last executing test programs: 1m58.86088388s ago: executing program 2 (id=309): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) 1m58.813930204s ago: executing program 2 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m58.293563466s ago: executing program 32 (id=317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.37532496s ago: executing program 2 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) 1m56.114847003s ago: executing program 2 (id=343): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 1m55.830034626s ago: executing program 2 (id=346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0xa7, 0x30, 0x3, 0x2}, &(0x7f00000000c0)=0x18) 1m55.449906586s ago: executing program 2 (id=351): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m55.449692487s ago: executing program 33 (id=351): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m43.266645566s ago: executing program 0 (id=617): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001940)="147c000000000000000066c9824bb25c", 0x10}], 0x2) 1m42.998705677s ago: executing program 0 (id=631): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dioread_lock}, {@noquota}, {@grpid}]}, 0x1, 0x4db, &(0x7f0000001480)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pivot_root(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 1m42.150058554s ago: executing program 0 (id=644): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m42.07229424s ago: executing program 0 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 1m41.989180117s ago: executing program 0 (id=648): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.988906697s ago: executing program 0 (id=649): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1m41.983395907s ago: executing program 34 (id=649): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1m39.207526032s ago: executing program 4 (id=688): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5", 0xb, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.019311669s ago: executing program 4 (id=704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) 1m37.179790827s ago: executing program 4 (id=716): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m36.509904911s ago: executing program 4 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 1m36.379457102s ago: executing program 4 (id=725): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1m36.069184447s ago: executing program 4 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m36.008211712s ago: executing program 35 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m7.137687133s ago: executing program 8 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x210) socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r3) 1m7.118463215s ago: executing program 8 (id=1302): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) 1m6.650270223s ago: executing program 8 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m6.570955999s ago: executing program 8 (id=1307): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m6.233217006s ago: executing program 8 (id=1319): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1002000, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000500)=""/126, 0x7e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m5.997662596s ago: executing program 8 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1m5.979480017s ago: executing program 36 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1m1.848777192s ago: executing program 6 (id=1398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 1m1.669773627s ago: executing program 6 (id=1404): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r1 = syz_open_pts(r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = eventfd(0x10) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r3}]) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.415757157s ago: executing program 6 (id=1411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffd8ef, @my=0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m1.351193312s ago: executing program 6 (id=1414): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m1.018840169s ago: executing program 6 (id=1423): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 1m0.981331183s ago: executing program 6 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 1m0.956815025s ago: executing program 37 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 3.976230117s ago: executing program 5 (id=2427): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8}, 0x10) shutdown(r0, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000540)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90) 3.141897115s ago: executing program 7 (id=2436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.113204857s ago: executing program 5 (id=2440): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @rand_addr=0x64010106}, 0x104, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)='ip6_vti0\x00', 0x9a, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x20e, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x8, 0x0, 0x20000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) munmap(&(0x7f00001d9000/0x3000)=nil, 0x3000) 2.959566959s ago: executing program 7 (id=2441): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.957327669s ago: executing program 5 (id=2442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x48010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 2.919873063s ago: executing program 5 (id=2443): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.879803686s ago: executing program 5 (id=2445): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x20000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r2, 0xffffffffffffffff, 0x0) 2.836311719s ago: executing program 7 (id=2447): connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010040000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) 2.776586914s ago: executing program 7 (id=2448): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$kcm(0x2, 0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x9c9d}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.775030124s ago: executing program 5 (id=2450): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1f5a685a}, 0x4c58, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r2}, 0x20) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.653818604s ago: executing program 3 (id=2453): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xf9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.554584162s ago: executing program 3 (id=2454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.411365984s ago: executing program 3 (id=2455): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="79de00000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 2.275859075s ago: executing program 3 (id=2456): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) truncate(&(0x7f0000000000)='./bus\x00', 0x6) 2.054043223s ago: executing program 9 (id=2458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1.877604067s ago: executing program 7 (id=2460): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x404cc84) 1.47562248s ago: executing program 9 (id=2462): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e3453a7b706369d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.338497491s ago: executing program 3 (id=2464): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 743.142399ms ago: executing program 3 (id=2465): mkdirat(0xffffffffffffff9c, 0x0, 0x4a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 626.486879ms ago: executing program 9 (id=2467): symlink(&(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$eJzs3U9oXNUaAPDvziR5SZv30j4ej9fyHi/QRQuPpklfserGti7somDBLkRcNDRJDZ3+oUnBxoIJuFBQEHEr0o3g2r10704EdedaqCIVBZWO3Jk77SSZSaZJZm6S+/vBzdxz7p0555s7Z+659+bMDaCwRtM/pYgDEQ8vJhEjTcuGo75wNFvvwU93LqVTEtXqSz8mkWR5jfWT7HFvlhiMiC/PRPy9vLrcudsLVyYr1bo3I47NX71xbO72wtHZq5OXpy9PX5s4/vSJk+PPTJyY2JI492aPZ8+9+O/33nrtqZmvKkeTOBUX+t+YihVxbJXRGI2HWYjN+X0RcTKdafG+7DS7IIRCK2efx/6I+GeMRLmWqhuJ2XdzrRzQVdVyRBUoqGQz7f/TBV8fsGM1+gGNY/vOjoMvdLlX0jv3T9cPgFbH31c/NxKDtWOjPQ+SpiOj+rmNfVtQflrGH3cOfpROsew8xK+Ptk7fFpTTzuJSRPyrVfxJrW77apGm8ZeW1SOJiPGIGMjq9/wm6pA0zXfjPMxaNhp/KSJOZY9p/pkNlj+6It3r+AEopnunsx35Ypp6vP9L+x6N/k+06P8Mt9h3bUTe+7/2/b/G/n6wdo68tKIflvZZzrd+yf6VGd+9c/aDduU39//SKS2/0RfshftLEQdXxP92GmzW/0njT1ps/3SVi6c6K+OFr384225Z3vFX70Ycbnn887hXms6tcX3y2MxsZXq8/rdlGZ9/8eon7crPO/50++9pE3/T9i+tfF76ntzosIzPzt+92m7Z8Lrxl74fSOrHmwNZzuuT8/M3JyIGknPZKk35x9euS2Odxmuk8R851Lr9L/v8Ly1/naHGV2YHbrx85UG7Zc3bP0nq9Vhv+zddTH5Y7bAO7aTxT62//Ve1/zTv/Q7L+OWVW/9pt2ytz//QZgIDAAAAAACAAirVrsEmpbFH86XS2Fh9vOw/Yk+pcn1u/n8z129dm4o4Uvt/yP5S40r3SD2dpOmJ7P9hG+njK9L/j4j9EfFheaiWHrt0vTKVd/AAAAAAAAAAAAAAAAAAAACwTezNxv837lP9c7k+/h8oiG7eYA7Y3rR/KK5a+191iyegCNrt/+d6XA+g9/T/obi0fygu7R+KS/uH4tL+obi0fygu7R8AAAAAdqX9/733bRIRi88O1abUQLbMiCDY3frzrgCQm3LeFQBy8+jSv84+FE5H/f/fsh8H7H51gBwkrTJrnYPq2o3/XstnAgAAAAAAAAAAAABdcPhA+/H/xgbD7vYEw/6WulkPoPc2Mf7fTwfADuen/6G4NnyMP7i19QDys94o/rbN3fh/AAAAAAAAAAAAAOiZ4dqUlMayscDDUSqNjUX8NSL2RX8yM1uZHo+Iv0XEN+X+v6TpibwrDQAAAAAAAAAAAAAAAAAAALvM3O2FK5OVyvTN5pnfV+Xs7pnGXVB7UNZz8YTPiqT3b8tQROS+Ubo209eUk0Qsplt+W1Ts5lxsj2rUZnL+YgIAAAAAAAAAAAAAAAAAgAJqGnvc2sGPe1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi9x/f/f9KZQx2vnHeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDO9GcAAAD//4+rO+Q=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 427.927185ms ago: executing program 7 (id=2469): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r3, r0, 0x0, 0x3ffff) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r3, r0, 0x0, 0x7fffeffd) 427.187185ms ago: executing program 1 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x91) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 272.766907ms ago: executing program 9 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 271.253067ms ago: executing program 1 (id=2471): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000001d0000000400000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 153.646787ms ago: executing program 1 (id=2472): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 145.600788ms ago: executing program 9 (id=2473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_RMID(0x0, 0x0) getgid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getgid() 107.006601ms ago: executing program 1 (id=2474): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 61.572175ms ago: executing program 1 (id=2475): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf6, r4, 0x1, 0x0, 0x6, @random="45e0062a0317"}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x400c4) 53.845245ms ago: executing program 9 (id=2476): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 1 (id=2477): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ebe9 code=0x7ffc0000 [ 104.122536][ T29] audit: type=1326 audit(1755121075.731:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 104.145931][ T29] audit: type=1326 audit(1755121075.731:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 104.169329][ T29] audit: type=1326 audit(1755121075.731:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 104.355263][ T5498] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.452148][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1257'. [ 