to access beyond end of device [ 197.537801][T15548] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 197.551081][T15548] FAT-fs (loop6): unable to read inode block for updating (i_pos 196) [ 197.559562][T15548] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 197.572305][T15548] syz-executor: attempt to access beyond end of device [ 197.572305][T15548] loop6: rw=0, sector=0, nr_sectors = 4 limit=0 [ 197.585491][T15548] FAT-fs (loop6): unable to read boot sector to mark fs as dirty [ 197.602470][T16428] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 197.611663][T16422] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.639897][T16422] ext4 filesystem being mounted at /639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.728184][ T8614] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.875966][T16446] loop9: detected capacity change from 0 to 1024 [ 197.893331][T16446] EXT4-fs: Ignoring removed nobh option [ 197.900652][T16446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.929849][T16446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.952861][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 197.952876][ T29] audit: type=1400 audit(2000000103.887:7747): avc: denied { remount } for pid=16445 comm="syz.9.5401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 197.982317][T16446] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 197.995585][T16465] loop7: detected capacity change from 0 to 512 [ 198.002199][T16465] EXT4-fs: Ignoring removed i_version option [ 198.008257][T16465] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.026484][T16465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.043048][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.064141][T16465] EXT4-fs (loop7): 1 truncate cleaned up [ 198.070779][T16465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.075154][T16455] lo speed is unknown, defaulting to 1000 [ 198.127491][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.158685][ T29] audit: type=1326 audit(2000000104.097:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.195024][ T29] audit: type=1326 audit(2000000104.097:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.216932][T16455] chnl_net:caif_netlink_parms(): no params data found [ 198.218642][ T29] audit: type=1326 audit(2000000104.097:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.248715][ T29] audit: type=1326 audit(2000000104.097:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.272212][ T29] audit: type=1326 audit(2000000104.097:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.295845][ T29] audit: type=1326 audit(2000000104.097:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.319439][ T29] audit: type=1326 audit(2000000104.097:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.342983][ T29] audit: type=1326 audit(2000000104.097:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.366529][ T29] audit: type=1326 audit(2000000104.097:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16480 comm="syz.9.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96f985d29 code=0x7ffc0000 [ 198.421711][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.428923][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.437233][T16455] bridge_slave_0: entered allmulticast mode [ 198.444014][T16455] bridge_slave_0: entered promiscuous mode [ 198.451057][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.458212][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.465514][T16455] bridge_slave_1: entered allmulticast mode [ 198.472171][T16455] bridge_slave_1: entered promiscuous mode [ 198.490954][T16455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.502098][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.525622][T16455] team0: Port device team_slave_0 added [ 198.549995][T16501] loop7: detected capacity change from 0 to 512 [ 198.551009][T16503] loop9: detected capacity change from 0 to 2048 [ 198.562101][T16455] team0: Port device team_slave_1 added [ 198.571693][T16501] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.589794][T16501] EXT4-fs (loop7): 1 truncate cleaned up [ 198.596480][T16501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.596923][T16455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.615602][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.621485][T16503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.641591][T16455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.642679][T16455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.671379][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.697521][T16455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.724241][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.735319][T16503] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 198.753584][T16455] hsr_slave_0: entered promiscuous mode [ 198.761256][T16455] hsr_slave_1: entered promiscuous mode [ 198.769680][T16455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.778149][T16455] Cannot create hsr debugfs directory [ 198.778508][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.878711][T16527] Process accounting resumed [ 198.900213][T16455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.946195][T16536] loop9: detected capacity change from 0 to 512 [ 198.953499][T16536] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 198.968699][T16455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.980795][T16536] EXT4-fs (loop9): 1 truncate cleaned up [ 198.987095][T16536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.028043][T16455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.075819][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.087506][T16455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.104219][T16548] pim6reg: entered allmulticast mode [ 199.126802][T16548] pim6reg: left allmulticast mode [ 199.163515][T16455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.173446][T16455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.184937][T16455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.201014][T16562] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5445'. [ 199.228733][T16455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.251226][T16566] loop7: detected capacity change from 0 to 1024 [ 199.261222][T16566] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 199.272931][T16566] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 199.296729][T16566] EXT4-fs error (device loop7): ext4_get_journal_inode:5809: inode #32: comm syz.7.5448: iget: special inode unallocated [ 199.312991][T16455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.319821][T16566] EXT4-fs (loop7): no journal found [ 199.324948][T16455] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.325246][T16566] EXT4-fs (loop7): can't get journal size [ 199.343918][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.351007][ T9787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.360228][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.360254][T16566] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.5448: iget: special inode unallocated [ 199.360418][T16566] EXT4-fs (loop7): failed to initialize system zone (-117) [ 199.367396][ T9787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.383009][T16455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.405513][T16455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.422329][T16566] EXT4-fs (loop7): mount failed [ 199.441923][T16577] block device autoloading is deprecated and will be removed. [ 199.449553][T16577] syz.9.5452: attempt to access beyond end of device [ 199.449553][T16577] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 199.474500][T16574] syzkaller0: entered promiscuous mode [ 199.480300][T16574] syzkaller0: entered allmulticast mode [ 199.573916][T16455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.682700][T16455] veth0_vlan: entered promiscuous mode [ 199.690436][T16455] veth1_vlan: entered promiscuous mode [ 199.704965][T16455] veth0_macvtap: entered promiscuous mode [ 199.712649][T16455] veth1_macvtap: entered promiscuous mode [ 