last executing test programs: 58.526842377s ago: executing program 1 (id=1701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) read$char_usb(r0, &(0x7f0000000000)=""/26, 0x1a) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 58.42400719s ago: executing program 1 (id=1707): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 58.241363443s ago: executing program 1 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 58.220184456s ago: executing program 1 (id=1719): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 58.128364918s ago: executing program 1 (id=1723): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0xfffffffffffffeec) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 58.095510562s ago: executing program 1 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 57.584551077s ago: executing program 2 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 57.557107161s ago: executing program 2 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 57.376343874s ago: executing program 2 (id=1768): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 57.376028314s ago: executing program 2 (id=1769): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x2}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 57.283190576s ago: executing program 2 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) 56.369517793s ago: executing program 4 (id=1808): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 56.284206354s ago: executing program 4 (id=1798): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) 56.284026834s ago: executing program 32 (id=1797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r3}, 0xc) 56.283820224s ago: executing program 4 (id=1801): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 56.131641843s ago: executing program 4 (id=1802): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x2}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 56.047614274s ago: executing program 2 (id=1803): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 56.010519539s ago: executing program 33 (id=1803): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 55.978922443s ago: executing program 4 (id=1805): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0x2, 0x4, 0x1, 0x10, {0x1, "cf"}, 0x2}}, 0xa) 55.624420509s ago: executing program 4 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 55.624212769s ago: executing program 34 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 50.504595364s ago: executing program 6 (id=1894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 50.46197138s ago: executing program 6 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 50.420475035s ago: executing program 6 (id=1900): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) poll(0x0, 0x0, 0x80009) socket$kcm(0x2, 0x200000000000001, 0x106) 49.566313274s ago: executing program 6 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 49.545259727s ago: executing program 6 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) linkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1400) 48.773784065s ago: executing program 6 (id=1944): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 48.732838811s ago: executing program 35 (id=1944): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 43.141491757s ago: executing program 5 (id=2099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) r0 = inotify_init() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000003c0)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) 43.126740059s ago: executing program 5 (id=2103): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 43.014266293s ago: executing program 36 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 43.011745273s ago: executing program 5 (id=2105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 42.915581065s ago: executing program 5 (id=2107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 42.914973015s ago: executing program 5 (id=2108): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 42.890167539s ago: executing program 5 (id=2110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000010c0)=ANY=[@ANYBLOB="080086dd02011100040000ffa50c6eec00be03602bff068000000000000000000000000008aaff020000000000000000000000000001", @ANYRES16], 0xfdef) 27.867663192s ago: executing program 37 (id=2110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000010c0)=ANY=[@ANYBLOB="080086dd02011100040000ffa50c6eec00be03602bff068000000000000000000000000008aaff020000000000000000000000000001", @ANYRES16], 0xfdef) 1.09661248s ago: executing program 9 (id=3275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0x300, 0x0, 0xe8, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'lo\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xaf, 0xe8}, {0x28}}}}, 0x497) 1.047385286s ago: executing program 3 (id=3278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6}}, 0x0, 0x0, 0x2}}, 0x128}}, 0x0) 1.046761867s ago: executing program 9 (id=3280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/123, 0x7b) 1.01601942s ago: executing program 3 (id=3281): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) 1.0152425s ago: executing program 3 (id=3283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.013715761s ago: executing program 9 (id=3284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x40004) 956.934198ms ago: executing program 9 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@nombcache}, {@nobh}]}, 0x1, 0x519, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 930.530651ms ago: executing program 8 (id=3289): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') fcntl$notify(r0, 0x402, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') lseek(r1, 0x10000, 0x1) getdents64(r1, 0x0, 0x0) 899.124056ms ago: executing program 8 (id=3293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 845.072582ms ago: executing program 3 (id=3294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbe}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x2, 0x401, 0x100, 0xac8, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 843.891103ms ago: executing program 7 (id=3304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 803.196147ms ago: executing program 7 (id=3296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = io_uring_setup(0xa9e, &(0x7f0000000880)={0x0, 0xa793, 0x1, 0x5, 0x2a}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 764.689443ms ago: executing program 9 (id=3297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f00"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 763.762073ms ago: executing program 8 (id=3298): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 754.224174ms ago: executing program 3 (id=3299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d63300000000000000000000000000ffff0a0101019e30000000000000060000000000000000080000000000000200000000000000010000000000008001000000000000006e0000000000000008000000000000000100000000000000030000000000000001800000000000000700000000000000040000000f0000000300000027bd7000073500000a00010d220000000000000000000000000100001c000400ffff4e214e260000e00000020000000000000000000000000801"], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0) 693.370352ms ago: executing program 8 (id=3301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @rand_addr, 0xfff}, 0x1c) listen(r0, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 693.092792ms ago: executing program 8 (id=3302): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) io_uring_setup(0x10005de1, &(0x7f0000000000)={0x0, 0x6cb2, 0x1000, 0x1, 0x5e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 692.664752ms ago: executing program 7 (id=3303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'lo\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) 692.189332ms ago: executing program 3 (id=3305): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 669.004225ms ago: executing program 8 (id=3306): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x21680, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x9, 0xffff1d1f, 0x761}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0xc2982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 634.584569ms ago: executing program 9 (id=3307): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2}, 0x8) 634.351849ms ago: executing program 7 (id=3308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x11f6) 375.790002ms ago: executing program 0 (id=3310): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x22, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 156.37686ms ago: executing program 0 (id=3311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 130.420344ms ago: executing program 0 (id=3312): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 114.040506ms ago: executing program 0 (id=3313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) 28.956417ms ago: executing program 0 (id=3314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 28.725377ms ago: executing program 7 (id=3315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shutdown(0xffffffffffffffff, 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) setgid(0xee00) 686.46µs ago: executing program 0 (id=3316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbe}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x2, 0x401, 0x100, 0xac8, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 0s ago: executing program 7 (id=3317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) kernel console output (not intermixed with test programs): 82.497565][ T4491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.504593][ T8784] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1812: Allocating blocks 41-42 which overlap fs metadata [ 82.504806][ T8784] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1812: Failed to acquire dquot type 1 [ 82.531234][ T4491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.551574][ T4491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.560481][ T8784] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.575858][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1812: corrupted inode contents [ 82.588358][ T8784] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.1812: mark_inode_dirty error [ 82.588855][ T8686] veth1_vlan: entered promiscuous mode [ 82.600451][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1812: corrupted inode contents [ 82.617195][ T8784] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1812: mark_inode_dirty error [ 82.629902][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1812: corrupted inode contents [ 82.642221][ T8784] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 82.651735][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1812: corrupted inode contents [ 82.665918][ T8784] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.1812: mark_inode_dirty error [ 82.677402][ T8784] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 82.686836][ T8784] EXT4-fs (loop0): 1 truncate cleaned up [ 82.693764][ T8784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.718829][ T8686] veth0_macvtap: entered promiscuous mode [ 82.738306][ T8686] veth1_macvtap: entered promiscuous mode [ 82.751484][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.758219][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.793495][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.821116][ T4482] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853093][ T4482] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862710][ T4482] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.882415][ T4482] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.979213][ T8822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8822 comm=syz.0.1826 [ 82.991832][ T8822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8822 comm=syz.0.1826 [ 83.170423][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 83.210861][ T8848] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 83.447354][ T8885] netlink: 'syz.6.1856': attribute type 21 has an invalid length. [ 83.458369][ T8887] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 83.468227][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 83.515298][ T8896] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 83.515298][ T8896] program syz.5.1861 not setting count and/or reply_len properly [ 83.977465][ T8936] loop6: detected capacity change from 0 to 512 [ 83.992769][ T8934] tipc: Started in network mode [ 83.997764][ T8934] tipc: Node identity ac14140f, cluster identity 4711 [ 84.005212][ T8936] EXT4-fs: Ignoring removed nobh option [ 84.011906][ T8934] tipc: New replicast peer: 255.255.255.255 [ 84.018022][ T8934] tipc: Enabled bearer , priority 10 [ 84.030303][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 84.039375][ T8934] tipc: Disabling bearer [ 84.052482][ T8936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.103653][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1881'. [ 84.121707][ T8936] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.147366][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1881'. [ 84.158903][ T8937] loop5: detected capacity change from 0 to 32768 [ 84.190553][ T8673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.212191][ T8937] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 84.221487][ T8937] loop5: p1 start 460800 is beyond EOD, truncated [ 84.227939][ T8937] loop5: p2 size 83886080 extends beyond EOD, truncated [ 84.258237][ T8937] loop5: p5 start 460800 is beyond EOD, truncated [ 84.264757][ T8937] loop5: p6 size 83886080 extends beyond EOD, truncated [ 84.661436][ T8996] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1905'. [ 84.670430][ T8996] netem: unknown loss type 13 [ 84.675117][ T8996] netem: change failed [ 84.762506][ T9006] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1910'. [ 84.772035][ T9006] netlink: zone id is out of range [ 84.777150][ T9006] netlink: zone id is out of range [ 84.783668][ T9006] netlink: zone id is out of range [ 84.788993][ T9006] netlink: zone id is out of range [ 84.804243][ T9006] netlink: set zone limit has 8 unknown bytes [ 85.102477][ T9010] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 85.197119][ T9022] lo speed is unknown, defaulting to 1000 [ 85.205143][ T9022] lo speed is unknown, defaulting to 1000 [ 85.211476][ T9022] lo speed is unknown, defaulting to 1000 [ 85.251608][ T9022] infiniband syz1: set active [ 85.256327][ T9022] infiniband syz1: added lo [ 85.260887][ T10] lo speed is unknown, defaulting to 1000 [ 85.273492][ T9022] RDS/IB: syz1: added [ 85.277686][ T9022] smc: adding ib device syz1 with port count 1 [ 85.284086][ T9022] smc: ib device syz1 port 1 has no pnetid [ 85.290190][ T10] lo speed is unknown, defaulting to 1000 [ 85.296341][ T9022] lo speed is unknown, defaulting to 1000 [ 85.391371][ T9022] lo speed is unknown, defaulting to 1000 [ 85.463127][ T9022] lo speed is unknown, defaulting to 1000 [ 85.482006][ T9040] netlink: 'syz.7.1925': attribute type 13 has an invalid length. [ 85.534692][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.541981][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.564256][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1928'. [ 85.608200][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.620107][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.675502][ T9022] lo speed is unknown, defaulting to 1000 [ 85.681799][ T4482] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.692001][ T4482] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.700931][ T4482] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.712728][ T4482] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.740558][ T9022] lo speed is unknown, defaulting to 1000 [ 85.817881][ T9022] lo speed is unknown, defaulting to 1000 [ 85.952071][ T9060] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.014101][ T9060] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.063804][ T3409] kernel write not supported for file bpf-prog (pid: 3409 comm: kworker/1:4) [ 86.076773][ T9060] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.116403][ T1887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.145635][ T9060] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.194113][ T1887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.241355][ T4501] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.266384][ T1887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.292470][ T4501] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313354][ T9092] loop0: detected capacity change from 0 to 1024 [ 86.319930][ T4482] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.329300][ T9092] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 86.339033][ T9092] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.350009][ T9092] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.358131][ T9092] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.359082][ T1887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.381816][ T9092] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized [ 86.394157][ T4460] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.394514][ T9092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.426800][ T9092] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 86.492550][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.521795][ T1887] bridge_slave_1: left allmulticast mode [ 86.527475][ T1887] bridge_slave_1: left promiscuous mode [ 86.533248][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.557341][ T1887] bridge_slave_0: left allmulticast mode [ 86.563121][ T1887] bridge_slave_0: left promiscuous mode [ 86.568767][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.693848][ T1887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.704212][ T9119] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 86.712787][ T1887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.722484][ T1887] bond0 (unregistering): Released all slaves [ 86.736900][ T3482] lo speed is unknown, defaulting to 1000 [ 86.742670][ T3482] syz1: Port: 1 Link DOWN [ 86.754159][ T9116] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 86.766267][ T3482] lo speed is unknown, defaulting to 1000 [ 86.772807][ T9086] lo speed is unknown, defaulting to 1000 [ 86.784309][ T3487] lo speed is unknown, defaulting to 1000 [ 86.790098][ T3487] syz1: Port: 1 Link ACTIVE [ 86.808653][ T1063] lo speed is unknown, defaulting to 1000 [ 86.884614][ T1887] hsr_slave_0: left promiscuous mode [ 86.891361][ T1887] hsr_slave_1: left promiscuous mode [ 86.897070][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.904506][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.912273][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.919765][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.932915][ T1887] veth1_macvtap: left promiscuous mode [ 86.938458][ T1887] veth0_macvtap: left promiscuous mode [ 86.944288][ T1887] veth1_vlan: left promiscuous mode [ 86.949610][ T1887] veth0_vlan: left promiscuous mode [ 87.043090][ T1887] team0 (unregistering): Port device team_slave_1 removed [ 87.053370][ T1887] team0 (unregistering): Port device team_slave_0 removed [ 87.116991][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 87.117006][ T29] audit: type=1326 audit(1768572596.664:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.166505][ T29] audit: type=1326 audit(1768572596.664:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.190043][ T29] audit: type=1326 audit(1768572596.664:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.210634][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 87.213375][ T29] audit: type=1326 audit(1768572596.664:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.243544][ T29] audit: type=1326 audit(1768572596.664:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.267105][ T29] audit: type=1326 audit(1768572596.664:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.290810][ T29] audit: type=1326 audit(1768572596.674:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.314710][ T29] audit: type=1326 audit(1768572596.734:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.338183][ T29] audit: type=1326 audit(1768572596.734:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.362037][ T29] audit: type=1326 audit(1768572596.734:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 87.450041][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.457280][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.515311][ T9086] bridge_slave_0: entered allmulticast mode [ 87.531817][ T9086] bridge_slave_0: entered promiscuous mode [ 87.542982][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.550077][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.558279][ T9144] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.568899][ T9086] bridge_slave_1: entered allmulticast mode [ 87.585122][ T9086] bridge_slave_1: entered promiscuous mode [ 87.630603][ T9149] team0: Device gtp0 is of different type [ 87.662682][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.698978][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.752987][ T9158] xt_l2tp: v2 tid > 0xffff: 37482740 [ 87.760202][ T9086] team0: Port device team_slave_0 added [ 87.772267][ T9086] team0: Port device team_slave_1 added [ 87.817329][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.824393][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.850480][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.863690][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.870664][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.879951][ T9165] loop7: detected capacity change from 0 to 1024 [ 87.896643][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.997160][ T9086] hsr_slave_0: entered promiscuous mode [ 88.005047][ T9165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.017835][ T9086] hsr_slave_1: entered promiscuous mode [ 88.024468][ T9086] debugfs: 'hsr0' already exists in 'hsr' [ 88.030212][ T9086] Cannot create hsr debugfs directory [ 88.050142][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.261895][ T9086] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.299534][ T9086] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.327512][ T9086] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.358490][ T9086] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.433934][ T9207] netlink: 'syz.7.1993': attribute type 12 has an invalid length. [ 88.542320][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.554765][ T9138] syz.0.1966 (9138) used greatest stack depth: 7264 bytes left [ 88.592272][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.619344][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.626453][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.672298][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.679461][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.846522][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.847000][ T9229] loop0: detected capacity change from 0 to 512 [ 88.892796][ T9229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.156168][ T9086] veth0_vlan: entered promiscuous mode [ 89.177776][ T9086] veth1_vlan: entered promiscuous mode [ 89.237300][ T9086] veth0_macvtap: entered promiscuous mode [ 89.263874][ T9086] veth1_macvtap: entered promiscuous mode [ 89.284943][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.306953][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.315155][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.337708][ T4454] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.389505][ T4454] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.419060][ T4454] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429217][ T4454] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540151][ T9278] netlink: 19 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 89.660638][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 89.694116][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 89.710346][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 89.748263][ T9288] bond3: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 89.757640][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 89.773529][ T9290] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.845651][ T9290] bond3: (slave lo): Enslaving as a backup interface with an up link [ 89.872033][ T9290] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 89.889132][ T3487] lo speed is unknown, defaulting to 1000 [ 89.895962][ T36] lo speed is unknown, defaulting to 1000 [ 89.916852][ T3487] lo speed is unknown, defaulting to 1000 [ 90.017858][ T9309] Cannot find del_set index 0 as target [ 90.228238][ T9337] loop0: detected capacity change from 0 to 256 [ 90.374204][ T9357] loop7: detected capacity change from 0 to 1024 [ 90.385419][ T9357] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 90.396388][ T9357] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.411193][ T9357] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 90.424923][ T9357] EXT4-fs (loop7): orphan cleanup on readonly fs [ 90.434657][ T9357] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized [ 90.451245][ T9357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.469278][ T9357] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 90.498341][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.671783][ T9375] loop7: detected capacity change from 0 to 256 [ 90.737411][ T9380] loop0: detected capacity change from 0 to 1024 [ 90.763135][ T9380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.818194][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.901933][ T9401] netlink: 'syz.7.2081': attribute type 21 has an invalid length. [ 91.339725][ T9430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.696562][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2098'. [ 91.928406][ T9476] loop8: detected capacity change from 0 to 128 [ 91.946008][ T9476] msdos filesystem being mounted at /21/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 92.038822][ T9488] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 92.094668][ T9477] lo speed is unknown, defaulting to 1000 [ 92.100910][ T9493] loop8: detected capacity change from 0 to 1024 [ 92.111202][ T9493] EXT4-fs: Ignoring removed orlov option [ 92.128731][ T4491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.139126][ T4491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.212365][ T9493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.239068][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 92.239082][ T29] audit: type=1326 