104.461371][ T6958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.471617][ T6958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.481919][ T6958] batman_adv: batadv0: Removing interface: dummy0 [ 104.503698][ T6958] bond0: (slave batadv0): Releasing backup interface [ 104.684830][ T6980] netlink: 'syz.8.1269': attribute type 13 has an invalid length. [ 104.724686][ T6980] 8021q: adding VLAN 0 to HW filter on device $H [ 104.737728][ T6980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.083031][ T7022] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1286'. [ 105.167063][ T7033] loop3: detected capacity change from 0 to 512 [ 105.181775][ T7033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.213787][ T7033] EXT4-fs (loop3): 1 truncate cleaned up [ 105.221201][ T7037] geneve2: entered promiscuous mode [ 105.226503][ T7037] geneve2: entered allmulticast mode [ 105.238723][ T7033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.269143][ T7040] loop5: detected capacity change from 0 to 2048 [ 105.339102][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.350611][ T7040] Alternate GPT is invalid, using primary GPT. [ 105.356975][ T7040] loop5: p2 p3 p7 [ 105.490380][ T7051] pim6reg1: entered promiscuous mode [ 105.495765][ T7051] pim6reg1: entered allmulticast mode [ 105.523630][ T7054] syzkaller1: entered promiscuous mode [ 105.529183][ T7054] syzkaller1: entered allmulticast mode [ 105.740845][ T7062] loop6: detected capacity change from 0 to 8192 [ 106.126959][ T7077] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1305'. [ 106.200310][ T7079] loop8: detected capacity change from 0 to 512 [ 106.271869][ T7079] loop8: detected capacity change from 512 to 64 [ 106.283545][ T7079] FAT-fs (loop8): Directory bread(block 34) failed [ 106.291568][ T7079] FAT-fs (loop8): Directory bread(block 35) failed [ 106.311544][ T7079] FAT-fs (loop8): Directory bread(block 36) failed [ 106.321368][ T7079] FAT-fs (loop8): Directory bread(block 37) failed [ 106.328005][ T7079] FAT-fs (loop8): Directory bread(block 38) failed [ 106.350162][ T7079] FAT-fs (loop8): Directory bread(block 39) failed [ 106.356855][ T7079] FAT-fs (loop8): Directory bread(block 40) failed [ 106.363469][ T7079] FAT-fs (loop8): Directory bread(block 41) failed [ 106.493610][ T5498] FAT-fs (loop8): Directory bread(block 34) failed [ 106.500326][ T5498] FAT-fs (loop8): Directory bread(block 35) failed [ 106.596994][ T7107] bond_slave_1: mtu less than device minimum [ 106.731647][ T3704] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.794451][ T7113] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.828152][ T3704] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.879789][ T7113] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.926222][ T3704] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.954544][ T7113] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.990477][ T3704] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.027318][ T7113] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.125416][ T3677] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.245301][ T3704] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.267636][ T3704] bond_slave_0: left promiscuous mode [ 107.281325][ T3704] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.301552][ T3704] bond_slave_1: left promiscuous mode [ 107.318241][ T3704] $H (unregistering): Released all slaves [ 107.344603][ T3700] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.370917][ T3704] tipc: Left network mode [ 107.385331][ T3700] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.430752][ T3726] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.464498][ T3704] veth1_macvtap: left promiscuous mode [ 107.470130][ T3704] veth0_macvtap: left promiscuous mode [ 107.480462][ T3704] veth1_vlan: left promiscuous mode [ 107.486933][ T3704] veth0_vlan: left promiscuous mode [ 107.577972][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 107.591556][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 107.679422][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1338'. [ 107.700708][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 107.755826][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.763022][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.771032][ T7118] bridge_slave_0: entered allmulticast mode [ 107.778640][ T7118] bridge_slave_0: entered promiscuous mode [ 107.799562][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.806724][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.817640][ T7118] bridge_slave_1: entered allmulticast mode [ 107.824470][ T7118] bridge_slave_1: entered promiscuous mode [ 107.854728][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.869257][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.908793][ T7118] team0: Port device team_slave_0 added [ 107.925060][ T7189] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 107.934393][ T7118] team0: Port device team_slave_1 added [ 107.970819][ T7189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.026749][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.033839][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.060359][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.078754][ T7189] vlan0: entered allmulticast mode [ 108.083989][ T7189] veth1: entered allmulticast mode [ 108.091548][ T7189] bond3: (slave vlan0): Opening slave failed [ 108.107753][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.114867][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.140947][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.207648][ T7200] netlink: 'syz.3.1353': attribute type 13 has an invalid length. [ 108.251920][ T7204] netlink: 'syz.6.1354': attribute type 1 has an invalid length. [ 108.263630][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.272042][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.305757][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1354'. [ 108.353203][ T7200] batman_adv: batadv0: Interface activated: dummy0 [ 108.359789][ T7200] batadv0: mtu less than device minimum [ 108.365829][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.376552][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.387272][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.398196][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.408910][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.419752][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.430551][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.450418][ T7118] hsr_slave_0: entered promiscuous mode [ 108.456551][ T7118] hsr_slave_1: entered promiscuous mode [ 108.477683][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.489140][ T7206] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 108.501670][ T7213] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 108.511378][ T7213] bond2 (unregistering): Released all slaves [ 108.544728][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.562464][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.592724][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.618660][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.697768][ T7118] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 108.723434][ T7118] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 108.768208][ T7118] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 108.794839][ T7229] tipc: Started in network mode [ 108.799759][ T7229] tipc: Node identity 4ed195d10b94, cluster identity 4711 [ 108.807065][ T7229] tipc: Enabled bearer , priority 0 [ 108.815582][ T7118] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 108.823238][ T7235] loop3: detected capacity change from 0 to 512 [ 108.829955][ T7235] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.837447][ T7228] tipc: Resetting bearer [ 108.851117][ T7235] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.863126][ T7228] tipc: Disabling bearer [ 108.872926][ T7235] EXT4-fs (loop3): 1 truncate cleaned up [ 108.879323][ T7235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.924092][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.936461][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.946626][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.953801][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.966336][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 108.974044][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 108.981430][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 108.988803][ T7118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.988828][ T7118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.009695][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.017184][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.024649][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.032098][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.039501][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.046968][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.054443][ T3412] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 109.061512][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.069380][ T3412] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 109.070424][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.086120][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.248812][ T7118] veth0_vlan: entered promiscuous mode [ 109.260221][ T7118] veth1_vlan: entered promiscuous mode [ 109.294039][ T7118] veth0_macvtap: entered promiscuous mode [ 109.303986][ T7118] veth1_macvtap: entered promiscuous mode [ 109.318485][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.331694][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.340279][ T7271] loop6: detected capacity change from 0 to 1024 [ 109.345334][ T3709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.356907][ T7271] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.367938][ T7271] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.379129][ T7271] JBD2: no valid journal superblock found [ 109.379750][ T3709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.384919][ T7271] EXT4-fs (loop6): Could not load journal inode [ 109.415257][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 109.415274][ T29] audit: type=1400 audit(1755121081.211:4095): avc: denied { mount } for pid=7118 comm="syz-executor" name="/" dev="gadgetfs" ino=3965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.434938][ T7271] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 109.445248][ T3709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.465018][ T3709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.477189][ T29] audit: type=1400 audit(1755121081.271:4096): avc: denied { associate } for pid=7118 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.503113][ T7274] loop5: detected capacity change from 0 to 1024 [ 109.509698][ T7274] EXT4-fs: Ignoring removed orlov option [ 109.522578][ T7274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.560499][ T7281] loop9: detected capacity change from 0 to 512 [ 109.568758][ T7276] loop6: detected capacity change from 0 to 8192 [ 109.584360][ T7281] EXT4-fs (loop9): too many log groups per flexible block group [ 109.592166][ T7281] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 109.599893][ T7281] EXT4-fs (loop9): mount failed [ 109.682695][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.704558][ T7287] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 109.712292][ T7287] FAT-fs (loop6): Filesystem has been set read-only [ 109.780914][ T7295] loop6: detected capacity change from 0 to 512 [ 109.811624][ T7295] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.854651][ T7295] EXT4-fs (loop6): 1 truncate cleaned up [ 109.862795][ T7295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.888447][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.938537][ T4477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.949413][ T29] audit: type=1400 audit(1755121081.741:4097): avc: denied { getopt } for pid=7306 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.970695][ T7309] loop7: detected capacity change from 0 to 128 [ 109.982518][ T7309] usb usb5: usbfs: process 7309 (syz.7.1384) did not claim interface 0 before use [ 109.992781][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1382'. [ 110.024087][ T29] audit: type=1400 audit(1755121081.821:4098): avc: denied { ioctl } for pid=7308 comm="syz.7.1384" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.126426][ T7317] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.174042][ T7317] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.226522][ T7317] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.256563][ T29] audit: type=1326 audit(1755121082.051:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.7.