199.723037][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.733625][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.743556][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.754314][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.764188][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.774643][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.784644][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.795392][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.805331][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.815913][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.826567][T16455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.837572][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.848087][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.857985][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.868565][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.878400][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.888855][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.898756][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.909224][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.919155][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.929668][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.940383][T16455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.949598][T16455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.958473][T16455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.967421][T16455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.976139][T16455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.028279][ T8872] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.082386][T16615] loop5: detected capacity change from 0 to 512 [ 200.092528][T16615] EXT4-fs: Ignoring removed i_version option [ 200.098636][T16615] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.108891][T16615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 200.110751][T16622] loop0: detected capacity change from 0 to 2048 [ 200.122322][T16617] dccp_v6_rcv: dropped packet with invalid checksum [ 200.125415][T16622] ext3: Unknown parameter 'uid' [ 200.139260][ T8872] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.179233][T16615] EXT4-fs (loop5): 1 truncate cleaned up [ 200.185425][T16615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.210297][ T8872] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.224347][T16455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.296170][T16645] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.296199][ T8872] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.303548][T16645] vhci_hcd: invalid port number 23 [ 200.322964][T16648] netlink: 'syz.2.5473': attribute type 3 has an invalid length. [ 200.330762][T16648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5473'. [ 200.392627][ T8872] bridge_slave_1: left allmulticast mode [ 200.398519][ T8872] bridge_slave_1: left promiscuous mode [ 200.404377][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.420115][ T8872] bridge_slave_0: left allmulticast mode [ 200.425855][ T8872] bridge_slave_0: left promiscuous mode [ 200.431631][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.547300][T16678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5482'. [ 200.647601][ T8872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.663176][ T8872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.683673][ T8872] bond0 (unregistering): Released all slaves [ 200.714077][T16705] syzkaller0: entered promiscuous mode [ 200.719697][T16705] syzkaller0: entered allmulticast mode [ 200.725979][T16686] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 200.776621][ T8872] hsr_slave_0: left promiscuous mode [ 200.787870][ T8872] hsr_slave_1: left promiscuous mode [ 200.794628][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.802278][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.811215][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.818814][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.829770][ T8872] veth1_macvtap: left promiscuous mode [ 200.835399][ T8872] veth0_macvtap: left promiscuous mode [ 200.840997][ T8872] veth1_vlan: left promiscuous mode [ 200.846365][ T8872] veth0_vlan: left promiscuous mode [ 200.985449][ T8872] team0 (unregistering): Port device team_slave_1 removed [ 201.000172][ T8872] team0 (unregistering): Port device team_slave_0 removed [ 201.011166][T16736] bpf_get_probe_write_proto: 5 callbacks suppressed [ 201.011271][T16736] syz.5.5506[16736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.018630][T16736] syz.5.5506[16736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.032611][T16736] syz.5.5506[16736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.173228][T16748] syz.5.5512[16748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.201201][T16748] syz.5.5512[16748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.240253][T16748] syz.5.5512[16748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.263048][T16755] loop0: detected capacity change from 0 to 2048 [ 201.309895][T16755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.331328][T16755] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.376131][T16764] loop5: detected capacity change from 0 to 256 [ 201.386696][T16764] FAT-fs (loop5): bogus number of FAT sectors [ 201.392946][T16764] FAT-fs (loop5): Can't find a valid FAT filesystem [ 201.478591][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.608112][T16796] syz.9.5530[16796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.608267][T16796] syz.9.5530[16796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.622437][T16796] syz.9.5530[16796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.632017][T16798] loop2: detected capacity change from 0 to 512 [ 201.655150][T16801] loop7: detected capacity change from 0 to 2048 [ 201.660651][T16798] EXT4-fs: Ignoring removed i_version option [ 201.667659][T16798] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.674545][T16798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.686720][T16798] EXT4-fs (loop2): 1 truncate cleaned up [ 201.692894][T16798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.694963][T16801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.707652][T16806] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5530'. [ 201.726951][T16796] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5530'. [ 201.749784][T16801] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.766017][T16798] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #12: block 7: comm syz.2.5531: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 201.827057][T16812] ref_ctr_offset mismatch. inode: 0x70 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 201.838654][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.848923][T11498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.947508][T16833] loop5: detected capacity change from 0 to 256 [ 201.956093][T16831] syz.2.5545[16831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.062158][T16853] syz_tun: entered allmulticast mode [ 202.089742][T16852] syz_tun: left allmulticast mode [ 202.132916][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 202.142235][T16863] ALSA: seq fatal error: cannot create timer (-22) [ 202.144120][T16865] loop9: detected capacity change from 0 to 2048 [ 202.171510][T16865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.232329][ T8614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.280491][T16876] loop7: detected capacity change from 0 to 2048 [ 202.287597][T16876] ext3: Unknown parameter 'uid' [ 202.366517][T16893] loop2: detected capacity change from 0 to 2048 [ 202.410183][T16900] loop5: detected capacity change from 0 to 128 [ 202.418288][T16893] loop2: p1 < > p4 [ 202.423136][T16893] loop2: p4 size 8388608 extends beyond EOD, truncated [ 202.439845][T16904] macvlan0: entered promiscuous mode [ 202.445364][T16904] bridge0: entered promiscuous mode [ 202.458516][T16900] syz.5.5574: attempt to access beyond end of device [ 202.458516][T16900] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 202.475286][T16904] bridge0: port 1(macvlan0) entered blocking state [ 202.481910][T16904] bridge0: port 1(macvlan0) entered disabled state [ 202.489753][ T9760] kworker/u8:11: attempt to access beyond end of device [ 202.489753][ T9760] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 202.494860][T16904] macvlan0: entered allmulticast mode [ 202.508839][T16904] bridge0: entered allmulticast mode [ 202.520556][T16904] macvlan0: left allmulticast mode [ 202.525880][T16904] bridge0: left allmulticast mode [ 202.561483][T16904] bridge0: left promiscuous mode [ 202.688265][T16917] loop7: detected capacity change from 0 to 1024 [ 202.705234][T16917] EXT4-fs: Ignoring removed nobh option [ 202.738323][T16917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.911130][T16929] loop9: detected capacity change from 0 to 