audit(3916056249.781:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0a551df90 code=0x7ffc0000 [ 92.268655][ T29] audit: type=1326 audit(3916056249.781:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff0a551e497 code=0x7ffc0000 [ 92.291947][ T29] audit: type=1326 audit(3916056249.781:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0a551df90 code=0x7ffc0000 [ 92.315416][ T29] audit: type=1326 audit(3916056249.781:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a551f749 code=0x7ffc0000 [ 92.338945][ T29] audit: type=1326 audit(3916056249.791:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a551f749 code=0x7ffc0000 [ 92.362350][ T29] audit: type=1326 audit(3916056249.791:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff0a551f749 code=0x7ffc0000 [ 92.385756][ T29] audit: type=1400 audit(3916056249.791:2885): avc: denied { setattr } for pid=9492 comm="syz.8.2112" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.408076][ T29] audit: type=1326 audit(3916056249.791:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a551f749 code=0x7ffc0000 [ 92.463357][ T4491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.473758][ T4491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.485080][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.559382][ T4491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.569699][ T4491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.667225][ T9477] chnl_net:caif_netlink_parms(): no params data found [ 92.679965][ T4491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.690286][ T4491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.773770][ T29] audit: type=1400 audit(3916056250.331:2887): avc: denied { compute_member } for pid=9511 comm="syz.7.2117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.814462][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.821672][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.848855][ T9516] loop8: detected capacity change from 0 to 2048 [ 92.861782][ T9477] bridge_slave_0: entered allmulticast mode [ 92.868283][ T9477] bridge_slave_0: entered promiscuous mode [ 92.894114][ T29] audit: type=1400 audit(3916056250.451:2888): avc: denied { ioctl } for pid=9519 comm="syz.0.2122" path="socket:[23002]" dev="sockfs" ino=23002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.898262][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.926996][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.935723][ T9516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.959683][ T9477] bridge_slave_1: entered allmulticast mode [ 92.977626][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.995277][ T9477] bridge_slave_1: entered promiscuous mode [ 93.002679][ T4491] bridge_slave_1: left allmulticast mode [ 93.008340][ T4491] bridge_slave_1: left promiscuous mode [ 93.014192][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.022453][ T4491] bridge_slave_0: left allmulticast mode [ 93.028101][ T4491] bridge_slave_0: left promiscuous mode [ 93.033830][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.172861][ T9544] 9p: Bad value for 'rfdno' [ 93.196221][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2132'. [ 93.205163][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2132'. [ 93.254798][ T9551] loop8: detected capacity change from 0 to 512 [ 93.276819][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.278188][ T9551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.299041][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.317677][ T4491] bond0 (unregistering): Released all slaves [ 93.337784][ T4491] bond1 (unregistering): (slave bond2): Releasing backup interface [ 93.374261][ T9559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9559 comm=syz.0.2136 [ 93.386818][ T9559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9559 comm=syz.0.2136 [ 93.399816][ T4491] bond2 (unregistering): left promiscuous mode [ 93.424521][ T4491] bond1 (unregistering): Released all slaves [ 93.454272][ T4491] bond2 (unregistering): Released all slaves [ 93.475809][ T4491] bond3 (unregistering): Released all slaves [ 93.522630][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.549309][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.594335][ T4491] hsr_slave_0: left promiscuous mode [ 93.600702][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.620608][ T4491] hsr_slave_1: left promiscuous mode [ 93.627499][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.635004][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.662883][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.670314][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.703254][ T4491] veth1_macvtap: left promiscuous mode [ 93.718942][ T4491] veth0_macvtap: left promiscuous mode [ 93.729135][ T4491] veth1_vlan: left promiscuous mode [ 93.741483][ T4491] veth0_vlan: left promiscuous mode [ 93.902048][ T4491] team0 (unregistering): Port device team_slave_1 removed [ 93.923750][ T4491] team0 (unregistering): Port device team_slave_0 removed [ 94.028286][ T9477] team0: Port device team_slave_0 added [ 94.035637][ T9477] team0: Port device team_slave_1 added [ 94.058239][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.065316][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.091476][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.119820][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.126824][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.152800][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.191477][ T9477] hsr_slave_0: entered promiscuous mode [ 94.210309][ T9477] hsr_slave_1: entered promiscuous mode [ 94.225391][ T9586] loop8: detected capacity change from 0 to 512 [ 94.242339][ T9586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.278150][ T9586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.292729][ T9594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2150'. [ 94.312491][ T9586] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.365581][ T9477] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 94.373618][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.374631][ T9477] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 94.392642][ T9477] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 94.406602][ T9596] netlink: 'syz.0.2160': attribute type 12 has an invalid length. [ 94.429272][ T9477] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 94.580128][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.604704][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.613802][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.620920][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.655259][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.662406][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.743331][ T9628] loop0: detected capacity change from 0 to 128 [ 94.773540][ T9628] msdos filesystem being mounted at /469/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 94.786621][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2163'. [ 94.814225][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.957159][ T9647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.014949][ T9647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.048341][ T9477] veth0_vlan: entered promiscuous mode [ 95.065928][ T9477] veth1_vlan: entered promiscuous mode [ 95.083729][ T9647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.127432][ T9477] veth0_macvtap: entered promiscuous mode [ 95.146793][ T9647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.172233][ T9477] veth1_macvtap: entered promiscuous mode [ 95.194361][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.215148][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.237197][ T4491] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.264862][ T4491] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.294085][ T4491] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.311681][ T4491] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.329922][ T4491] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355763][ T4491] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374921][ T4491] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.398522][ T4491] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498882][ T9664] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2172'. [ 95.750333][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2178'. [ 95.766447][ T9681] vlan2: entered allmulticast mode [ 95.808343][ T9683] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.905568][ T9683] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.964351][ T9683] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.024268][ T9683] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.094076][ T1887] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.107273][ T1887] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127311][ T1887] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.135659][ T1887] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.224606][ T9694] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 96.953184][ T9741] loop9: detected capacity change from 0 to 2048 [ 96.969848][ T9741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.990130][ T9745] lo speed is unknown, defaulting to 1000 [ 97.002514][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.254147][ T9758] loop0: detected capacity change from 0 to 2048 [ 97.282305][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 97.282319][ T29] audit: type=1400 audit(3916056254.841:2954): avc: denied { name_bind } for pid=9759 comm="syz.9.2213" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.331488][ T9758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.393726][ T29] audit: type=1400 audit(3916056254.841:2955): avc: denied { node_bind } for pid=9759 comm="syz.9.2213" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.444542][ T9758] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.470718][ T9758] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 97.483128][ T9758] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.483128][ T9758] [ 97.493020][ T9758] EXT4-fs (loop0): Total free blocks count 0 [ 97.499219][ T9758] EXT4-fs (loop0): Free/Dirty block details [ 97.505605][ T9758] EXT4-fs (loop0): free_blocks=2415919104 [ 97.511402][ T9758] EXT4-fs (loop0): dirty_blocks=32 [ 97.516512][ T9758] EXT4-fs (loop0): Block reservation details [ 97.522559][ T9758] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 97.529623][ T29] audit: type=1400 audit(3916056255.001:2956): avc: denied { add_name } for pid=9757 comm="syz.0.2212" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.550353][ T29] audit: type=1400 audit(3916056255.001:2957): avc: denied { create } for pid=9757 comm="syz.0.2212" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.570657][ T29] audit: type=1400 audit(3916056255.001:2958): avc: denied { read write } for pid=9757 comm="syz.0.2212" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.593590][ T29] audit: type=1400 audit(3916056255.001:2959): avc: denied { open } for pid=9757 comm="syz.0.2212" path="/479/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.616736][ T29] audit: type=1400 audit(3916056255.041:2960): avc: denied { read } for pid=9769 comm="syz.8.2217" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.640298][ T29] audit: type=1400 audit(3916056255.041:2961): avc: denied { open } for pid=9769 comm="syz.8.2217" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.665735][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.786789][ T9784] netlink: 'syz.0.2221': attribute type 3 has an invalid length. [ 97.839237][ T29] audit: type=1400 audit(3916056255.231:2962): avc: denied { map_create } for pid=9774 comm="syz.9.