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 110.280275][ T29] audit: type=1326 audit(1755121082.051:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.7.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 110.303718][ T29] audit: type=1326 audit(1755121082.051:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.7.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 110.327124][ T29] audit: type=1326 audit(1755121082.051:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.7.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 110.387792][ T7317] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.507903][ T7327] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1390'. [ 110.516923][ T7327] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1390'. [ 110.757693][ T7342] net_ratelimit: 13 callbacks suppressed [ 110.757714][ T7342] netlink: zone id is out of range [ 110.768537][ T7342] netlink: zone id is out of range [ 110.773757][ T7342] netlink: zone id is out of range [ 110.778901][ T7342] netlink: zone id is out of range [ 110.784040][ T7342] netlink: zone id is out of range [ 110.789158][ T7342] netlink: zone id is out of range [ 110.794356][ T7342] netlink: zone id is out of range [ 110.799491][ T7342] netlink: zone id is out of range [ 110.804627][ T7342] netlink: zone id is out of range [ 110.809747][ T7342] netlink: zone id is out of range [ 110.826169][ T3709] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.853498][ T3709] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.869473][ T3709] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.890164][ T3709] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.933199][ T7346] loop6: detected capacity change from 0 to 128 [ 110.942346][ T7346] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.988848][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1399'. [ 111.003132][ T7346] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.053378][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1401'. [ 111.080023][ T3709] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.080488][ T29] audit: type=1326 audit(1755121082.871:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 111.099503][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1401'. [ 111.122594][ T29] audit: type=1326 audit(1755121082.911:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 111.238664][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1407'. [ 111.300777][ T7375] cgroup: Invalid name [ 111.352715][ T7379] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 111.360994][ T7379] tipc: Enabled bearer , priority 10 [ 111.408731][ T7385] loop6: detected capacity change from 0 to 512 [ 111.451965][ T7385] loop6: detected capacity change from 512 to 64 [ 111.460848][ T7385] FAT-fs (loop6): Directory bread(block 34) failed [ 111.474333][ T7385] FAT-fs (loop6): Directory bread(block 35) failed [ 111.486788][ T7388] loop7: detected capacity change from 0 to 512 [ 111.491058][ T7385] FAT-fs (loop6): Directory bread(block 36) failed [ 111.499847][ T7385] FAT-fs (loop6): Directory bread(block 37) failed [ 111.507185][ T7388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.513607][ T7385] FAT-fs (loop6): Directory bread(block 38) failed [ 111.523520][ T7385] FAT-fs (loop6): Directory bread(block 39) failed [ 111.539639][ T7385] FAT-fs (loop6): Directory bread(block 40) failed [ 111.547903][ T7388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.568355][ T7385] FAT-fs (loop6): Directory bread(block 41) failed [ 111.582165][ T7388] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.621538][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.662074][ T7402] loop7: detected capacity change from 0 to 1764 [ 111.671340][ T7402] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1418'. [ 111.731395][ T4477] FAT-fs (loop6): Directory bread(block 34) failed [ 111.739308][ T4477] FAT-fs (loop6): Directory bread(block 35) failed [ 111.780373][ T7414] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 111.788646][ T7414] tipc: Enabled bearer , priority 10 [ 111.821949][ T7417] loop3: detected capacity change from 0 to 2048 [ 111.833431][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.846191][ T7417] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.903952][ T7427] loop7: detected capacity change from 0 to 2048 [ 111.954449][ T7427] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1428: bad orphan inode 61 [ 111.985430][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.996152][ T7427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.064348][ T7442] netlink: 'syz.9.1434': attribute type 83 has an invalid length. [ 112.098558][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.144289][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 112.187698][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 112.223841][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.231375][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.239752][ T7454] batman_adv: batadv0: Interface deactivated: dummy0 [ 112.244124][ T7465] loop7: detected capacity change from 0 to 512 [ 112.246574][ T7454] batman_adv: batadv0: Removing interface: dummy0 [ 112.259584][ T7465] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.266705][ T7465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.279159][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.280144][ T7465] EXT4-fs (loop7): 1 truncate cleaned up [ 112.286321][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.294454][ T7465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.299518][ T7420] bridge_slave_0: entered allmulticast mode [ 112.318293][ T7420] bridge_slave_0: entered promiscuous mode [ 112.327369][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.334552][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.349988][ T7420] bridge_slave_1: entered allmulticast mode [ 112.356802][ T7420] bridge_slave_1: entered promiscuous mode [ 112.371890][ T5584] tipc: Node number set to 2438061262 [ 112.396461][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.407307][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.431108][ T7420] team0: Port device team_slave_0 added [ 112.439517][ T7420] team0: Port device team_slave_1 added [ 112.473027][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.480018][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.506020][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.521778][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.528796][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.555902][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.594163][ T7420] hsr_slave_0: entered promiscuous mode [ 112.600496][ T7420] hsr_slave_1: entered promiscuous mode [ 112.607028][ T7420] debugfs: 'hsr0' already exists in 'hsr' [ 112.612909][ T7420] Cannot create hsr debugfs directory [ 112.811728][ T3411] tipc: Node number set to 4276748508 [ 112.931384][ T7420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.941047][ T7420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.951846][ T7420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.961160][ T7420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.016536][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.036353][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.100642][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.107766][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.136761][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.143874][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.153013][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.239908][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.352516][ T7420] veth0_vlan: entered promiscuous mode [ 113.361498][ T7420] veth1_vlan: entered promiscuous mode [ 113.384909][ T7420] veth0_macvtap: entered promiscuous mode [ 113.394735][ T7420] veth1_macvtap: entered promiscuous mode [ 113.405408][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.417478][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.430992][ T3732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.445129][ T3732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465522][ T3732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.475102][ T3732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.636863][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1458'. [ 114.265370][ T7544] vhci_hcd: invalid port number 96 [ 114.270628][ T7544] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 114.358215][ T7554] loop9: detected capacity change from 0 to 2048 [ 114.368036][ T7554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.387767][ T7554] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.500275][ T7567] hub 9-0:1.0: USB hub found [ 114.506411][ T7567] hub 9-0:1.0: 8 ports detected [ 114.526428][ T7567] loop3: detected capacity change from 0 to 512 [ 114.534025][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.543811][ T7567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.586876][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 114.586894][ T29] audit: type=1326 audit(1755121086.381:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.9.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 114.620516][ T29] audit: type=1326 audit(1755121086.381:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.9.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 114.654144][ T7567] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1472: Bad quota inum: 29696, type: 1 [ 114.671981][ T29] audit: type=1326 audit(1755121086.411:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.9.