2048 [ 202.924902][T16907] Set syz1 is full, maxelem 65536 reached [ 202.925431][T16931] Invalid ELF header magic: != ELF [ 202.982554][T16929] loop9: p2 p3 < > p4 < p5 > [ 202.987312][T16929] loop9: partition table partially beyond EOD, truncated [ 202.990113][T16934] loop0: detected capacity change from 0 to 512 [ 203.001583][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.012721][T16929] loop9: p3 start 4284289 is beyond EOD, truncated [ 203.020533][T16934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.042953][T16934] EXT4-fs (loop0): 1 truncate cleaned up [ 203.049162][T16934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.095197][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 203.095217][ T29] audit: type=1326 audit(2000000109.017:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.125188][ T29] audit: type=1326 audit(2000000109.017:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.148820][ T29] audit: type=1326 audit(2000000109.017:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.172699][ T29] audit: type=1326 audit(2000000109.017:7906): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.196717][ T29] audit: type=1326 audit(2000000109.017:7907): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.220737][ T29] audit: type=1326 audit(2000000109.017:7908): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.244802][ T29] audit: type=1326 audit(2000000109.017:7909): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b325d5d29 code=0x7ffc0000 [ 203.269177][ T29] audit: type=1400 audit(2000000109.137:7910): avc: denied { mounton } for pid=16932 comm="syz.0.5588" path="/706/file2/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.305550][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.357692][T16952] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 203.386418][T16955] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 203.448626][T16963] serio: Serial port ptm0 [ 203.503761][T16969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5603'. [ 203.559964][ T29] audit: type=1326 audit(2000000109.497:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.0.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 203.586589][ T29] audit: type=1326 audit(2000000109.527:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.0.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93cdc75d29 code=0x7ffc0000 [ 203.751400][T16988] netlink: 'syz.2.5612': attribute type 3 has an invalid length. [ 203.793751][T16992] loop0: detected capacity change from 0 to 512 [ 203.809075][T16992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.827422][T16992] ext4 filesystem being mounted at /711/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.956957][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.978829][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5618'. [ 204.057828][T17004] loop0: detected capacity change from 0 to 512 [ 204.122944][T17004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5619: bg 0: block 248: padding at end of block bitmap is not set [ 204.147564][T17004] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.5619: Failed to acquire dquot type 1 [ 204.163173][T17004] EXT4-fs (loop0): 1 truncate cleaned up [ 204.172956][T17004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.192905][T17004] ext4 filesystem being mounted at /712/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.239079][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.251738][ T416] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1 [ 204.330405][T17027] lo speed is unknown, defaulting to 1000 [ 204.492016][T17048] bridge0: entered promiscuous mode [ 204.497791][T17048] macvlan2: entered promiscuous mode [ 204.504825][T17048] bridge0: port 3(macvlan2) entered blocking state [ 204.511467][T17048] bridge0: port 3(macvlan2) entered disabled state [ 204.519976][T17048] macvlan2: entered allmulticast mode [ 204.525645][T17048] bridge0: entered allmulticast mode [ 204.535278][T17048] macvlan2: left allmulticast mode [ 204.540419][T17048] bridge0: left allmulticast mode [ 204.562890][T17048] bridge0: left promiscuous mode [ 204.627111][T17063] netlink: 'syz.7.5643': attribute type 21 has an invalid length. [ 204.635113][T17063] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.709376][T17069] loop7: detected capacity change from 0 to 512 [ 204.716592][T17069] EXT4-fs: Ignoring removed i_version option [ 204.722656][T17069] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.726881][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5649'. [ 204.732787][T17069] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 204.751497][T17069] EXT4-fs (loop7): 1 truncate cleaned up [ 204.757582][T17069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.784479][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.797027][T17082] loop2: detected capacity change from 0 to 512 [ 204.828729][T17082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5650: bg 0: block 248: padding at end of block bitmap is not set [ 204.843907][T17082] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.5650: Failed to acquire dquot type 1 [ 204.858891][T17082] EXT4-fs (loop2): 1 truncate cleaned up [ 204.864926][T17082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.877979][T17082] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.907921][T11498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.919656][ T9787] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:38: Failed to release dquot type 1 [ 204.998447][T17100] bridge0: entered promiscuous mode [ 205.006758][T17100] macvlan2: entered promiscuous mode [ 205.015031][T17100] bridge0: port 3(macvlan2) entered blocking state [ 205.021593][T17100] bridge0: port 3(macvlan2) entered disabled state [ 205.028852][T17100] macvlan2: entered allmulticast mode [ 205.034331][T17100] bridge0: entered allmulticast mode [ 205.048537][T17100] macvlan2: left allmulticast mode [ 205.053725][T17100] bridge0: left allmulticast mode [ 205.060154][T17100] bridge0: left promiscuous mode [ 205.310187][T17128] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.318842][T17128] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 205.510028][T17146] loop7: detected capacity change from 0 to 164 [ 205.534666][T17146] syz.7.5680: attempt to access beyond end of device [ 205.534666][T17146] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 205.559958][T17146] syz.7.5680: attempt to access beyond end of device [ 205.559958][T17146] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 205.654607][T17158] loop5: detected capacity change from 0 to 2048 [ 205.694406][T17158] loop5: p1 p2 p3 [ 205.795675][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'. [ 205.808270][T17160] IPVS: Error joining to the multicast group [ 206.021733][T17156] Set syz1 is full, maxelem 65536 reached [ 206.242855][T17179] loop7: detected capacity change from 0 to 512 [ 206.282092][T17179] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5695: bg 0: block 248: padding at end of block bitmap is not set [ 206.311136][T17179] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.5695: Failed to acquire dquot type 1 [ 206.404287][T17179] EXT4-fs (loop7): 1 truncate cleaned up [ 206.417522][T17179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.434286][T17179] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.471498][T17195] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5701'. [ 206.524745][T14150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.548223][ T55] EXT4-fs error (device loop7): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 206.568833][T17203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5704'. [ 206.676580][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5711'. [ 206.938871][T17232] loop0: detected capacity change from 0 to 512 [ 206.977791][T17232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.032137][T17232] ext4 filesystem being mounted at /733/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.151408][ T8814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.299980][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.307455][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.314963][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.322498][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.329971][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.337412][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.344846][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.352301][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.359759][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.367199][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.374688][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.382122][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.389543][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.396978][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.404367][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.411826][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.419245][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.426673][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.434064][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.441609][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.449077][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.456561][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.463956][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.471516][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.479001][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.486459][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.493933][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.501435][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.508927][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.516367][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.523755][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.531235][T15542] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.553167][T15542] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 207.650261][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5726'. [ 207.659778][T17256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17256 comm=syz.0.5728 [ 207.665569][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5726'. [ 207.679508][T17256] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 207.715339][T17256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.791834][T17256] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 207.973700][T17290] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5743'. [ 208.031171][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5749'. [ 208.047812][T17301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.084205][T17303] lo speed is unknown, defaulting to 1000 [ 208.107540][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 208.107575][ T29] audit: type=1400 audit(2000000114.047:8204): avc: denied { listen } for pid=17306 comm="syz.7.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.170463][ T29] audit: type=1400 audit(2000000114.107:8205): avc: denied { ioctl } for pid=17315 comm="syz.7.5755" path="socket:[52657]" dev="sockfs" ino=52657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.223092][ T29] audit: type=1400 audit(2000000114.147:8206): avc: denied { read write } for pid=11498 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.247570][ T29] audit: type=1400 audit(2000000114.147:8207): avc: denied { open } for pid=11498 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.272035][ T29] audit: type=1400 audit(2000000114.147:8208): avc: denied { ioctl } for pid=11498 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.313210][ T29] audit: type=1400 audit(2000000114.157:8209): avc: denied { create } for pid=17319 comm="syz.2.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.333012][ T29] audit: type=1400 audit(2000000114.157:8210): avc: denied { bind } for pid=17319 comm="syz.2.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.352570][ T29] audit: type=1400 audit(2000000114.157:8211): avc: denied { name_bind } for pid=17319 comm="syz.2.5758" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 208.373579][ T29] audit: type=1400 audit(2000000114.157:8212): avc: denied { node_bind } for pid=17319 comm="syz.2.5758" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 208.394508][ T29] audit: type=1400 audit(2000000114.157:8213): avc: denied { setopt } for pid=17319 comm="syz.2.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.427763][T17326] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5760'. [ 208.451229][T17328] lo speed is unknown, defaulting to 1000 [ 208.491082][T17331] loop5: detected capacity change from 0 to 512 [ 208.502039][T17333] loop9: detected capacity change from 0 to 1024 [ 208.515025][T17333] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.531446][T17333] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 208.540275][T17333] EXT4-fs (loop9): orphan cleanup on readonly fs [ 208.549741][T17331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.562659][T17331] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.578517][T17333] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 208.624659][T17333] EXT4-fs (loop9): Remounting filesystem read-only [ 208.635566][T17333] EXT4-fs (loop9): 1 orphan inode deleted [ 208.643292][T17333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.655450][T17333] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 208.662341][T17333] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.749652][T16455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.758324][T17343] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5767'. [ 208.802544][T17347] bond5: entered promiscuous mode [ 208.807675][T17347] bond5: entered allmulticast mode [ 208.824760][T17347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.868610][T17347] bond5 (unregistering): Released all slaves [ 208.902998][T17354] loop7: detected capacity change from 0 to 8192 [ 208.973816][T17354] msdos: Unknown parameter '1844674407370955161501777777777777777777777' [ 209.107744][T17372] loop2: detected capacity change from 0 to 512 [ 209.117810][T17374] loop0: detected capacity change from 0 to 128 [ 209.151029][T17372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.205710][T17372] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.234527][T17385] vhci_hcd: default hub control req: 1f06 vfffa i0008 l0 [ 209.288717][T17389] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5785'. [ 209.322283][T17389] 0X: renamed from caif0 [ 209.333967][T17389] 0X: entered allmulticast mode [ 209.339263][T17389] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 209.350022][T17395] loop0: detected capacity change from 0 to 512 [ 209.355171][T17393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17393 comm=syz.7.5787 [ 209.375099][T17395] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.384261][T17395] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 209.393598][T11498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.410819][T17393] netlink: 'syz.7.5787': attribute type 1 has an invalid length. [ 209.431804][T17393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.519106][T17401] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 209.530602][T17405] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 209.634500][T17413] bpf_get_probe_write_proto: 11 callbacks suppressed [ 209.634519][T17413] syz.0.5796[17413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.648805][T17413] syz.0.5796[17413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.687313][T17413] syz.0.5796[17413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.743969][T17422] xt_hashlimit: size too large, truncated to 1048576 [ 209.958156][T17433] syz.5.5803[17433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.958344][T17433] syz.5.5803[17433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.974811][T17433] syz.5.5803[17433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.257489][T17446] syz.9.5809[17446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.279211][T17446] syz.9.5809[17446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.311205][T17446] syz.9.5809[17446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.510725][T17462] loop0: detected capacity change from 0 to 256 [ 210.538376][T17462] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.561638][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5817'. [ 211.068630][T17497] loop2: detected capacity change from 0 to 1024 [ 211.084045][T17497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.245897][T11498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.302676][T17509] SELinux: Context system_u:object_r:etc_runtime_t:s0 is not valid (left unmapped). [ 211.474218][T17519] netlink: 'syz.7.5840': attribute type 1 has an invalid length. [ 211.488535][T15516] IPVS: starting estimator thread 0... [ 211.575309][T17522] IPVS: using max 2544 ests per