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 97.858395][ T29] audit: type=1400 audit(3916056255.241:2963): avc: denied { bpf } for pid=9774 comm="syz.9.2220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.986280][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2229'. [ 98.008236][ T9801] rdma_op ffff88810d577180 conn xmit_rdma 0000000000000000 [ 98.144558][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2239'. [ 98.160294][ T9825] loop0: detected capacity change from 0 to 512 [ 98.168038][ T9825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.176870][ T9825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.212817][ T9825] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 98.246680][ T9825] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2241: Failed to acquire dquot type 1 [ 98.271413][ T9825] EXT4-fs (loop0): 1 truncate cleaned up [ 98.287325][ T9825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.324374][ T9825] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 98.347642][ T9838] bridge0: port 3(batadv1) entered blocking state [ 98.354165][ T9838] bridge0: port 3(batadv1) entered disabled state [ 98.370576][ T9838] batadv1: entered allmulticast mode [ 98.376877][ T9825] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.387142][ T9838] batadv1: entered promiscuous mode [ 98.393728][ T9825] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 98.429123][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.503590][ T9853] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.567714][ T9853] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.634271][ T9853] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.697383][ T9853] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.734906][ T9862] lo speed is unknown, defaulting to 1000 [ 98.827312][ T1887] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.839303][ T1887] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.851268][ T4501] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.859533][ T1887] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.860560][ T4501] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.888958][ T1887] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985526][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2259'. [ 99.032964][ T9873] hub 9-0:1.0: USB hub found [ 99.040345][ T9873] hub 9-0:1.0: 8 ports detected [ 99.089222][ T9875] IPVS: Error connecting to the multicast addr [ 99.168341][ T9879] bridge0: port 3(macsec1) entered blocking state [ 99.174911][ T9879] bridge0: port 3(macsec1) entered disabled state [ 99.208162][ T9879] macsec1: entered allmulticast mode [ 99.213594][ T9879] bridge0: entered allmulticast mode [ 99.225719][ T9879] macsec1: left allmulticast mode [ 99.230782][ T9879] bridge0: left allmulticast mode [ 99.271617][ T9885] lo speed is unknown, defaulting to 1000 [ 99.330213][ T9889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.621700][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.681559][ T9904] loop7: detected capacity change from 0 to 2048 [ 99.698394][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.731971][ T9904] Alternate GPT is invalid, using primary GPT. [ 99.738402][ T9904] loop7: p1 p2 p3 [ 99.742208][ T9904] loop7: partition table partially beyond EOD, truncated [ 100.238473][ T9931] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.933835][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2304'. [ 101.562193][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2313'. [ 101.571061][T10000] lo speed is unknown, defaulting to 1000 [ 101.571075][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2313'. [ 101.616588][ T4482] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.625004][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2313'. [ 101.633882][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2313'. [ 101.646794][ T4482] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.661522][ T4482] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.670008][ T4482] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.074634][T10030] loop0: detected capacity change from 0 to 512 [ 102.086997][T10027] lo speed is unknown, defaulting to 1000 [ 102.120853][T10030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.176096][T10030] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.240154][T10030] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.2327: corrupted inode contents [ 102.308888][T10030] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.2327: mark_inode_dirty error [ 102.325258][T10030] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.2327: corrupted inode contents [ 102.351777][T10030] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2327: mark_inode_dirty error [ 102.391909][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 102.391924][ T29] audit: type=1400 audit(3916056259.951:3227): avc: denied { create } for pid=10029 comm="syz.0.2327" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.474877][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.504109][ T29] audit: type=1400 audit(3916056259.981:3228): avc: denied { add_name } for pid=10029 comm="syz.0.2327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.524604][ T29] audit: type=1400 audit(3916056260.031:3229): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.539429][T10041] loop7: detected capacity change from 0 to 2048 [ 102.614204][T10041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.661577][ T29] audit: type=1400 audit(3916056260.141:3230): avc: denied { execmem } for pid=10042 comm="syz.0.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 102.685815][T10041] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.735552][T10041] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 102.748030][T10041] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.748030][T10041] [ 102.757688][T10041] EXT4-fs (loop7): Total free blocks count 0 [ 102.763711][T10041] EXT4-fs (loop7): Free/Dirty block details [ 102.769607][T10041] EXT4-fs (loop7): free_blocks=2415919104 [ 102.775356][T10041] EXT4-fs (loop7): dirty_blocks=32 [ 102.780470][T10041] EXT4-fs (loop7): Block reservation details [ 102.786466][T10041] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 102.823653][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.915362][ T29] audit: type=1400 audit(3916056260.241:3231): avc: denied { read write } for pid=10040 comm="syz.7.2328" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.938205][ T29] audit: type=1400 audit(3916056260.241:3232): avc: denied { open } for pid=10040 comm="syz.7.2328" path="/145/file1/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.961488][ T29] audit: type=1400 audit(3916056260.431:3233): avc: denied { create } for pid=10046 comm="syz.7.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.982217][ T29] audit: type=1400 audit(3916056260.451:3234): avc: denied { write } for pid=10046 comm="syz.7.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.111403][T10053] wireguard0: entered promiscuous mode [ 103.116978][T10053] wireguard0: entered allmulticast mode [ 103.141097][ T29] audit: type=1326 audit(3916056260.471:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae17f749 code=0x7ffc0000 [ 103.164696][ T29] audit: type=1326 audit(3916056260.471:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae17f749 code=0x7ffc0000 [ 103.266720][T10067] loop0: detected capacity change from 0 to 2048 [ 103.296527][T10067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.428449][T10079] loop9: detected capacity change from 0 to 2048 [ 103.435362][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2342'. [ 103.444248][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2342'. [ 103.482528][T10079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.577782][T10079] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.656889][T10079] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 103.669345][T10079] EXT4-fs (loop9): This should not happen!! Data will be lost [ 103.669345][T10079] [ 103.679041][T10079] EXT4-fs (loop9): Total free blocks count 0 [ 103.685067][T10079] EXT4-fs (loop9): Free/Dirty block details [ 103.690951][T10079] EXT4-fs (loop9): free_blocks=2415919104 [ 103.696696][T10079] EXT4-fs (loop9): dirty_blocks=32 [ 103.701840][T10079] EXT4-fs (loop9): Block reservation details [ 103.707848][T10079] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 103.878838][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.952336][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.021111][T10103] loop8: detected capacity change from 0 to 128 [ 104.050515][T10103] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.065616][T10102] netlink: 'syz.0.2347': attribute type 2 has an invalid length. [ 104.080072][T10103] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.178609][ T9086] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.193926][T10112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10112 comm=syz.9.2356 [ 104.206488][T10112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10112 comm=syz.9.2356 [ 104.237949][T10114] loop0: detected capacity change from 0 to 512 [ 104.262661][T10114] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.277760][T10118] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.291409][T10114] EXT4-fs (loop0): mount failed [ 104.347110][T10126] program syz.0.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.369921][T10130] program syz.9.2364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.406549][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2367'. [ 104.419834][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.427309][T10133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.435335][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.442934][T10133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.554473][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 104.989617][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2391'. [ 105.135379][T10195] netlink: 'syz.7.2404': attribute type 1 has an invalid length. [ 105.675247][T10197] loop7: detected capacity change from 0 to 128 [ 105.692602][T10197] msdos filesystem being mounted at /160/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 105.824087][ T4481] failed to send hello msg [ 105.828567][ T4481] failed while handling packet from 1:60042 [ 105.857001][T10209] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 106.144199][T10227] veth0_to_team: entered promiscuous mode [ 106.187425][T10231] loop9: detected capacity change from 0 to 512 [ 106.194245][T10231] EXT4-fs: Ignoring removed bh option [ 106.204300][T10231] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 106.225385][T10231] EXT4-fs (loop9): 1 truncate cleaned up [ 106.231744][T10231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.276132][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.360610][T10249] __nla_validate_parse: 2 callbacks suppressed [ 106.360625][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2418'. [ 106.446486][T10252] loop7: detected capacity change from 0 to 512 [ 106.458464][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.467793][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.475619][T10252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.484356][T10252] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.518297][T10252] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2419: Allocating blocks 41-42 which overlap fs metadata [ 106.551932][T10252] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2419: Allocating blocks 41-42 which overlap fs metadata [ 106.570436][T10252] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2419: Failed to acquire dquot type 1 [ 106.591483][T10252] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.616278][T10252] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2419: corrupted inode contents [ 106.635635][T10252] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.2419: mark_inode_dirty error [ 106.655939][T10252] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2419: corrupted inode contents [ 106.678740][T10252] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2419: mark_inode_dirty error [ 106.711066][T10252] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2419: corrupted inode contents [ 106.726174][T10252] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 106.734957][T10252] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2419: corrupted inode contents [ 106.747027][T10252] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.2419: mark_inode_dirty error [ 106.758501][T10252] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 106.767641][T10252] EXT4-fs (loop7): 1 truncate cleaned up [ 106.774098][T10252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.803660][T10272] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2428'. [ 106.817883][T10252] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.847077][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.079464][T10303] loop0: detected capacity change from 0 to 764 [ 107.145053][T10300] lo speed is unknown, defaulting to 1000 [ 107.223267][T10300] chnl_net:caif_netlink_parms(): no params data found [ 107.247283][ T4460] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.274901][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.282202][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.290382][T10300] bridge_slave_0: entered allmulticast mode [ 107.297056][T10300] bridge_slave_0: entered promiscuous mode [ 107.305107][ T4460] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.316664][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.323736][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.331391][T10300] bridge_slave_1: entered allmulticast mode [ 107.338062][T10300] bridge_slave_1: entered promiscuous mode [ 107.358644][ T4460] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.372061][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.389151][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.402094][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 107.402110][ T29] audit: type=1326 audit(3916056264.961:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.435471][T10332] loop0: detected capacity change from 0 to 512 [ 107.436038][ T29] audit: type=1326 audit(3916056264.991:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.448439][T10332] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2449: error while reading EA inode 32 err=-116 [ 107.465394][ T29] audit: type=1326 audit(3916056264.991:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.465426][ T29] audit: type=1326 audit(3916056264.991:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.478368][T10332] EXT4-fs (loop0): Remounting filesystem read-only [ 107.502319][ T29] audit: type=1326 audit(3916056265.001:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.530441][T10332] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 107.531241][ T29] audit: type=1326 audit(3916056265.001:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.554779][T10332] EXT4-fs (loop0): 1 orphan inode deleted [ 107.564950][ T29] audit: type=1326 audit(3916056265.001:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.589053][T10332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.594087][ T29] audit: type=1326 audit(3916056265.001:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.652986][ T29] audit: type=1326 audit(3916056265.001:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.676650][ T29] audit: type=1326 audit(3916056265.001:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f79b92005 code=0x7ffc0000 [ 107.701212][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.713165][ T4460] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.725231][T10300] team0: Port device team_slave_0 added [ 107.732337][T10300] team0: Port device team_slave_1 added [ 107.761719][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.768706][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.794685][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.806951][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.813979][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.839978][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.854359][T10342] loop8: detected capacity change from 0 to 128 [ 107.861900][T10342] msdos filesystem being mounted at /104/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 107.923745][ T4460] bridge_slave_1: left allmulticast mode [ 107.929429][ T4460] bridge_slave_1: left promiscuous mode [ 107.935185][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.935301][T10348] loop7: detected capacity change from 0 to 4096 [ 107.950846][ T4460] bridge_slave_0: left allmulticast mode [ 107.956646][ T4460] bridge_slave_0: left promiscuous mode [ 107.962381][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.973609][T10348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.993140][T10348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.037639][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.104390][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.124883][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.143820][ T4460] bond0 (unregistering): Released all slaves [ 108.144154][T10371] loop7: detected capacity change from 0 to 512 [ 108.163175][T10371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.175837][T10371] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.198414][T10300] hsr_slave_0: entered promiscuous mode [ 108.204614][T10300] hsr_slave_1: entered promiscuous mode [ 108.210537][T10300] debugfs: 'hsr0' already exists in 'hsr' [ 108.216315][T10300] Cannot create hsr debugfs directory [ 108.222825][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.231618][T10375] netlink: 'syz.9.2465': attribute type 1 has an invalid length. [ 108.234781][T10339] lo speed is unknown, defaulting to 1000 [ 108.375225][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2475'. [ 108.384341][ T4460] hsr_slave_0: left promiscuous mode [ 108.390906][ T4460] hsr_slave_1: left promiscuous mode [ 108.396892][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.404543][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.416640][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.424143][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.449656][ T4460] veth1_macvtap: left promiscuous mode [ 108.455329][T10403] loop7: detected capacity change from 0 to 1024 [ 108.461738][ T4460] veth0_macvtap: left promiscuous mode [ 108.461786][ T4460] veth1_vlan: left promiscuous mode [ 108.461872][ T4460] veth0_vlan: left promiscuous mode [ 108.492976][T10403] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2477: bad orphan inode 134217728 [ 108.512097][T10403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.628976][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 108.641051][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 108.698556][T10416] loop8: detected capacity change from 0 to 1024 [ 108.706146][T10416] EXT4-fs: Ignoring removed orlov option [ 108.724195][T10416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.749393][T10300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.759753][T10300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.864844][T10300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.875317][T10300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.954100][ T8686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.971201][T10300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.981594][T10300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.027300][T10427] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 109.058536][T10300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.068877][T10300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.170155][T10300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.184450][T10300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.209901][T10300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.221164][T10300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.264090][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.276489][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.285814][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.292938][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.315084][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.322301][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.374022][T10449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.382816][T10449] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.413796][T10449] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2493: Allocating blocks 41-42 which overlap fs metadata [ 109.432015][T10449] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2493: Failed to acquire dquot type 1 [ 109.444323][T10449] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 109.460677][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.470005][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2494'. [ 109.487183][T10449] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2493: corrupted inode contents [ 109.503629][T10449] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2493: mark_inode_dirty error [ 109.517527][T10449] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2493: corrupted inode contents [ 109.560304][T10449] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2493: mark_inode_dirty error [ 109.573509][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.584804][T10449] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2493: corrupted inode contents [ 109.597167][T10449] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 109.624554][T10300] veth0_vlan: entered promiscuous mode [ 109.638408][T10449] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2493: corrupted inode contents [ 109.650586][T10449] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2493: mark_inode_dirty error [ 109.667394][T10449] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 109.679800][T10300] veth1_vlan: entered promiscuous mode [ 109.688490][T10449] EXT4-fs (loop0): 1 truncate cleaned up [ 109.694870][T10449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.719849][T10449] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.732883][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.740087][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.748078][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.790720][T10471] veth0_to_team: left promiscuous mode [ 109.837709][ T4481] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.846112][ T4481] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.867297][T10300] veth0_macvtap: entered promiscuous mode [ 109.890521][ T4481] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.898948][ T4481] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.909780][T10300] veth1_macvtap: entered promiscuous mode [ 109.924359][T10300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.940903][ T4481] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.949304][ T4481] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.962330][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.970324][T10500] netlink: 'syz.8.2517': attribute type 29 has an invalid length. [ 109.983583][ T4501] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.992092][ T4501] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.021227][ T4460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.040517][ T4460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.057282][ T4460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.066547][ T4460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.278343][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2530'. [ 110.358286][T10556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2535'. [ 110.452215][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2542'. [ 110.567498][T10580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.605466][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2550'. [ 111.019703][T10603] set_capacity_and_notify: 2 callbacks suppressed [ 111.019719][T10603] loop0: detected capacity change from 0 to 512 [ 111.084541][T10603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.113942][T10603] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.279957][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.397899][T10580] syz.3.2546 (10580) used greatest stack depth: 7072 bytes left [ 111.447309][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.669785][T10636] loop3: detected capacity change from 0 to 512 [ 111.681527][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 111.690736][T10636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.699564][T10636] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.709119][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 111.731511][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 111.734482][T10636] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2566: Allocating blocks 41-42 which overlap fs metadata [ 111.740899][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 111.766210][T10636] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2566: Failed to acquire dquot type 1 [ 111.788751][T10636] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 111.828976][T10636] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2566: corrupted inode contents [ 111.864440][T10636] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2566: mark_inode_dirty error [ 111.877200][T10636] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2566: corrupted inode contents [ 111.889603][T10636] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2566: mark_inode_dirty error [ 111.908240][T10636] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2566: corrupted inode contents [ 111.920937][T10636] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 111.950561][T10636] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2566: corrupted inode contents [ 111.962985][T10636] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2566: mark_inode_dirty error [ 111.982021][T10636] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 111.993772][T10636] EXT4-fs (loop3): 1 truncate cleaned up [ 112.000904][T10636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.067211][T10636] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.115119][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.158680][T10650] loop3: detected capacity change from 0 to 512 [ 112.167023][T10650] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2571: error while reading EA inode 32 err=-116 [ 112.186358][T10650] EXT4-fs (loop3): Remounting filesystem read-only [ 112.196292][T10653] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.204403][T10650] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 112.252326][T10657] loop8: detected capacity change from 0 to 512 [ 112.258669][T10650] EXT4-fs (loop3): 1 orphan inode deleted [ 112.275362][T10650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.303219][T10657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.319752][T10657] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.417738][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.467797][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.573491][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 112.573507][ T29] audit: type=1401 audit(3916056270.131:3747): op=setxattr invalid_context="" [ 112.664566][ T29] audit: type=1400 audit(3916056270.221:3748): avc: denied { write } for pid=10676 comm="syz.9.2587" name="psched" dev="proc" ino=4026533182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.692538][ T29] audit: type=1400 audit(3916056270.241:3749): avc: denied { create } for pid=10676 comm="syz.9.