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 114.695596][ T29] audit: type=1326 audit(1755121086.411:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.9.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 114.696911][ T7567] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 114.719152][ T29] audit: type=1326 audit(1755121086.411:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.9.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 114.757553][ T29] audit: type=1326 audit(1755121086.441:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 114.781480][ T29] audit: type=1326 audit(1755121086.441:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 114.805222][ T29] audit: type=1326 audit(1755121086.441:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 114.828815][ T29] audit: type=1326 audit(1755121086.441:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f784fc00b07 code=0x7ffc0000 [ 114.852391][ T29] audit: type=1326 audit(1755121086.441:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 114.877159][ T7567] EXT4-fs (loop3): mount failed [ 114.976393][ T7585] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.037964][ T7585] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.101137][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 115.156485][ T7585] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.217103][ T7585] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.273334][ T7597] loop3: detected capacity change from 0 to 512 [ 115.288858][ T7597] EXT4-fs: Ignoring removed nobh option [ 115.318697][ T3738] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.360034][ T3738] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.373497][ T3738] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.385302][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1483: corrupted inode contents [ 115.392071][ T3738] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.405922][ T7602] loop1: detected capacity change from 0 to 2048 [ 115.424528][ T7597] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1483: mark_inode_dirty error [ 115.466260][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1483: corrupted inode contents [ 115.495119][ T7602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.507446][ T7597] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1483: mark_inode_dirty error [ 115.533383][ T7602] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.542950][ T7597] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1483: Failed to acquire dquot type 0 [ 115.578447][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1483: corrupted inode contents [ 115.628643][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.653532][ T7597] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1483: mark_inode_dirty error [ 115.706046][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1483: corrupted inode contents [ 115.729443][ T7617] wireguard0: entered promiscuous mode [ 115.738684][ T7617] wireguard0: entered allmulticast mode [ 115.748161][ T7597] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1483: mark_inode_dirty error [ 115.768391][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1483: corrupted inode contents [ 115.816545][ T7597] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 115.828315][ T7597] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1483: corrupted inode contents [ 115.840901][ T7597] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1483: mark_inode_dirty error [ 115.853877][ T7597] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 115.863355][ T7597] EXT4-fs (loop3): 1 truncate cleaned up [ 115.869958][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.884135][ T7597] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.930652][ T7597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.273209][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1504'. [ 116.484693][ T7666] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.538581][ T7672] loop1: detected capacity change from 0 to 1024 [ 116.545771][ T7672] EXT4-fs: Ignoring removed orlov option [ 116.562477][ T7672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.565242][ T7675] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.587478][ T7675] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 116.598383][ T7675] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 116.612999][ T7677] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1512'. [ 116.851611][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.855158][ T7692] loop9: detected capacity change from 0 to 512 [ 116.867458][ T7692] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.877259][ T7692] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 116.893950][ T7692] EXT4-fs (loop9): 1 truncate cleaned up [ 116.900335][ T7692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.240075][ T7706] veth0: entered promiscuous mode [ 117.248477][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1523'. [ 117.265961][ T7706] veth0 (unregistering): left promiscuous mode [ 117.429981][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.439592][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.707719][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.857708][ T7724] loop9: detected capacity change from 0 to 1024 [ 117.864541][ T7724] EXT4-fs: Ignoring removed orlov option [ 117.874233][ T7724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.087499][ T7739] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.133852][ T7739] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.146412][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.195947][ T7739] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.276172][ T7739] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.367574][ T3683] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.393251][ T3683] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.422156][ T3683] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.430557][ T3683] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.456351][ T7760] loop9: detected capacity change from 0 to 512 [ 118.468810][ T7760] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.489163][ T7760] atomic_op ffff88813461e528 conn xmit_atomic 0000000000000000 [ 118.518706][ T7118] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 118.545197][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1548'. [ 118.555369][ T7767] loop9: detected capacity change from 0 to 7 [ 118.561733][ T7767] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.569957][ T7767] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.577821][ T7767] loop9: unable to read partition table [ 118.586013][ T7767] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 118.586013][ T7767] ) failed (rc=-5) [ 118.640302][ T7775] loop9: detected capacity change from 0 to 1024 [ 118.665130][ T7775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.714503][ T7775] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.1551: Allocating blocks 449-513 which overlap fs metadata [ 118.757601][ T7774] EXT4-fs (loop9): pa ffff888106dc8460: logic 48, phys. 177, len 21 [ 118.765702][ T7774] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 118.790427][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.028838][ T7803] loop9: detected capacity change from 0 to 512 [ 119.037238][ T7803] EXT4-fs: test_dummy_encryption option not supported [ 119.058955][ T7803] binfmt_misc: register: failed to install interpreter file ./file2 [ 119.098554][ T7806] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1563'. [ 119.119181][ T7806] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1563'. [ 119.360703][ T7822] loop5: detected capacity change from 0 to 2048 [ 119.429628][ T7822] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1568: bad orphan inode 61 [ 119.459591][ T7822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.597864][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.738323][ T7849] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1578'. [ 119.782293][ T3398] IPVS: starting estimator thread 0... [ 119.787901][ T7847] net_ratelimit: 19 callbacks suppressed [ 119.787921][ T7847] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.871805][ T7852] IPVS: using max 2352 ests per chain, 117600 per kthread [ 119.974754][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 119.974771][ T29] audit: type=1326 audit(1755121091.771:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.048922][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 120.058275][ T29] audit: type=1326 audit(1755121091.771:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.081936][ T29] audit: type=1326 audit(1755121091.771:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.105403][ T29] audit: type=1326 audit(1755121091.771:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.129169][ T29] audit: type=1326 audit(1755121091.771:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.153000][ T29] audit: type=1326 audit(1755121091.771:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.177153][ T29] audit: type=1326 audit(1755121091.771:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.200579][ T29] audit: type=1326 audit(1755121091.801:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.224062][ T29] audit: type=1326 audit(1755121091.801:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.247695][ T29] audit: type=1326 audit(1755121091.801:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.7.