chain, 127200 per kthread [ 211.716651][T17536] loop2: detected capacity change from 0 to 2048 [ 211.768905][T17536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.815551][T17546] loop0: detected capacity change from 0 to 512 [ 211.971873][T17552] netlink: 'syz.0.5852': attribute type 13 has an invalid length. [ 212.029886][T17552] gretap0: refused to change device tx_queue_len [ 212.055845][T17552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.116560][T17555] geneve0: entered allmulticast mode [ 212.229069][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5860'. [ 212.243970][T17570] IPVS: Error joining to the multicast group [ 212.421426][T17590] netlink: 'syz.7.5869': attribute type 13 has an invalid length. [ 212.471114][T17590] gretap0: refused to change device tx_queue_len [ 212.494433][T17590] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.808990][T17624] loop0: detected capacity change from 0 to 128 [ 213.248537][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 213.248557][ T29] audit: type=1400 audit(2000000119.187:8389): avc: denied { watch_reads } for pid=17656 comm="syz.0.5900" path="/782" dev="tmpfs" ino=4073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.255143][T17661] syz_tun: entered allmulticast mode [ 213.319759][ T29] audit: type=1400 audit(2000000119.257:8390): avc: denied { read write } for pid=17662 comm="syz.2.5903" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.328382][T17660] syz_tun: left allmulticast mode [ 213.343251][ T29] audit: type=1400 audit(2000000119.257:8391): avc: denied { open } for pid=17662 comm="syz.2.5903" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.382178][ T29] audit: type=1400 audit(2000000119.317:8392): avc: denied { setopt } for pid=17663 comm="syz.5.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.442924][ T29] audit: type=1326 audit(2000000119.377:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.477939][T17671] netlink: 'syz.5.5905': attribute type 13 has an invalid length. [ 213.505041][ T29] audit: type=1326 audit(2000000119.377:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.507137][T17671] gretap0: refused to change device tx_queue_len [ 213.528705][ T29] audit: type=1326 audit(2000000119.377:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.558777][ T29] audit: type=1326 audit(2000000119.377:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.582458][ T29] audit: type=1326 audit(2000000119.377:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.606159][ T29] audit: type=1326 audit(2000000119.387:8398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e715d29 code=0x7ffc0000 [ 213.621785][T17671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.728264][T17686] loop0: detected capacity change from 0 to 1024 [ 213.735212][T17686] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.834375][T17703] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 213.886158][T17711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.893418][T17711] IPv6: NLM_F_CREATE should be set when creating new route [ 213.900669][T17711] IPv6: NLM_F_CREATE should be set when creating new route [ 213.917268][T17713] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5927'. [ 213.995851][T17720] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.009342][T17720] vhci_hcd: invalid port number 23 [ 214.018844][T17728] smc: net device bond0 applied user defined pnetid SYZ1 [ 214.026681][T17728] smc: net device bond0 erased user defined pnetid SYZ1 [ 214.149420][T17738] loop0: detected capacity change from 0 to 512 [ 214.176463][T17738] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.5939: casefold flag without casefold feature [ 214.214550][T17738] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5939: couldn't read orphan inode 15 (err -117) [ 214.269323][T17736] lo speed is unknown, defaulting to 1000 [ 214.284107][T17756] netlink: 'syz.5.5944': attribute type 29 has an invalid length. [ 214.292062][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5944'. [ 214.372644][T17736] chnl_net:caif_netlink_parms(): no params data found [ 214.421589][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.428748][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.438615][T17736] bridge_slave_0: entered allmulticast mode [ 214.445717][T17736] bridge_slave_0: entered promiscuous mode [ 214.453009][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.460190][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.467471][T17736] bridge_slave_1: entered allmulticast mode [ 214.473954][T17736] bridge_slave_1: entered promiscuous mode [ 214.495889][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.507107][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.535370][T17736] team0: Port device team_slave_0 added [ 214.542551][T17736] team0: Port device team_slave_1 added [ 214.566586][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.573573][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.599617][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.611088][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.618138][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.644174][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.688347][T17736] hsr_slave_0: entered promiscuous mode [ 214.697826][T17736] hsr_slave_1: entered promiscuous mode [ 214.707001][T17736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.720180][T17736] Cannot create hsr debugfs directory [ 214.741488][T17796] loop9: detected capacity change from 0 to 256 [ 214.759140][T17796] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.783385][T17796] FAT-fs (loop9): Directory bread(block 64) failed [ 214.790040][T17796] FAT-fs (loop9): Directory bread(block 65) failed [ 214.799555][T17796] FAT-fs (loop9): Directory bread(block 66) failed [ 214.806487][T17796] FAT-fs (loop9): Directory bread(block 67) failed [ 214.813150][T17796] FAT-fs (loop9): Directory bread(block 68) failed [ 214.821898][T17796] FAT-fs (loop9): Directory bread(block 69) failed [ 214.829815][T17796] FAT-fs (loop9): Directory bread(block 70) failed [ 214.838455][T17796] FAT-fs (loop9): Directory bread(block 71) failed [ 214.845248][T17796] FAT-fs (loop9): Directory bread(block 72) failed [ 214.851935][T17796] FAT-fs (loop9): Directory bread(block 73) failed [ 214.865699][T17736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.920650][ T9791] kworker/u8:42: attempt to access beyond end of device [ 214.920650][ T9791] loop9: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 214.937439][ T9791] kworker/u8:42: attempt to access beyond end of device [ 214.937439][ T9791] loop9: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 214.955557][T17736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.010235][T17808] syz.5.5963[17808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.010393][T17808] syz.5.5963[17808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.022152][T17808] syz.5.5963[17808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.036769][T17736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.064700][T17808] bond1: entered promiscuous mode [ 215.069805][T17808] bond1: entered allmulticast mode [ 215.075287][T17808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.086063][T17808] bond1 (unregistering): Released all slaves [ 215.099282][T17736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.172622][T17813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5964'. [ 215.231464][T17736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.261788][T17736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.287214][T17736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.303763][T17736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.343235][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.354289][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.371894][T17736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.382284][T17736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.409616][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.416764][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.441662][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.448835][ T9762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.464641][T17835] loop7: detected capacity change from 0 to 512 [ 215.472166][T17835] EXT4-fs: Ignoring removed oldalloc option [ 215.478678][T17835] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 215.509602][T17835] EXT4-fs (loop7): 1 truncate cleaned up [ 