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.712269][ T29] audit: type=1400 audit(3916056270.251:3750): avc: denied { ioctl } for pid=10676 comm="syz.9.2587" path="socket:[28648]" dev="sockfs" ino=28648 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.749786][T10678] lo speed is unknown, defaulting to 1000 [ 112.782473][ T29] audit: type=1326 audit(3916056270.341:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 112.865169][ T29] audit: type=1326 audit(3916056270.341:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 112.888733][ T29] audit: type=1326 audit(3916056270.341:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 112.912361][ T29] audit: type=1326 audit(3916056270.391:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 113.014762][T10689] loop8: detected capacity change from 0 to 512 [ 113.043102][T10689] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2589: error while reading EA inode 32 err=-116 [ 113.069794][T10689] EXT4-fs (loop8): Remounting filesystem read-only [ 113.078355][T10689] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 113.088801][T10689] EXT4-fs (loop8): 1 orphan inode deleted [ 113.094948][T10689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.120442][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.132378][T10697] bond0: (slave vlan2): Opening slave failed [ 113.189682][ T29] audit: type=1400 audit(3916056270.741:3755): avc: denied { bind } for pid=10705 comm="syz.8.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.225619][ T29] audit: type=1326 audit(3916056270.771:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 113.495722][T10742] loop8: detected capacity change from 0 to 512 [ 113.512808][T10742] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.521574][T10742] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.553271][T10742] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2604: Allocating blocks 41-42 which overlap fs metadata [ 113.608401][T10750] loop0: detected capacity change from 0 to 512 [ 113.624096][T10742] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2604: Allocating blocks 41-42 which overlap fs metadata [ 113.658978][T10750] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2607: bg 0: block 248: padding at end of block bitmap is not set [ 113.673517][T10742] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2604: Failed to acquire dquot type 1 [ 113.701449][T10742] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 113.716296][T10750] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2607: Failed to acquire dquot type 1 [ 113.731700][T10742] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.2604: corrupted inode contents [ 113.744228][T10750] EXT4-fs (loop0): 1 truncate cleaned up [ 113.744347][T10742] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.2604: mark_inode_dirty error [ 113.750309][T10750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.773918][T10742] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.2604: corrupted inode contents [ 113.786072][T10742] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.2604: mark_inode_dirty error [ 113.797502][T10750] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.813565][T10742] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.2604: corrupted inode contents [ 113.836450][T10742] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 113.845741][T10742] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.2604: corrupted inode contents [ 113.846328][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.868545][T10742] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.2604: mark_inode_dirty error [ 113.879893][ T4461] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 113.881665][T10742] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 113.900452][T10742] EXT4-fs (loop8): 1 truncate cleaned up [ 113.906735][T10742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.937153][T10764] loop0: detected capacity change from 0 to 1024 [ 113.963874][T10764] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2622: bad orphan inode 134217728 [ 113.975201][T10742] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.985181][T10764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.031645][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.049254][T10774] loop7: detected capacity change from 0 to 512 [ 114.079318][T10774] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 114.095097][T10777] lo speed is unknown, defaulting to 1000 [ 114.133170][T10780] netlink: 'syz.9.2620': attribute type 21 has an invalid length. [ 114.161364][T10780] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2620'. [ 114.170438][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2620'. [ 114.250302][T10788] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 114.374957][T10797] xt_NFQUEUE: number of total queues is 0 [ 114.384121][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.446054][T10811] loop9: detected capacity change from 0 to 512 [ 114.465556][T10811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.478545][T10811] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.535145][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.596901][T10830] lo speed is unknown, defaulting to 1000 [ 114.709589][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2649'. [ 114.780500][T10851] lo speed is unknown, defaulting to 1000 [ 115.167638][T10867] lo speed is unknown, defaulting to 1000 [ 115.242727][T10877] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.293239][T10877] vfat filesystem being mounted at /157/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 115.315089][T10885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.332279][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.341298][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.406245][T10885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.569295][T10885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.655460][T10885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.728227][ T4483] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.748425][ T4483] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.766809][ T4483] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.781276][ T4483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.049547][T10913] lo speed is unknown, defaulting to 1000 [ 116.059283][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 116.314441][T10925] set_capacity_and_notify: 1 callbacks suppressed [ 116.314456][T10925] loop9: detected capacity change from 0 to 512 [ 116.328106][T10925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.336946][T10925] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.362763][T10925] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2679: Allocating blocks 41-42 which overlap fs metadata [ 116.385627][T10925] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2679: Failed to acquire dquot type 1 [ 116.398608][T10925] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 116.420479][T10925] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2679: corrupted inode contents [ 116.432961][T10925] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.2679: mark_inode_dirty error [ 116.441161][T10939] netlink: 'syz.8.2686': attribute type 2 has an invalid length. [ 116.456566][T10925] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2679: corrupted inode contents [ 116.468834][T10925] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.2679: mark_inode_dirty error [ 116.491048][T10925] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2679: corrupted inode contents [ 116.519887][T10925] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 116.529987][T10944] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.542160][T10946] loop3: detected capacity change from 0 to 1024 [ 116.551606][T10925] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2679: corrupted inode contents [ 116.570733][T10946] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2687: bad orphan inode 134217728 [ 116.585558][T10925] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.2679: mark_inode_dirty error [ 116.607675][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.615008][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.619581][T10946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.636365][T10954] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.644422][T10925] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 116.654766][T10925] EXT4-fs (loop9): 1 truncate cleaned up [ 116.666579][T10925] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.695405][T10956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10956 comm=syz.7.2691 [ 116.707982][T10956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10956 comm=syz.7.2691 [ 116.712576][T10948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.751367][T10948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.783471][T10944] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.823569][T10925] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 116.842233][ T4483] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.896860][T10944] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.924742][ T4483] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.939236][ T4483] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.948221][ T4483] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.958287][T10970] loop7: detected capacity change from 0 to 512 [ 116.983269][T10944] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.007134][T10970] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.026129][T10970] EXT4-fs (loop7): mount failed [ 117.032021][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.081236][ T4450] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.097325][ T4483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.115808][ T4483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.133239][ T4483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.141626][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2697'. [ 117.175300][T10980] netlink: 'syz.8.2700': attribute type 1 has an invalid length. [ 117.184488][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.207931][T10983] program syz.7.2702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.223241][T10986] netlink: 'syz.3.2701': attribute type 2 has an invalid length. [ 117.242591][T10987] lo speed is unknown, defaulting to 1000 [ 117.253638][T10990] loop8: detected capacity change from 0 to 1024 [ 117.272916][T10990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.302057][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.331435][T10995] loop3: detected capacity change from 0 to 512 [ 117.340538][T10999] lo speed is unknown, defaulting to 1000 [ 117.375356][T10995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.375475][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 117.396789][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2709'. [ 117.405823][T11007] netlink: 'syz.7.2709': attribute type 6 has an invalid length. [ 117.422188][T10995] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.453986][ T4468] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.462333][ T4483] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.462357][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 117.471301][ T4483] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.479391][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2709'. [ 117.491680][T10995] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2707: corrupted inode contents [ 117.496496][T11007] netlink: 'syz.7.2709': attribute type 6 has an invalid length. [ 117.526335][ T4483] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.536009][T10995] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.2707: mark_inode_dirty error [ 117.547572][T10995] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2707: corrupted inode contents [ 117.571024][T10995] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2707: mark_inode_dirty error [ 117.605061][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.643441][T11015] loop8: detected capacity change from 0 to 1024 [ 117.673926][T11015] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2712: bad orphan inode 134217728 [ 117.691944][T11015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.741455][T11021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11021 comm=syz.7.2716 [ 117.754045][T11021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11021 comm=syz.7.2716 [ 117.817513][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 117.817536][ T29] audit: type=1400 audit(3916056275.361:3893): avc: denied { nlmsg_read } for pid=11025 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.865065][T11028] netlink: 'syz.7.2718': attribute type 2 has an invalid length. [ 118.081603][ T29] audit: type=1326 audit(3916056275.641:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.137126][ T29] audit: type=1326 audit(3916056275.661:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.161284][ T29] audit: type=1326 audit(3916056275.661:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.184821][ T29] audit: type=1326 audit(3916056275.661:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.208387][ T29] audit: type=1326 audit(3916056275.661:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.231915][ T29] audit: type=1326 audit(3916056275.661:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.255503][ T29] audit: type=1326 audit(3916056275.661:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.279578][ T29] audit: type=1326 audit(3916056275.661:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.303180][ T29] audit: type=1326 audit(3916056275.661:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2423f749 code=0x7ffc0000 [ 118.334484][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.455282][T11075] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 118.500609][T11084] loop8: detected capacity change from 0 to 512 [ 118.520306][T11084] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 118.548630][T11090] netlink: 'syz.0.2747': attribute type 9 has an invalid length. [ 118.556512][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 118.567071][T11084] EXT4-fs (loop8): 1 truncate cleaned up [ 118.578981][T11090] hsr0: entered promiscuous mode [ 118.596020][T11084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.608341][T11090] macvlan2: entered promiscuous mode [ 118.613832][T11090] macvlan2: entered allmulticast mode [ 118.619278][T11090] hsr0: entered allmulticast mode [ 118.624393][T11090] hsr_slave_0: entered allmulticast mode [ 118.630040][T11090] hsr_slave_1: entered allmulticast mode [ 118.750408][T11108] rdma_op ffff88810e652580 conn xmit_rdma 0000000000000000 [ 118.816538][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.109530][T11121] lo speed is unknown, defaulting to 1000 [ 119.121913][T11126] vhci_hcd vhci_hcd.3: default hub control req: 2312 v0002 i0000 l0 [ 119.155175][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'. [ 119.169251][T11136] loop8: detected capacity change from 0 to 512 [ 119.191744][T11136] EXT4-fs: Ignoring removed nobh option [ 119.216384][T11141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2768'. [ 119.216422][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2770'. [ 119.244275][T11136] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.267056][T11136] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.395082][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 119.458366][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.649052][T11189] netem: change failed [ 119.927083][T11241] loop8: detected capacity change from 0 to 1024 [ 119.930344][T11243] loop9: detected capacity change from 0 to 1024 [ 119.947058][T11243] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2814: bad orphan inode 134217728 [ 119.960558][T11241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.962711][T11250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.984012][T11243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.025732][T11254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.042286][ T9086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.051928][T11254] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2818: invalid block [ 120.058848][T11258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.075667][T11258] EXT4-fs (loop3): 1 truncate cleaned up [ 120.081908][T11258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.097297][T11258] EXT4-fs (loop3): shut down requested (0) [ 120.104779][T11254] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2818: invalid indirect mapped block 4294967295 (level 1) [ 120.119193][T11258] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.128631][T11258] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.148615][T11254] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2818: invalid indirect mapped block 4294967295 (level 1) [ 120.178091][T11254] EXT4-fs (loop7): 2 truncates cleaned up [ 120.291076][T11279] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.309524][T11279] vfat filesystem being mounted at /58/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 121.266450][T11340] EXT4-fs: Ignoring removed oldalloc option [ 121.272546][T11340] EXT4-fs: Ignoring removed bh option [ 121.306979][T11340] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2858: Allocating blocks 497-513 which overlap fs metadata [ 121.308651][T11348] EXT4-fs: inline encryption not supported [ 121.326764][T11348] EXT4-fs: Ignoring removed orlov option [ 121.336581][T11348] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.382770][T11358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11358 comm=syz.0.2863 [ 121.395400][T11358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11358 comm=syz.0.2863 [ 121.433749][T11360] set_capacity_and_notify: 5 callbacks suppressed [ 121.433764][T11360] loop3: detected capacity change from 0 to 1024 [ 121.456799][T11360] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2866: bad orphan inode 134217728 [ 121.468506][T11357] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 121.524497][T11373] tls_set_device_offload_rx: netdev not found [ 121.679748][T11384] syzkaller1: entered promiscuous mode [ 121.685275][T11384] syzkaller1: entered allmulticast mode [ 121.725156][T11397] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 121.736703][T11396] IPVS: stopping master sync thread 11397 ... [ 121.900452][T11419] lo speed is unknown, defaulting to 1000 [ 121.940041][T11426] loop8: detected capacity change from 0 to 1024 [ 121.957419][T11426] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.968372][T11426] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.995906][T11432] loop0: detected capacity change from 0 to 1024 [ 122.003386][T11426] JBD2: no valid journal superblock found [ 122.009128][T11426] EXT4-fs (loop8): Could not load journal inode [ 122.017126][T11432] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2900: bad orphan inode 134217728 [ 122.131992][T11452] netlink: 'syz.3.2908': attribute type 3 has an invalid length. [ 122.186311][T11462] __nla_validate_parse: 10 callbacks suppressed [ 122.186375][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2913'. [ 122.238266][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 122.271549][T11465] netlink: 'syz.8.2914': attribute type 29 has an invalid length. [ 122.354875][T11473] loop3: detected capacity change from 0 to 1024 [ 122.397253][T11473] EXT4-fs: inline encryption not supported [ 122.403131][T11473] EXT4-fs: Ignoring removed orlov option [ 122.415024][T11473] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.434785][T11484] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 122.612393][T11522] loop9: detected capacity change from 0 to 1024 [ 122.630398][T11525] loop7: detected capacity change from 0 to 1024 [ 122.637471][T11522] EXT4-fs: inline encryption not supported [ 122.643373][T11522] EXT4-fs: Ignoring removed orlov option [ 122.656107][T11522] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.674663][T11525] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2942: bad orphan inode 134217728 [ 122.713352][T11538] bridge0: port 3(ipvlan2) entered blocking state [ 122.719921][T11538] bridge0: port 3(ipvlan2) entered disabled state [ 122.738728][T11538] ipvlan2: entered allmulticast mode [ 122.744079][T11538] bridge0: entered allmulticast mode [ 122.765237][T11538] ipvlan2: left allmulticast mode [ 122.770380][T11538] bridge0: left allmulticast mode [ 122.833845][T11540] syzkaller0: entered promiscuous mode [ 122.839398][T11540] syzkaller0: entered allmulticast mode [ 122.893339][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 122.903668][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 122.913324][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 122.927779][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 123.098186][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 123.098202][ T29] audit: type=1326 audit(3916056280.651:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.191179][ T29] audit: type=1326 audit(3916056280.681:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.214787][ T29] audit: type=1326 audit(3916056280.681:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.238301][ T29] audit: type=1326 audit(3916056280.681:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.261916][ T29] audit: type=1326 audit(3916056280.681:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.285475][ T29] audit: type=1326 audit(3916056280.681:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.309042][ T29] audit: type=1326 audit(3916056280.701:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.332588][ T29] audit: type=1326 audit(3916056280.701:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.356122][ T29] audit: type=1326 audit(3916056280.701:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.379626][ T29] audit: type=1326 audit(3916056280.701:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 123.955098][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2961'. [ 124.007181][T11593] loop3: detected capacity change from 0 to 1024 [ 124.015365][T11593] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.026437][T11593] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.036986][T11593] JBD2: no valid journal superblock found [ 124.042814][T11593] EXT4-fs (loop3): Could not load journal inode [ 124.068370][T11605] loop3: detected capacity change from 0 to 512 [ 124.346296][T11617] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2981'. [ 125.327119][T11674] netlink: 'syz.7.3005': attribute type 21 has an invalid length. [ 125.351344][T11674] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3005'. [ 125.360435][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3005'. [ 125.387501][T11678] loop8: detected capacity change from 0 to 4096 [ 126.025440][T11709] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.193896][T11713] SELinux: policydb version 0 does not match my version range 15-35 [ 126.216518][T11713] SELinux: failed to load policy [ 126.354879][T11721] netlink: 'syz.8.3023': attribute type 29 has an invalid length. [ 126.384713][T11721] netlink: 'syz.8.3023': attribute type 29 has an invalid length. [ 126.458838][T11729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.604053][T11743] xt_NFQUEUE: number of total queues is 0 [ 126.748032][T11752] loop9: detected capacity change from 0 to 512 [ 126.777406][T11752] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3038: bg 0: block 248: padding at end of block bitmap is not set [ 126.807413][T11752] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3038: Failed to acquire dquot type 1 [ 126.829451][T11752] EXT4-fs (loop9): 1 truncate cleaned up [ 126.841724][T11752] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.893645][ T4481] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:44: Failed to release dquot type 1 [ 126.965751][T11758] loop9: detected capacity change from 0 to 4096 [ 127.917612][T11766] __nla_validate_parse: 4 callbacks suppressed [ 127.917629][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3043'. [ 127.921346][T11768] loop9: detected capacity change from 0 to 512 [ 127.931184][T11766] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3043'. [ 127.948182][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3043'. [ 127.951684][T11768] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.985576][T11768] vfat filesystem being mounted at /228/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 128.077415][T11781] loop3: detected capacity change from 0 to 512 [ 128.092825][T11781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3051: bg 0: block 248: padding at end of block bitmap is not set [ 128.114273][T11781] __quota_error: 124 callbacks suppressed [ 128.114289][T11781] Quota error (device loop3): write_blk: dquota write failed [ 128.122715][ T29] audit: type=1400 audit(3916056285.671:4263): avc: denied { map_create } for pid=11787 comm="syz.9.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.127469][T11781] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 128.146652][ T29] audit: type=1400 audit(3916056285.671:4264): avc: denied { bpf } for pid=11787 comm="syz.9.3053" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.177488][ T29] audit: type=1400 audit(3916056285.711:4265): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.201690][ T29] audit: type=1400 audit(3916056285.711:4266): avc: denied { open } for pid=3323 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.225894][ T29] audit: type=1400 audit(3916056285.711:4267): avc: denied { ioctl } for pid=3323 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.251530][ T29] audit: type=1400 audit(3916056285.721:4268): avc: denied { map_read map_write } for pid=11787 comm="syz.9.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.278989][ T29] audit: type=1400 audit(3916056285.741:4269): avc: denied { prog_load } for pid=11787 comm="syz.9.