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 120.286164][ T7880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7880 comm=syz.3.1586 [ 120.467571][ T7884] wireguard0: entered promiscuous mode [ 120.474640][ T7884] wireguard0: entered allmulticast mode [ 120.550855][ T7900] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 120.612395][ T7900] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 120.666374][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1596'. [ 120.732321][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1601'. [ 120.883617][ T7927] loop5: detected capacity change from 0 to 2048 [ 120.918518][ T7927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.023292][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.330959][ T7963] loop9: detected capacity change from 0 to 1024 [ 121.397041][ T7963] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.484634][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.570957][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1620'. [ 121.590974][ T7983] loop9: detected capacity change from 0 to 1024 [ 121.598036][ T7983] EXT4-fs: Ignoring removed orlov option [ 121.633909][ T7983] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.650040][ T7983] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1623: bg 0: block 88: padding at end of block bitmap is not set [ 121.681263][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.692189][ T7994] loop1: detected capacity change from 0 to 512 [ 121.709643][ T7994] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 121.719371][ T7994] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 121.729438][ T7994] EXT4-fs (loop1): group descriptors corrupted! [ 121.745525][ T7997] veth0_to_team: entered promiscuous mode [ 121.792642][ T8001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8001 comm=syz.7.1629 [ 121.974180][ T3398] Process accounting resumed [ 122.030226][ T8024] loop1: detected capacity change from 0 to 512 [ 122.036998][ T8024] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.046500][ T8024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.058331][ T8024] EXT4-fs (loop1): 1 truncate cleaned up [ 122.072303][ T8024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.092503][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1639'. [ 122.109572][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 122.171053][ T8036] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.206341][ T8040] loop7: detected capacity change from 0 to 512 [ 122.213442][ T8040] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.225005][ T8036] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.225113][ T8040] EXT4-fs (loop7): 1 truncate cleaned up [ 122.225620][ T8040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.291083][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.302416][ T8036] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.363721][ T8036] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.436200][ T3723] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.447098][ T3723] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.461900][ T3723] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.470182][ T3723] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.879339][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.007680][ T8085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.075740][ T8085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.127207][ T8085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.175080][ T8085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.253845][ T3723] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.275757][ T3723] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.285934][ T3723] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.295537][ T3723] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.371113][ T8101] loop7: detected capacity change from 0 to 512 [ 123.404684][ T8101] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.412277][ T8101] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.438896][ T8101] EXT4-fs (loop7): 1 truncate cleaned up [ 123.449037][ T8101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.484850][ T8109] netlink: 'syz.9.1672': attribute type 1 has an invalid length. [ 123.513736][ T8109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.537801][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1672'. [ 123.567711][ T8109] vlan2: entered promiscuous mode [ 123.572834][ T8109] bond1: entered promiscuous mode [ 123.589154][ T8109] dummy0: entered promiscuous mode [ 123.607831][ T8109] bond1: (slave dummy0): making interface the new active one [ 123.628473][ T8109] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 123.928569][ T8122] loop5: detected capacity change from 0 to 512 [ 123.946063][ T8122] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.975048][ T8122] EXT4-fs (loop5): 1 truncate cleaned up [ 123.990202][ T8122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.167414][ T8135] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.224110][ T8135] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.240899][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.250486][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 124.356965][ T8135] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.453867][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 124.468124][ T8148] team1: entered promiscuous mode [ 124.473345][ T8148] team1: entered allmulticast mode [ 124.480571][ T8135] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.514845][ T8150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8150 comm=syz.7.1685 [ 124.555545][ T3723] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.586702][ T3723] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.601703][ T3723] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.611489][ T3723] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.927327][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.967534][ T8170] loop5: detected capacity change from 0 to 512 [ 124.978405][ T8170] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.994937][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 124.994953][ T29] audit: type=1400 audit(1755121096.791:4507): avc: denied { ioctl } for pid=8173 comm="syz.7.1694" path="socket:[30365]" dev="sockfs" ino=30365 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.001881][ T8170] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.053532][ T8170] EXT4-fs (loop5): 1 truncate cleaned up [ 125.059670][ T8170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.081833][ T8181] : renamed from vlan0 [ 125.170332][ T8190] loop9: detected capacity change from 0 to 512 [ 125.180135][ T8190] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 125.209686][ T8190] EXT4-fs (loop9): 1 truncate cleaned up [ 125.216053][ T8190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.230422][ T8190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.340983][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.348448][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.369802][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.377401][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.809446][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.065809][ T8215] __nla_validate_parse: 4 callbacks suppressed [ 126.065828][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'. [ 126.106553][ T8215] wireguard0: entered promiscuous mode [ 126.112219][ T8215] wireguard0: entered allmulticast mode [ 126.180653][ T8225] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.219576][ T8227] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 126.235339][ T8227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.254992][ T8227] bond4: (slave dummy0): making interface the new active one [ 126.268319][ T8227] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 126.281372][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 126.290399][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 126.299307][ T8230] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1719'. [ 126.334163][ T8232] loop7: detected capacity change from 0 to 1024 [ 126.344942][ T8232] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.356030][ T8232] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 126.365888][ T8232] EXT4-fs (loop7): orphan cleanup on readonly fs [ 126.372467][ T8232] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 126.381283][ T8232] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 126.395804][ T8232] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 126.402927][ T8232] EXT4-fs (loop7): 1 truncate cleaned up [ 126.408989][ T8232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.447914][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.486076][ T8250] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 126.486076][ T8250] The task syz.5.1722 (8250) triggered the difference, watch for misbehavior. [ 126.486100][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1726'. [ 126.523832][ T29] audit: type=1326 audit(1755121098.321:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.547413][ T29] audit: type=1326 audit(1755121098.321:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.572175][ T29] audit: type=1326 audit(1755121098.341:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.603496][ T29] audit: type=1326 audit(1755121098.341:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.627215][ T29] audit: type=1326 audit(1755121098.341:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.650672][ T29] audit: type=1326 audit(1755121098.341:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.674308][ T29] audit: type=1326 audit(1755121098.341:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.697723][ T29] audit: type=1326 audit(1755121098.341:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 126.699475][ T8254] loop7: detected capacity change from 0 to 512 [ 126.736607][ T8254] EXT4-fs (loop7): orphan cleanup on readonly fs [ 126.743479][ T8254] EXT4-fs error (device loop7): ext4_quota_enable:7124: comm syz.7.1730: inode #218103808: comm syz.7.1730: iget: illegal inode # [ 126.757343][ T8254] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.1730: Bad quota inode: 218103808, type: 2 [ 126.769602][ T8254] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 126.787362][ T8254] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 126.794745][ T8254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.809285][ T8254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.958772][ T8278] loop7: detected capacity change from 0 to 1024 [ 126.965867][ T8278] EXT4-fs: Ignoring removed orlov option [ 126.974633][ T8278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.082521][ T8289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.105516][ T8292] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1744'. [ 127.133663][ T8289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.184020][ T8289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.233472][ T8289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.311115][ T8306] loop5: detected capacity change from 0 to 128 [ 127.325792][ T8306] FAT-fs (loop5): Directory bread(block 32) failed [ 127.333606][ T8306] FAT-fs (loop5): Directory bread(block 33) failed [ 127.340414][ T8306] FAT-fs (loop5): Directory bread(block 34) failed [ 127.341424][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.347185][ T8306] FAT-fs (loop5): Directory bread(block 35) failed [ 127.362668][ T8306] FAT-fs (loop5): Directory bread(block 36) failed [ 127.369311][ T8306] FAT-fs (loop5): Directory bread(block 37) failed [ 127.376359][ T8306] FAT-fs (loop5): Directory bread(block 38) failed [ 127.383030][ T8306] FAT-fs (loop5): Directory bread(block 39) failed [ 127.389969][ T8306] FAT-fs (loop5): Directory bread(block 40) failed [ 127.396729][ T8306] FAT-fs (loop5): Directory bread(block 41) failed [ 127.498783][ T8316] loop7: detected capacity change from 0 to 512 [ 127.506106][ T8316] journal_path: Non-blockdev passed as './bus' [ 127.512348][ T8316] EXT4-fs: error: could not find journal device path [ 127.605968][ T8324] wireguard0: entered promiscuous mode [ 127.612839][ T8324] wireguard0: entered allmulticast mode [ 127.778477][ T3683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.796730][ T3683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.812194][ T3683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.829227][ T3683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.089841][ T8335] loop5: detected capacity change from 0 to 512 [ 128.106665][ T8335] EXT4-fs: Ignoring removed oldalloc option [ 128.122186][ T8335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.152793][ T8335] EXT4-fs (loop5): 1 truncate