215.536039][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.668397][T17854] netlink: 'syz.5.5977': attribute type 3 has an invalid length. [ 215.694397][T17736] veth0_vlan: entered promiscuous mode [ 215.713124][T17736] veth1_vlan: entered promiscuous mode [ 215.726376][T17736] veth0_macvtap: entered promiscuous mode [ 215.733826][T17736] veth1_macvtap: entered promiscuous mode [ 215.744519][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.755045][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.765060][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.775562][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.785394][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.795838][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.805727][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.816174][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.826014][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.836551][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.847152][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.866310][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.876887][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.886764][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.897216][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.907076][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.917585][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.927497][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.938028][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.947881][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.958441][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.992257][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.004644][T17736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.013612][T17736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.022512][T17736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.031403][T17736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.115004][T17875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5937'. [ 216.175433][T17884] netlink: 'syz.5.5987': attribute type 13 has an invalid length. [ 216.329567][T17892] Process accounting resumed [ 216.361830][T17894] loop2: detected capacity change from 0 to 1764 [ 216.408494][T17884] gretap0: refused to change device tx_queue_len [ 216.414905][T17884] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.485570][T17905] loop7: detected capacity change from 0 to 2048 [ 216.519957][T17909] lo speed is unknown, defaulting to 1000 [ 216.530676][T17905] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 216.543133][T17905] EXT4-fs (loop7): This should not happen!! Data will be lost [ 216.543133][T17905] [ 216.552892][T17905] EXT4-fs (loop7): Total free blocks count 0 [ 216.558923][T17905] EXT4-fs (loop7): Free/Dirty block details [ 216.563878][T17914] loop5: detected capacity change from 0 to 1024 [ 216.564817][T17905] EXT4-fs (loop7): free_blocks=0 [ 216.564833][T17905] EXT4-fs (loop7): dirty_blocks=0 [ 216.574300][T17914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.576235][T17905] EXT4-fs (loop7): Block reservation details [ 216.592118][T17914] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 216.597578][T17905] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 216.614210][T17914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.633258][T17914] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 216.643210][T17914] EXT4-fs (loop5): Remounting filesystem read-only [ 216.649940][T17914] EXT4-fs (loop5): 1 orphan inode deleted [ 216.665805][T17914] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 216.898385][T17945] pim6reg1: entered promiscuous mode [ 216.903743][T17945] pim6reg1: entered allmulticast mode [ 217.009510][T17958] syz.7.6019[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.009606][T17958] syz.7.6019[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.021367][T17958] syz.7.6019[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.049591][T17958] SELinux: policydb version 0 does not match my version range 15-33 [ 217.074127][T17958] SELinux: failed to load policy [ 217.215770][T17977] syz.5.6027[17977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.215902][T17977] syz.5.6027[17977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.230564][T17977] syz.5.6027[17977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.288639][T17983] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 217.288639][T17983] program syz.5.6029 not setting count and/or reply_len properly [ 217.336029][T17985] sd 0:0:1:0: device reset [ 217.352311][T17987] syz.9.6032[17987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.416889][T17997] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6036'. [ 217.546994][T18018] loop7: detected capacity change from 0 to 128 [ 217.624079][T18018] syz.7.6047: attempt to access beyond end of device [ 217.624079][T18018] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 217.637679][T18018] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 217.664335][T18018] syz.7.6047: attempt to access beyond end of device [ 217.664335][T18018] loop7: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 217.724521][T18032] lo speed is unknown, defaulting to 1000 [ 217.836578][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6059'. [ 217.838570][T18039] loop9: detected capacity change from 0 to 8192 [ 218.053059][T18059] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6067'. [ 218.080010][T18059] batadv1: entered promiscuous mode [ 218.085330][T18059] batadv1: entered allmulticast mode [ 218.145541][T18063] vlan2: entered promiscuous mode [ 218.269759][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 218.269805][ T29] audit: type=1400 audit(2000000124.187:8714): avc: denied { shutdown } for pid=18068 comm="syz.9.6071" laddr=fe80::16 lport=45977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.298247][ T29] audit: type=1400 audit(2000000124.187:8715): avc: denied { setopt } for pid=18068 comm="syz.9.6071" laddr=fe80::16 lport=45977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.345152][ T29] audit: type=1400 audit(2000000124.277:8716): avc: denied { create } for pid=18078 comm="syz.0.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.367395][ T29] audit: type=1400 audit(2000000124.287:8717): avc: denied { connect } for pid=18078 comm="syz.0.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.387279][ T29] audit: type=1400 audit(2000000124.287:8718): avc: denied { write } for pid=18078 comm="syz.0.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.411720][T18083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.420625][T18083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.429515][T18083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.438270][T18083] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.447224][T18083] geneve2: entered promiscuous mode [ 218.452509][T18083] geneve2: entered allmulticast mode [ 218.458881][T18083] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.467868][T18083] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.476966][T18083] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.485909][T18083] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.541011][ T29] audit: type=1400 audit(2000000124.477:8719): avc: denied { read write } for pid=18091 comm="syz.0.6081" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.564506][ T29] audit: type=1400 audit(2000000124.477:8720): avc: denied { open } for pid=18091 comm="syz.0.6081" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.615122][ T29] audit: type=1400 audit(2000000124.527:8721): avc: denied { ioctl } for pid=18091 comm="syz.0.6081" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.656962][ T29] audit: type=1400 audit(2000000124.587:8722): avc: denied { bind } for pid=18095 comm="syz.7.6082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.677464][ T29] audit: type=1400 audit(2000000124.587:8723): avc: denied { setopt } for pid=18095 comm="syz.7.6082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.897860][T18118] netlink: 'syz.5.6092': attribute type 3 has an invalid length. [ 218.980563][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6098'. [ 219.002013][T18130] bond1: entered allmulticast mode [ 219.007608][T18130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.056108][T18130] bond1: entered promiscuous mode [ 219.063590][T18130] batadv0: entered promiscuous mode [ 219.071743][T18130] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 