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.298203][ T29] audit: type=1400 audit(3916056285.741:4270): avc: denied { perfmon } for pid=11787 comm="syz.9.3053" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.303717][T11781] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3051: Failed to acquire dquot type 1 [ 128.339587][T11794] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 128.357977][T11781] EXT4-fs (loop3): 1 truncate cleaned up [ 128.366070][T11781] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.420248][ T1887] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 128.560617][T11829] loop3: detected capacity change from 0 to 128 [ 128.567080][T11830] loop8: detected capacity change from 0 to 512 [ 128.569083][T11829] vfat filesystem being mounted at /94/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 128.589109][T11829] syz.3.3074: attempt to access beyond end of device [ 128.589109][T11829] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 128.595408][T11830] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3073: bg 0: block 248: padding at end of block bitmap is not set [ 128.602817][T11829] syz.3.3074: attempt to access beyond end of device [ 128.602817][T11829] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 128.617131][T11830] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3073: Failed to acquire dquot type 1 [ 128.630835][T11819] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 128.650118][T11830] EXT4-fs (loop8): 1 truncate cleaned up [ 128.651493][T11819] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 128.656215][T11830] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.664039][T11829] syz.3.3074: attempt to access beyond end of device [ 128.664039][T11829] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 128.688035][T11829] syz.3.3074: attempt to access beyond end of device [ 128.688035][T11829] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 128.704441][T11829] syz.3.3074: attempt to access beyond end of device [ 128.704441][T11829] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 128.718145][T11829] syz.3.3074: attempt to access beyond end of device [ 128.718145][T11829] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 128.718853][ T4461] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 128.731609][T11829] syz.3.3074: attempt to access beyond end of device [ 128.731609][T11829] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 128.756680][T11829] syz.3.3074: attempt to access beyond end of device [ 128.756680][T11829] loop3: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 128.822723][T11844] netlink: 256 bytes leftover after parsing attributes in process `ÿ'. [ 128.895086][T11856] loop8: detected capacity change from 0 to 1024 [ 128.916513][T11856] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.921863][ T4462] nci: nci_rx_work: unknown MT 0x6 [ 128.939340][T11869] SELinux: failed to load policy [ 129.132772][T11873] loop7: detected capacity change from 0 to 512 [ 129.152502][T11873] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3086: bg 0: block 248: padding at end of block bitmap is not set [ 129.167074][T11873] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3086: Failed to acquire dquot type 1 [ 129.179894][T11873] EXT4-fs (loop7): 1 truncate cleaned up [ 129.186463][T11873] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.212831][ T4481] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:44: Failed to release dquot type 1 [ 129.307374][T11893] loop7: detected capacity change from 0 to 1024 [ 129.407003][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3107'. [ 129.646069][T11909] netlink: 'syz.7.3100': attribute type 3 has an invalid length. [ 129.704590][T11916] loop3: detected capacity change from 0 to 512 [ 129.732585][T11916] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3103: bg 0: block 248: padding at end of block bitmap is not set [ 129.750167][T11916] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3103: Failed to acquire dquot type 1 [ 129.762006][T11916] EXT4-fs (loop3): 1 truncate cleaned up [ 129.768236][T11916] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.802236][ T4462] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 1 [ 129.842761][T11936] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.872482][T11936] vfat filesystem being mounted at /314/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 129.938040][T11946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.131503][T11955] netlink: 'syz.7.3121': attribute type 10 has an invalid length. [ 130.139359][T11955] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3121'. [ 130.165602][T11955] team0: entered promiscuous mode [ 130.170660][T11955] team_slave_0: entered promiscuous mode [ 130.176365][T11955] team_slave_1: entered promiscuous mode [ 130.192440][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'. [ 130.205580][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.221468][T11955] bridge0: port 3(team0) entered blocking state [ 130.227806][T11955] bridge0: port 3(team0) entered disabled state [ 130.234357][T11955] team0: entered allmulticast mode [ 130.239517][T11955] team_slave_0: entered allmulticast mode [ 130.245325][T11955] team_slave_1: entered allmulticast mode [ 130.300057][T11967] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.319495][T11967] vfat filesystem being mounted at /100/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 130.498064][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3138'. [ 130.862875][T12024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12024 comm=syz.0.3151 [ 130.875502][T12024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12024 comm=syz.0.3151 [ 130.961721][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 130.970623][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'. [ 130.979623][T12039] netlink: 'syz.0.3158': attribute type 6 has an invalid length. [ 130.992853][ T4462] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.001854][T12039] netlink: 'syz.0.3158': attribute type 6 has an invalid length. [ 131.009770][ T4462] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.022528][ T4462] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.051216][ T4462] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.208047][T12066] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 131.227806][T12066] EXT4-fs (loop7): 1 truncate cleaned up [ 132.381172][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.466176][T12123] hub 9-0:1.0: USB hub found [ 132.481405][T12123] hub 9-0:1.0: 8 ports detected [ 132.563611][T12139] netlink: 'syz.3.3203': attribute type 12 has an invalid length. [ 132.615718][T12151] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 132.687758][T12157] netlink: 'syz.3.3212': attribute type 21 has an invalid length. [ 132.720511][T12169] set_capacity_and_notify: 4 callbacks suppressed [ 132.720528][T12169] loop8: detected capacity change from 0 to 128 [ 132.735524][T12169] EXT4-fs mount: 42 callbacks suppressed [ 132.735538][T12169] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.754870][T12169] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.768970][T12169] netlink: zone id is out of range [ 132.774177][T12169] netlink: zone id is out of range [ 132.780609][T12169] netlink: zone id is out of range [ 132.785869][T12169] netlink: zone id is out of range [ 132.792417][T12169] netlink: zone id is out of range [ 132.797548][T12169] netlink: zone id is out of range [ 132.802757][T12169] netlink: zone id is out of range [ 132.807880][T12169] netlink: zone id is out of range [ 132.813094][T12169] netlink: zone id is out of range [ 132.896438][ T9086] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.947413][T12197] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 133.039182][T12210] sd 0:0:1:0: device reset [ 133.113250][T12217] SELinux: failed to load policy [ 133.121673][T12221] __nla_validate_parse: 8 callbacks suppressed [ 133.121717][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 133.196381][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 133.196395][ T29] audit: type=1400 audit(3916056290.751:4472): avc: denied { execute } for pid=12226 comm="syz.7.3243" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.242310][ T29] audit: type=1400 audit(3916056290.751:4473): avc: denied { execute_no_trans } for pid=12226 comm="syz.7.3243" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.256237][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 133.280746][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 133.318274][ T29] audit: type=1326 audit(3916056290.871:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 133.357002][ T29] audit: type=1326 audit(3916056290.901:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 133.380656][ T29] audit: type=1326 audit(3916056290.901:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 133.404298][ T29] audit: type=1326 audit(3916056290.901:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 133.427939][ T29] audit: type=1326 audit(3916056290.901:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094daf749 code=0x7ffc0000 [ 133.451548][ T29] audit: type=1400 audit(3916056290.911:4479): avc: denied { relabelfrom } for pid=12231 comm="syz.8.3246" name="" dev="pipefs" ino=33535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.504598][ T29] audit: type=1400 audit(3916056291.061:4480): avc: denied { append } for pid=12242 comm="syz.0.3260" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.528113][ T29] audit: type=1400 audit(3916056291.061:4481): avc: denied { read } for pid=12242 comm="syz.0.3260" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.580161][T12250] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3253'. [ 133.589267][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3253'. [ 133.598155][T12250] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3253'. [ 133.607205][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3253'. [ 133.616100][T12250] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3253'. [ 133.751166][T12281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.771916][T12283] netlink: 'syz.8.3270': attribute type 1 has an invalid length. [ 133.839244][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3276'. [ 133.912171][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3284'. [ 133.959410][T12320] loop9: detected capacity change from 0 to 512 [ 133.966043][T12320] EXT4-fs: Ignoring removed nobh option [ 133.990573][T12320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.005749][T12320] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.140938][ T9477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.229650][T12357] netlink: 'syz.7.3303': attribute type 6 has an invalid length. [ 134.241293][T12355] loop3: detected capacity change from 0 to 1024 [ 134.247908][T12355] EXT4-fs: Ignoring removed orlov option [ 134.272313][T12355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.756494][T12379] netlink: 'syz.0.3311': attribute type 29 has an invalid length. [ 134.963651][T12355] ================================================================== [ 134.971762][T12355] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 134.979763][T12355] [ 134.982089][T12355] write to 0xffff888107b1828c of 4 bytes by task 12370 on cpu 0: [ 134.989798][T12355] xas_set_mark+0x12b/0x140 [ 134.994317][T12355] __folio_start_writeback+0x155/0x340 [ 134.999795][T12355] ext4_bio_write_folio+0x5ad/0x9f0 [ 135.005009][T12355] mpage_process_page_bufs+0x4a1/0x620 [ 135.010476][T12355] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 135.016297][T12355] ext4_do_writepages+0x6fe/0x27e0 [ 135.021428][T12355] ext4_writepages+0x179/0x300 [ 135.026195][T12355] do_writepages+0x1c6/0x310 [ 135.030793][T12355] file_write_and_wait_range+0x156/0x2c0 [ 135.036429][T12355] generic_buffers_fsync_noflush+0x45/0x130 [ 135.042329][T12355] ext4_sync_file+0x1ab/0x690 [ 135.047015][T12355] vfs_fsync_range+0x10d/0x130 [ 135.051790][T12355] ext4_buffered_write_iter+0x34f/0x3c0 [ 135.057350][T12355] ext4_file_write_iter+0x387/0xf60 [ 135.062572][T12355] iter_file_splice_write+0x66b/0xa20 [ 135.067948][T12355] direct_splice_actor+0x156/0x2a0 [ 135.073068][T12355] splice_direct_to_actor+0x312/0x680 [ 135.078452][T12355] do_splice_direct+0xda/0x150 [ 135.083216][T12355] do_sendfile+0x380/0x650 [ 135.087643][T12355] __x64_sys_sendfile64+0x105/0x150 [ 135.092847][T12355] x64_sys_call+0x2db1/0x3000 [ 135.097535][T12355] do_syscall_64+0xca/0x2b0 [ 135.102044][T12355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.107941][T12355] [ 135.110267][T12355] read to 0xffff888107b1828c of 4 bytes by task 12355 on cpu 1: [ 135.117899][T12355] file_write_and_wait_range+0x10e/0x2c0 [ 135.123535][T12355] generic_buffers_fsync_noflush+0x45/0x130 [ 135.129423][T12355] ext4_sync_file+0x1ab/0x690 [ 135.134087][T12355] vfs_fsync_range+0x10d/0x130 [ 135.138843][T12355] ext4_buffered_write_iter+0x34f/0x3c0 [ 135.144395][T12355] ext4_file_write_iter+0x387/0xf60 [ 135.149598][T12355] iter_file_splice_write+0x66b/0xa20 [ 135.154966][T12355] direct_splice_actor+0x156/0x2a0 [ 135.160071][T12355] splice_direct_to_actor+0x312/0x680 [ 135.165438][T12355] do_splice_direct+0xda/0x150 [ 135.170188][T12355] do_sendfile+0x380/0x650 [ 135.174598][T12355] __x64_sys_sendfile64+0x105/0x150 [ 135.179792][T12355] x64_sys_call+0x2db1/0x3000 [ 135.184467][T12355] do_syscall_64+0xca/0x2b0 [ 135.188958][T12355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.194844][T12355] [ 135.197153][T12355] value changed: 0x0a000021 -> 0x04000021 [ 135.202861][T12355] [ 135.205171][T12355] Reported by Kernel Concurrency Sanitizer on: [ 135.211322][T12355] CPU: 1 UID: 0 PID: 12355 Comm: syz.3.3305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.221124][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.231260][T12355] ================================================================== [ 135.309846][T10300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.