219.079387][T18130] Cannot create hsr debugfs directory [ 219.085747][T18130] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 219.120046][T18136] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 219.128368][T18136] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 219.231864][ T9] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 219.239544][ T9] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 219.259090][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6109'. [ 219.271710][ T9] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 219.338108][T18166] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.398296][T18175] loop9: detected capacity change from 0 to 2048 [ 219.456763][T18182] loop9: detected capacity change from 0 to 2048 [ 219.467992][T18184] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.510292][ T8614] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 219.617445][T18200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6128'. [ 219.712519][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6134'. [ 219.766467][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6136'. [ 219.782375][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6137'. [ 219.791185][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6136'. [ 219.913308][T18232] ALSA: seq fatal error: cannot create timer (-19) [ 220.026545][T18241] netlink: 'syz.9.6146': attribute type 153 has an invalid length. [ 220.363044][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'. [ 220.515275][T18195] syz.7.6126 (18195) used greatest stack depth: 6360 bytes left [ 220.570951][T18274] bond_slave_1: entered promiscuous mode [ 220.576294][T18275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10028 sclass=netlink_route_socket pid=18275 comm=syz.9.6156 [ 220.579863][T18274] bond_slave_1: left promiscuous mode [ 220.589466][T18275] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6156'. [ 220.699481][T18283] bpf_get_probe_write_proto: 11 callbacks suppressed [ 220.699503][T18283] syz.5.6164[18283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.716287][T18283] syz.5.6164[18283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.755109][T18283] syz.5.6164[18283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.781438][T18294] atomic_op ffff888125877928 conn xmit_atomic 0000000000000000 [ 221.148580][T18329] ebt_among: src integrity fail: 300 [ 221.236849][T18341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18341 comm=syz.2.6190 [ 221.275479][T18341] syz.2.6190[18341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.275733][T18341] syz.2.6190[18341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.277229][T18345] loop7: detected capacity change from 0 to 164 [ 221.298357][T18341] syz.2.6190[18341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.305157][T18345] Unable to read rock-ridge attributes [ 221.338781][T18345] Unable to read rock-ridge attributes [ 221.495332][T18364] loop2: detected capacity change from 0 to 512 [ 221.512835][T18364] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6200: corrupted in-inode xattr: invalid ea_ino [ 221.526405][T18364] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6200: couldn't read orphan inode 15 (err -117) [ 221.779772][T18395] syz.2.6215[18395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.779838][T18395] syz.2.6215[18395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.791520][T18395] syz.2.6215[18395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.812388][T18397] loop7: detected capacity change from 0 to 512 [ 221.833239][T18397] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 221.844446][T18397] EXT4-fs (loop7): 1 truncate cleaned up [ 221.844523][T18401] syz.2.6218[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.855170][T18393] Falling back ldisc for ttyS3. [ 221.917213][T18409] loop5: detected capacity change from 0 to 128 [ 221.924540][T18409] FAT-fs (loop5): Directory bread(block 162) failed [ 221.935087][T18409] FAT-fs (loop5): Directory bread(block 163) failed [ 221.942539][T18409] FAT-fs (loop5): Directory bread(block 164) failed [ 221.952292][T18409] FAT-fs (loop5): Directory bread(block 165) failed [ 221.959528][T18409] FAT-fs (loop5): Directory bread(block 166) failed [ 221.970454][T18409] FAT-fs (loop5): Directory bread(block 167) failed [ 221.977920][T18409] FAT-fs (loop5): Directory bread(block 168) failed [ 221.996619][T18409] FAT-fs (loop5): Directory bread(block 169) failed [ 222.017837][T18409] vhci_hcd: invalid port number 61 [ 222.023044][T18409] vhci_hcd: default hub control req: d374 v3866 i003d l25388 [ 222.165165][T18434] Falling back ldisc for ttyS3. [ 222.394947][T18454] loop2: detected capacity change from 0 to 8192 [ 222.528846][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6252'. [ 222.812566][T18503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for [ 223.012732][T18517] IPv6: Can't replace route, no match found [ 223.074638][T18519] loop2: detected capacity change from 0 to 2048 [ 223.136847][T18519] loop2: p1 < > p4 [ 223.144929][T18519] loop2: p4 size 8388608 extends beyond EOD, truncated [ 223.297033][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 223.297048][ T29] audit: type=1400 audit(2000000129.237:8992): avc: denied { unmount } for pid=17736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 223.345046][ T29] audit: type=1400 audit(2000000129.237:8993): avc: denied { create } for pid=18536 comm="syz.5.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.364602][ T29] audit: type=1400 audit(2000000129.237:8994): avc: denied { connect } for pid=18536 comm="syz.5.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.384504][ T29] audit: type=1400 audit(2000000129.237:8995): avc: denied { bind } for pid=18536 comm="syz.5.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.403981][ T29] audit: type=1400 audit(2000000129.237:8996): avc: denied { create } for pid=18536 comm="syz.5.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.424709][ T29] audit: type=1400 audit(2000000129.237:8997): avc: denied { write } for pid=18536 comm="syz.5.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.451855][T18540] random: crng reseeded on system resumption [ 223.457981][T18533] Falling back ldisc for ttyS3. [ 223.519002][ T29] audit: type=1400 audit(2000000129.387:8998): avc: denied { write } for pid=18538 comm="syz.2.6280" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.542201][ T29] audit: type=1400 audit(2000000129.387:8999): avc: denied { open } for pid=18538 comm="syz.2.6280" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.565794][ T29] audit: type=1400 audit(2000000129.457:9000): avc: denied { create } for pid=18543 comm="syz.9.6282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.585407][ T29] audit: type=1400 audit(2000000129.487:9001): avc: denied { create } for pid=18543 comm="syz.9.6282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.677088][T18550] loop7: detected capacity change from 0 to 16384 [ 223.699470][T18552] rdma_op ffff88812d01dd80 conn xmit_rdma 0000000000000000 [ 223.762654][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.770149][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.787759][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.795319][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.800175][T18555] loop7: detected capacity change from 16384 to 16383 [ 223.802703][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.816953][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.824350][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.831783][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.839208][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.846690][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.854097][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.856104][T18555] I/O error, dev loop7, sector 792 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 223.861515][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.871376][T18555] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 223.878746][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.887144][T18555] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 223.894503][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.903143][T18555] Buffer I/O error on dev loop7, logical block 101, lost async page write [ 223.910450][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.918928][T18555] Buffer I/O error on dev loop7, logical block 102, lost async page write [ 223.926294][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.934782][T18555] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 223.942177][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.950644][T18555] Buffer I/O error on dev loop7, logical block 104, lost async page write [ 223.958016][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.966512][T18555] Buffer I/O error on dev loop7, logical block 105, lost async page write [ 223.973895][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.982428][T18555] Buffer I/O error on dev loop7, logical block 106, lost async page write [ 223.989771][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 223.998286][T18555] Buffer I/O error on dev loop7, logical block 107, lost async page write [ 224.005693][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.014148][T18555] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 224.021522][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.037724][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.044953][T18550] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 224.045182][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.062406][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.069867][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.077368][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.084787][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.087258][T18550] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.092267][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.109177][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.116779][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.124244][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.131740][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.139182][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.146697][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.154165][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.161673][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.169126][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.176553][T15541] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 224.200553][T18555] I/O error, dev loop7, sector 1816 op 0x1:(WRITE) flags 0x800 phys_seg 29 prio class 0 [ 224.213688][T18555] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.222998][T18555] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.232196][T18555] loop7: unable to read partition table [ 224.255137][T18555] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 224.291414][T15541] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 224.427912][T18574] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6295'. [ 224.553631][T18591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 224.692261][T18614] netlink: 'syz.5.6313': attribute type 153 has an invalid length. [ 224.777329][T18612] loop7: detected capacity change from 0 to 8192 [ 224.786274][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6318'. [ 225.277801][T18670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.342903][T18676] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6342'. [ 225.406472][T18685] bridge0: port 3(ipvlan2) entered blocking state [ 225.413083][T18685] bridge0: port 3(ipvlan2) entered disabled state [ 225.425471][T18690] loop7: detected capacity change from 0 to 2048 [ 225.430136][T18685] ipvlan2: entered allmulticast mode [ 225.437175][T18685] bridge0: entered allmulticast mode [ 225.443233][T18685] ipvlan2: left allmulticast mode [ 225.448369][T18685] bridge0: left allmulticast mode [ 225.472876][T18694] loop5: detected capacity change from 0 to 512 [ 225.474854][T18690] loop7: p1 < > p4 [ 225.483098][T18694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.486816][T18690] loop7: p4 size 8388608 extends beyond EOD, truncated [ 225.501002][T18694] EXT4-fs (loop5): 1 truncate cleaned up [ 225.510492][T18694] EXT4-fs mount: 22 callbacks suppressed [ 225.510508][T18694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.541072][T18696] veth0_virt_wifi: entered promiscuous mode [ 225.552558][T18696] bond_slave_1: entered promiscuous mode [ 225.558952][T18696] bond_slave_1: left promiscuous mode [ 225.564927][T16455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.574285][T18696] veth0_virt_wifi: left promiscuous mode [ 225.658482][T18712] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6359'. [ 225.783364][T18732] loop5: detected capacity change from 0 to 2048 [ 225.794403][T18734] loop2: detected capacity change from 0 to 1764 [ 225.817531][T18732] loop5: p1 < > p4 [ 225.822292][T18732] loop5: p4 size 8388608 extends beyond EOD, truncated [ 225.882565][T18749] rdma_op ffff888116f3c180 conn xmit_rdma 0000000000000000 [ 225.945533][T18755] netlink: 'syz.2.6378': attribute type 3 has an invalid length. [ 225.995609][T18758] SELinux: policydb version 0 does not match my version range 15-33 [ 226.019009][T18758] SELinux: failed to load policy [ 226.114842][T18768] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6385'. [ 226.124675][T18771] bpf_get_probe_write_proto: 14 callbacks suppressed [ 226.124694][T18771] syz.2.6386[18771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.132129][T18771] syz.2.6386[18771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.148977][T18771] syz.2.6386[18771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.206438][T18781] loop0: detected capacity change from 0 to 2048 [ 226.232991][T18782] geneve2: entered promiscuous mode [ 226.238363][T18782] geneve2: entered allmulticast mode [ 226.267567][T18781] loop0: p1 < > p4 [ 226.272565][T18781] loop0: p4 size 8388608 extends beyond EOD, truncated [ 226.337783][T18793] loop7: detected capacity change from 0 to 16384 [ 226.418718][T14150] ================================================================== [ 226.426834][T14150] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 226.434149][T14150] [ 226.436480][T14150] read-write to 0xffff8881218a5d98 of 8 bytes by task 18794 on cpu 1: [ 226.444637][T14150] xas_clear_mark+0x90/0x180 [ 226.449243][T14150] __folio_start_writeback+0x2f1/0x430 [ 226.454723][T14150] __block_write_full_folio+0x506/0x8c0 [ 226.460286][T14150] block_write_full_folio+0x293/0x2b0 [ 226.465679][T14150] write_cache_pages+0x62/0x100 [ 226.470551][T14150] blkdev_writepages+0x59/0x90 [ 226.475333][T14150] do_writepages+0x1d8/0x480 [ 226.479933][T14150] filemap_write_and_wait_range+0x146/0x360 [ 226.485836][T14150] sync_blockdev+0x35/0x50 [ 226.490255][T14150] loop_set_status+0x103/0x540 [ 226.495028][T14150] lo_ioctl+0x7f1/0x11c0 [ 226.499275][T14150] blkdev_ioctl+0x359/0x450 [ 226.503796][T14150] __se_sys_ioctl+0xc9/0x140 [ 226.508394][T14150] __x64_sys_ioctl+0x43/0x50 [ 226.512992][T14150] x64_sys_call+0x1690/0x2dc0 [ 226.517676][T14150] do_syscall_64+0xc9/0x1c0 [ 226.522181][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.528096][T14150] [ 226.530417][T14150] read to 0xffff8881218a5d98 of 8 bytes by task 14150 on cpu 0: [ 226.538045][T14150] xas_find_marked+0x216/0x660 [ 226.542814][T14150] find_get_entry+0x54/0x390 [ 226.547413][T14150] filemap_get_folios_tag+0x136/0x210 [ 226.552805][T14150] writeback_iter+0x4b0/0x830 [ 226.557499][T14150] write_cache_pages+0xad/0x100 [ 226.562371][T14150] blkdev_writepages+0x59/0x90 [ 226.567148][T14150] do_writepages+0x1d8/0x480 [ 226.571750][T14150] filemap_write_and_wait_range+0x146/0x360 [ 226.577651][T14150] sync_blockdev+0x35/0x50 [ 226.582071][T14150] bdev_disk_changed+0xd7/0xb90 [ 226.586934][T14150] blkdev_get_whole+0x1eb/0x2d0 [ 226.591793][T14150] bdev_open+0x289/0x860 [ 226.596046][T14150] blkdev_open+0x246/0x280 [ 226.600477][T14150] do_dentry_open+0x621/0xa20 [ 226.605156][T14150] vfs_open+0x38/0x1f0 [ 226.609229][T14150] path_openat+0x1ac2/0x1fa0 [ 226.613829][T14150] do_filp_open+0x107/0x230 [ 226.618343][T14150] do_sys_openat2+0xab/0x120 [ 226.622939][T14150] __x64_sys_openat+0xf3/0x120 [ 226.627712][T14150] x64_sys_call+0x2b30/0x2dc0 [ 226.632397][T14150] do_syscall_64+0xc9/0x1c0 [ 226.636909][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.642826][T14150] [ 226.645152][T14150] value changed: 0xffffffffe0000000 -> 0xfffffffc00000000 [ 226.652257][T14150] [ 226.654575][T14150] Reported by Kernel Concurrency Sanitizer on: [ 226.660731][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 226.671672][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.681730][T14150] ================================================================== [ 226.766091][T18794] loop7: detected capacity change from 16384 to 16383