cleaned up [ 128.183869][ T8335] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 128.190636][ T8335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.198348][ T8335] vhci_hcd vhci_hcd.0: Device attached [ 128.430510][ T8337] vhci_hcd: connection closed [ 128.435572][ T3708] vhci_hcd: stop threads [ 128.444649][ T3708] vhci_hcd: release socket [ 128.449082][ T3708] vhci_hcd: disconnect device [ 128.453802][ T3384] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 128.461355][ T3384] usb 11-1: enqueue for inactive port 0 [ 128.471911][ T3384] usb 11-1: enqueue for inactive port 0 [ 128.482996][ T3384] usb 11-1: enqueue for inactive port 0 [ 128.521623][ T8352] loop1: detected capacity change from 0 to 512 [ 128.565548][ T8352] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1766: corrupted in-inode xattr: invalid ea_ino [ 128.583004][ T3384] vhci_hcd: vhci_device speed not set [ 128.589904][ T8352] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1766: couldn't read orphan inode 15 (err -117) [ 128.805058][ T8368] bridge0: port 3(bond0) entered blocking state [ 128.811459][ T8368] bridge0: port 3(bond0) entered disabled state [ 128.818098][ T8368] bond0: entered allmulticast mode [ 128.823451][ T8368] bond_slave_0: entered allmulticast mode [ 128.829262][ T8368] bond_slave_1: entered allmulticast mode [ 128.836356][ T8368] bond0: entered promiscuous mode [ 128.841473][ T8368] bond_slave_0: entered promiscuous mode [ 128.847234][ T8368] bond_slave_1: entered promiscuous mode [ 128.853275][ T8368] bridge0: port 3(bond0) entered blocking state [ 128.859622][ T8368] bridge0: port 3(bond0) entered forwarding state [ 128.866423][ T8369] bond0: left allmulticast mode [ 128.871313][ T8369] bond_slave_0: left allmulticast mode [ 128.876833][ T8369] bond_slave_1: left allmulticast mode [ 128.882461][ T8369] bond0: left promiscuous mode [ 128.887292][ T8369] bond_slave_0: left promiscuous mode [ 128.892874][ T8369] bond_slave_1: left promiscuous mode [ 128.898470][ T8369] bridge0: port 3(bond0) entered disabled state [ 129.058522][ T8384] loop1: detected capacity change from 0 to 512 [ 129.066585][ T8384] EXT4-fs: test_dummy_encryption option not supported [ 129.197828][ T8388] wireguard0: entered promiscuous mode [ 129.204646][ T8388] wireguard0: entered allmulticast mode [ 129.268621][ T8394] loop9: detected capacity change from 0 to 512 [ 129.277098][ T8394] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.1783: corrupted in-inode xattr: invalid ea_ino [ 129.292373][ T8394] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1783: couldn't read orphan inode 15 (err -117) [ 129.395280][ T8399] syzkaller0: entered allmulticast mode [ 129.401207][ T8399] syzkaller0: entered promiscuous mode [ 129.410677][ T8399] syzkaller0 (unregistering): left allmulticast mode [ 129.417577][ T8399] syzkaller0 (unregistering): left promiscuous mode [ 129.490675][ T8408] loop7: detected capacity change from 0 to 512 [ 129.497821][ T8408] EXT4-fs: Ignoring removed oldalloc option [ 129.504116][ T8408] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.515088][ T8408] EXT4-fs (loop7): 1 truncate cleaned up [ 129.525808][ T8408] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 129.532353][ T8408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.539978][ T8408] vhci_hcd vhci_hcd.0: Device attached [ 129.568974][ T8416] loop9: detected capacity change from 0 to 1024 [ 129.577149][ T8416] EXT4-fs: Ignoring removed orlov option [ 129.650731][ T8410] vhci_hcd: connection closed [ 129.651429][ T3707] vhci_hcd: stop threads [ 129.660523][ T3707] vhci_hcd: release socket [ 129.664979][ T3707] vhci_hcd: disconnect device [ 129.891133][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 129.910314][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.918161][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.938812][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.946430][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.028889][ T8424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1792'. [ 130.086835][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 130.086854][ T29] audit: type=1326 audit(1755121101.881:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.122490][ T29] audit: type=1326 audit(1755121101.881:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.145959][ T29] audit: type=1326 audit(1755121101.881:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.169397][ T29] audit: type=1326 audit(1755121101.881:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.192923][ T29] audit: type=1326 audit(1755121101.881:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.216411][ T29] audit: type=1326 audit(1755121101.911:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.239904][ T29] audit: type=1326 audit(1755121101.911:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.270680][ T8438] netlink: 'syz.5.1796': attribute type 10 has an invalid length. [ 130.279595][ T8432] wireguard0: entered promiscuous mode [ 130.285898][ T8432] wireguard0: entered allmulticast mode [ 130.294705][ T29] audit: type=1326 audit(1755121101.921:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.318192][ T29] audit: type=1326 audit(1755121101.921:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.342116][ T29] audit: type=1326 audit(1755121101.921:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784fbfebe9 code=0x7ffc0000 [ 130.367248][ T8439] netlink: 'syz.5.1796': attribute type 10 has an invalid length. [ 130.369521][ T8441] netlink: 'syz.7.1797': attribute type 2 has an invalid length. [ 130.382880][ T8441] netlink: 'syz.7.1797': attribute type 1 has an invalid length. [ 130.390656][ T8441] netlink: 'syz.7.1797': attribute type 2 has an invalid length. [ 130.449854][ T8439] dummy0: entered promiscuous mode [ 130.456072][ T8439] $H: (slave dummy0): Enslaving as an active interface with an up link [ 130.478245][ T8441] loop7: detected capacity change from 0 to 8192 [ 130.492131][ T8449] loop5: detected capacity change from 0 to 256 [ 130.499859][ T8449] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.928256][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1811'. [ 130.954464][ T8475] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1811'. [ 131.957620][ T8507] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.059834][ T8507] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.113737][ T8507] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.197585][ T8507] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.248488][ T3714] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.262213][ T3714] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.280172][ T3714] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289034][ T3714] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.065540][ T8541] wireguard0: entered promiscuous mode [ 133.071186][ T8541] wireguard0: entered allmulticast mode [ 134.117865][ T8566] ipvlan2: entered promiscuous mode [ 134.129314][ T8566] bridge0: port 1(ipvlan2) entered blocking state [ 134.135871][ T8566] bridge0: port 1(ipvlan2) entered disabled state [ 134.147254][ T8566] ipvlan2: entered allmulticast mode [ 134.152658][ T8566] bridge0: entered allmulticast mode [ 134.158750][ T8566] ipvlan2: left allmulticast mode [ 134.163832][ T8566] bridge0: left allmulticast mode [ 135.384133][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 135.384166][ T29] audit: type=1326 audit(1755121107.181:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.480905][ T29] audit: type=1326 audit(1755121107.181:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.504415][ T29] audit: type=1326 audit(1755121107.211:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.527914][ T29] audit: type=1326 audit(1755121107.211:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.551517][ T29] audit: type=1326 audit(1755121107.211:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.575107][ T29] audit: type=1326 audit(1755121107.211:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.598697][ T29] audit: type=1326 audit(1755121107.211:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.622244][ T29] audit: type=1326 audit(1755121107.221:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.645730][ T29] audit: type=1326 audit(1755121107.221:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 135.669280][ T29] audit: type=1326 audit(1755121107.221:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.9.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 136.077724][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1876'. [ 136.120784][ T8671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1877'. [ 136.129884][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 136.138874][ T8671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1877'. [ 136.147833][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 136.156873][ T8671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1877'. [ 136.393463][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1883'. [ 136.425851][ T8686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8686 comm=syz.1.1883 [ 136.498408][ T8696] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1884'. [ 136.509675][ T8696] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1884'. [ 136.575867][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 136.647588][ T8700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 136.656587][ T8700] bond5: (slave bond6): Enslaving as an active interface with an up link [ 136.674662][ T8700] bond5 (unregistering): (slave bond6): Releasing backup interface [ 136.694187][ T8700] bond5 (unregistering): Released all slaves [ 137.527454][ T8728] loop1: detected capacity change from 0 to 512 [ 137.552412][ T8728] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.580357][ T8728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.600728][ T8728] EXT4-fs (loop1): 1 truncate cleaned up [ 137.614649][ T8728] EXT4-fs mount: 10 callbacks suppressed [ 137.614667][ T8728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.388329][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.491078][ T8758] wireguard0: entered promiscuous mode [ 138.497610][ T8758] wireguard0: entered allmulticast mode [ 139.648193][ T8797] wireguard0: entered promiscuous mode [ 139.656373][ T8797] wireguard0: entered allmulticast mode [ 140.013189][ T8817] hub 9-0:1.0: USB hub found [ 140.017931][ T8817] hub 9-0:1.0: 8 ports detected [ 140.080438][ T8827] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.144922][ T8827] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.217688][ T8827] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.325369][ T8827] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.413969][ T3678] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.429890][ T3704] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.446789][ T3689] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.460215][ T3689] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.706076][ T8868] TC_ACT_REPEAT abuse ? [ 141.710541][ T8868] TC_ACT_REPEAT abuse ? [ 141.717448][ T8868] TC_ACT_REPEAT abuse ? [ 141.722887][ T8862] TC_ACT_REPEAT abuse ? [ 141.727243][ T8862] TC_ACT_REPEAT abuse ? [ 141.804216][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 141.804235][ T29] audit: type=1400 audit(1755121113.601:4735): avc: denied { getopt } for pid=8877 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.831248][ T8884] __nla_validate_parse: 7 callbacks suppressed [ 141.831268][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 141.854115][ T29] audit: type=1400 audit(1755121113.651:4736): avc: denied { ioctl } for pid=8877 comm="syz.5.1949" path="socket:[31744]" dev="sockfs" ino=31744 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.012518][ T8894] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1951'. [ 142.041647][ T8894] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1951'. [ 142.092795][ T29] audit: type=1326 audit(1755121113.881:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 142.116351][ T29] audit: type=1326 audit(1755121113.881:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 142.139901][ T29] audit: type=1326 audit(1755121113.881:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 142.163366][ T29] audit: type=1326 audit(1755121113.881:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 142.186845][ T29] audit: type=1326 audit(1755121113.891:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 142.248784][ T29] audit: type=1326 audit(1755121114.031:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 142.272315][ T29] audit: type=1326 audit(1755121114.031:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 142.295778][ T29] audit: type=1326 audit(1755121114.041:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f272b0febe9 code=0x7ffc0000 [ 142.381497][ T8913] $H: left promiscuous mode [ 142.386514][ T8913] bond_slave_0: left promiscuous mode [ 142.392100][ T8913] bond_slave_1: left promiscuous mode [ 142.401141][ T8913] dummy0: left promiscuous mode [ 142.468866][ T8919] loop7: detected capacity change from 0 to 2048 [ 142.487936][ T8919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.505598][ T8913] ip6gre1: left allmulticast mode [ 142.515698][ T3724] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.531199][ T3724] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.557659][ T3724] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.574598][ T3724] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.596571][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.686147][ T8933] loop5: detected capacity change from 0 to 128 [ 142.777263][ T8937] 9pnet_fd: Insufficient options for proto=fd [ 142.930899][ T8954] TC_ACT_REPEAT abuse ? [ 142.935407][ T8954] TC_ACT_REPEAT abuse ? [ 142.951392][ T8954] TC_ACT_REPEAT abuse ? [ 142.965665][ T8954] TC_ACT_REPEAT abuse ? [ 142.970013][ T8954] TC_ACT_REPEAT abuse ? [ 143.078368][ T8957] netlink: 29 bytes leftover after parsing attributes in process `syz.7.1991'. [ 143.105354][ T8963] netlink: 'syz.1.1982': attribute type 10 has an invalid length. [ 143.130901][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.154422][ T8963] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.215027][ T8963] bond0: entered promiscuous mode [ 143.220169][ T8963] bond_slave_0: entered promiscuous mode [ 143.226009][ T8963] bond_slave_1: entered promiscuous mode [ 143.231811][ T8963] batadv0: entered promiscuous mode [ 143.364801][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1987'. [ 143.413021][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1987'. [ 143.489462][ T8998] loop7: detected capacity change from 0 to 512 [ 143.498695][ T8998] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 143.508536][ T8998] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 143.518660][ T8998] EXT4-fs (loop7): group descriptors corrupted! [ 143.721640][ T9027] loop1: detected capacity change from 0 to 1024 [ 143.730472][ T9027] EXT4-fs: Ignoring removed oldalloc option [ 143.736489][ T9027] EXT4-fs: Ignoring removed bh option [ 143.771940][ T9027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.803992][ T9027] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2006'. [ 143.818791][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2003'. [ 143.845098][ T9041] netlink: 'syz.9.2010': attribute type 39 has an invalid length. [ 143.855188][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.899504][ T1041] Process accounting resumed [ 144.258447][ T9054] loop5: detected capacity change from 0 to 512 [ 144.265641][ T9054] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 144.275366][ T9054] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 144.285421][ T9054] EXT4-fs (loop5): group descriptors corrupted! [ 144.312452][ T9059] wireguard0: entered promiscuous mode [ 144.318316][ T9059] wireguard0: entered allmulticast mode [ 144.526050][ T9065] loop1: detected capacity change from 0 to 1024 [ 144.533129][ T9065] EXT4-fs: Ignoring removed orlov option [ 144.543756][ T9065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.558352][ T9065] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2016: bg 0: block 88: padding at end of block bitmap is not set [ 144.585089][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.935758][ T9074] loop9: detected capacity change from 0 to 128 [ 144.952702][ T9074] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.973244][ T9074] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.017077][ T7118] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.128469][ T9090] loop9: detected capacity change from 0 to 2048 [ 145.166433][ T9090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.215910][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.307742][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.316391][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.543085][ T9113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2032'. [ 145.556629][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2042'. [ 145.579535][ T9117] team1: entered promiscuous mode [ 145.584777][ T9117] team1: entered allmulticast mode [ 145.628106][ T9123] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 145.646734][ T9123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.674621][ T9123] vlan0: entered promiscuous mode [ 145.679713][ T9123] bond1: entered promiscuous mode [ 145.697062][ T9123] dummy0: entered promiscuous mode [ 145.707338][ T9123] bond1: (slave dummy0): making interface the new active one [ 145.716900][ T9123] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 146.627754][ T9176] siw: device registration error -23 [ 146.781967][ T9] net_ratelimit: 136 callbacks suppressed [ 146.781983][ T9] TC_ACT_REPEAT abuse ? [ 146.879077][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 146.879094][ T29] audit: type=1400 audit(1755121118.671:4916): avc: denied { setopt } for pid=9189 comm="syz.9.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.909403][ T29] audit: type=1400 audit(1755121118.701:4917): avc: denied { bind } for pid=9189 comm="syz.9.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.928860][ T29] audit: type=1400 audit(1755121118.701:4918): avc: denied { name_bind } for pid=9189 comm="syz.9.2061" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 146.949719][ T29] audit: type=1400 audit(1755121118.701:4919): avc: denied { node_bind } for pid=9189 comm="syz.9.2061" saddr=172.30.0.10 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 147.099980][ T29] audit: type=1326 audit(1755121118.881:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f27305ba7 code=0x7ffc0000 [ 147.123383][ T29] audit: type=1326 audit(1755121118.881:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f272aadd9 code=0x7ffc0000 [ 147.146724][ T29] audit: type=1326 audit(1755121118.881:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f27305ba7 code=0x7ffc0000 [ 147.170164][ T29] audit: type=1326 audit(1755121118.881:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f272aadd9 code=0x7ffc0000 [ 147.193628][ T29] audit: type=1326 audit(1755121118.881:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 147.217035][ T29] audit: type=1326 audit(1755121118.881:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2730ebe9 code=0x7ffc0000 [ 147.439076][ T9214] loop1: detected capacity change from 0 to 512 [ 147.457893][ T9214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.481437][ T9] TC_ACT_REPEAT abuse ? [ 147.534344][ T9214] EXT4-fs (loop1): 1 truncate cleaned up [ 147.552497][ T9214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.570027][ T9214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.856452][ T9233] loop1: detected capacity change from 0 to 512 [ 147.876802][ T9233] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.889357][ T9235] __nla_validate_parse: 3 callbacks suppressed [ 147.889373][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 147.891839][ T9233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.926184][ T9233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.934701][ T9233] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.967636][ T9233] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2080: Allocating blocks 41-42 which overlap fs metadata [ 148.015444][ T9233] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2080: Allocating blocks 41-42 which overlap fs metadata [ 148.031838][ T9233] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2080: Failed to acquire dquot type 1 [ 148.071873][ T9233] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 148.101694][ T9233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2080: corrupted inode contents [ 148.127437][ T9233] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.2080: mark_inode_dirty error [ 148.139095][ T9233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2080: corrupted inode contents [ 148.151137][ T9233] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2080: mark_inode_dirty error [ 148.163802][ T9233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2080: corrupted inode contents [ 148.175962][ T9233] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 148.185541][ T9233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2080: corrupted inode contents [ 148.198990][ T9233] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.2080: mark_inode_dirty error [ 148.211413][ T9233] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 148.220529][ T9233] EXT4-fs (loop1): 1 truncate cleaned up [ 148.226666][ T9233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.253260][ T9233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 148.275773][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.345484][ T9255] netlink: 'syz.3.2088': attribute type 12 has an invalid length. [ 148.438448][ T9263] loop5: detected capacity change from 0 to 1024 [ 148.446794][ T9263] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.458658][ T9263] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 148.466896][ T9263] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.474479][ T9263] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.2091: Invalid inode table block 0 in block_group 0 [ 148.487413][ T9263] EXT4-fs (loop5): Remounting filesystem read-only [ 148.494823][ T9263] EXT4-fs (loop5): 1 truncate cleaned up [ 148.501073][ T9263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.533914][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.617123][ T9273] loop7: detected capacity change from 0 to 512 [ 148.625204][ T9273] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.631967][ T9273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.639569][ T9273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.648216][ T9273] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.677619][ T9273] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2097: Allocating blocks 41-42 which overlap fs metadata [ 148.692728][ T9273] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2097: Allocating blocks 41-42 which overlap fs metadata [ 148.706876][ T9273] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2097: Failed to acquire dquot type 1 [ 148.719281][ T9273] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 148.734181][ T9273] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.2097: corrupted inode contents [ 148.746283][ T9273] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.2097: mark_inode_dirty error [ 148.757912][ T9273] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.2097: corrupted inode contents [ 148.770774][ T9273] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2097: mark_inode_dirty error [ 148.783281][ T9273] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.2097: corrupted inode contents [ 148.795390][ T9273] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 148.805057][ T9273] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.2097: corrupted inode contents [ 148.817160][ T9273] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.2097: mark_inode_dirty error [ 148.830578][ T9273] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 148.839883][ T9273] EXT4-fs (loop7): 1 truncate cleaned up [ 148.846800][ T9273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.875496][ T9273] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 148.917680][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.953506][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2099'. [ 149.052377][ T9290] loop5: detected capacity change from 0 to 512 [ 149.062615][ T9290] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.069937][ T9290] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.2110: inode #218103808: comm syz.5.2110: iget: illegal inode # [ 149.085159][ T9290] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.2110: Bad quota inode: 218103808, type: 2 [ 149.106124][ T9290] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 149.122882][ T9290] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 149.129979][ T9290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.143027][ T9290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.108748][ T9342] netlink: 'syz.3.2120': attribute type 1 has an invalid length. [ 150.137997][ T9342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.147653][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 150.173086][ T9342] bond5 (unregistering): Released all slaves [ 150.180916][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 151.079470][ T9390] loop5: detected capacity change from 0 to 512 [ 151.087761][ T9390] journal_path: Non-blockdev passed as './bus' [ 151.094095][ T9390] EXT4-fs: error: could not find journal device path [ 151.583488][ T9409] loop7: detected capacity change from 0 to 512 [ 151.634712][ T9409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 151.662297][ T9409] System zones: 1-12 [ 151.685930][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2146'. [ 151.706010][ T9409] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.2150: error while reading EA inode 32 err=-116 [ 151.762187][ T9409] EXT4-fs (loop7): Remounting filesystem read-only [ 151.768769][ T9409] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 151.821743][ T9409] EXT4-fs (loop7): 1 orphan inode deleted [ 151.844377][ T9409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.866895][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 151.886229][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 151.886246][ T29] audit: type=1326 audit(1755121123.681:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.7.2150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f272b0febe9 code=0x0 [ 151.949152][ T9424] dvmrp1: entered allmulticast mode [ 152.311071][ T9438] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2163'. [ 152.432574][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.464807][ T9443] syzkaller0: entered allmulticast mode [ 152.474140][ T9443] syzkaller0: entered promiscuous mode [ 152.481153][ T9443] syzkaller0 (unregistering): left allmulticast mode [ 152.487993][ T9443] syzkaller0 (unregistering): left promiscuous mode [ 152.645462][ T9452] loop7: detected capacity change from 0 to 2048 [ 152.706206][ T9452] loop7: p1 < > p4 [ 152.717933][ T9452] loop7: p4 size 8388608 extends beyond EOD, truncated [ 152.817663][ T9457] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2159'. [ 152.871091][ T9457] hsr_slave_0: left promiscuous mode [ 152.881780][ T9457] hsr_slave_1: left promiscuous mode [ 153.295268][ T9469] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 153.311392][ T9469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.330845][ T9469] bond1: (slave dummy0): Releasing active interface [ 153.351442][ T9469] dummy0: left promiscuous mode [ 153.368217][ T9469] bond2: (slave dummy0): making interface the new active one [ 153.406527][ T9469] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 153.509332][ T9481] tipc: Failed to remove unknown binding: 66,3,3/0:3787269346/3787269347 [ 153.512409][ T9483] netlink: 'syz.7.2177': attribute type 1 has an invalid length. [ 153.531393][ T9483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.544794][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2169'. [ 153.559725][ T9483] bond1: (slave dummy0): making interface the new active one [ 153.568195][ T9483] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 153.602876][ T9489] netlink: 'syz.7.2181': attribute type 1 has an invalid length. [ 153.617232][ T9489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.630335][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2181'. [ 153.646089][ T9489] bond2 (unregistering): Released all slaves [ 153.686426][ T9495] syz.9.2172: attempt to access beyond end of device [ 153.686426][ T9495] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.699506][ T9495] FAT-fs (loop19): unable to read boot sector [ 153.742589][ T29] audit: type=1400 audit(1755121125.541:5341): avc: denied { watch } for pid=9500 comm="syz.9.2175" path="pipe:[35921]" dev="pipefs" ino=35921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 154.239029][ T9515] netlink: 'syz.9.2182': attribute type 10 has an invalid length. [ 154.260815][ T9515] bond1: (slave dummy0): Releasing active interface [ 154.269237][ T9515] dummy0: left promiscuous mode [ 154.283735][ T9515] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.314896][ T29] audit: type=1326 audit(1755121126.111:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14cba55ba7 code=0x7ffc0000 [ 154.338312][ T29] audit: type=1326 audit(1755121126.111:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14cb9fadd9 code=0x7ffc0000 [ 154.361820][ T29] audit: type=1326 audit(1755121126.111:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14cba55ba7 code=0x7ffc0000 [ 154.385213][ T29] audit: type=1326 audit(1755121126.111:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14cb9fadd9 code=0x7ffc0000 [ 154.408939][ T29] audit: type=1326 audit(1755121126.111:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 154.478152][ T9524] loop1: detected capacity change from 0 to 512 [ 154.495520][ T29] audit: type=1326 audit(1755121126.161:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 154.516748][ T9524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.519001][ T29] audit: type=1326 audit(1755121126.161:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cba5ebe9 code=0x7ffc0000 [ 154.547366][ T9524] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.554865][ T29] audit: type=1326 audit(1755121126.161:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.9.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14cba55ba7 code=0x7ffc0000 [ 154.612828][ T9530] netlink: 'syz.5.2187': attribute type 1 has an invalid length. [ 154.665275][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2187'. [ 154.705011][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.720529][ T7420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.790544][ T9541] veth0_vlan: left promiscuous mode [ 155.057381][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'. [ 155.178094][ T9567] dvmrp1: entered allmulticast mode [ 155.211316][ T9569] tipc: Failed to remove unknown binding: 66,3,3/0:2970976411/2970976412 [ 155.269352][ T9573] FAT-fs (loop3): bogus number of reserved sectors [ 155.276066][ T9573] FAT-fs (loop3): Can't find a valid FAT filesystem [ 155.762319][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 155.781038][ T9593] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2212'. [ 155.906970][ T9601] netlink: 'syz.7.2225': attribute type 10 has an invalid length. [ 155.921519][ T9601] bond1: (slave dummy0): Releasing active interface [ 155.935712][ T9601] team0: Failed to send options change via netlink (err -105) [ 155.943407][ T9601] team0: Port device dummy0 added [ 155.959470][ T9601] netlink: 'syz.7.2225': attribute type 10 has an invalid length. [ 155.967821][ T9601] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 155.979236][ T9601] team0: Failed to send options change via netlink (err -105) [ 155.981219][ T9606] tipc: Failed to remove unknown binding: 66,3,3/4276748508:29319837/29319838 [ 155.987231][ T9601] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.020848][ T9601] team0: Port device dummy0 removed [ 156.031078][ T9601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.077416][ T9616] netlink: 'syz.7.2219': attribute type 4 has an invalid length. [ 156.283532][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 156.292501][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 156.302552][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 156.338355][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 156.689221][ T9662] netlink: 'syz.3.2236': attribute type 10 has an invalid length. [ 156.706249][ T9662] bond4: (slave dummy0): Releasing active interface [ 156.719694][ T9662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.791973][ T9669] loop9: detected capacity change from 0 to 4096 [ 156.806730][ T9669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.823490][ T9669] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.851638][ T9669] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2239: bg 0: block 297: padding at end of block bitmap is not set [ 156.886675][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.926980][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 156.927005][ T29] audit: type=1400 audit(1755121128.721:5602): avc: denied { mount } for pid=9674 comm="syz.1.2242" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.986537][ T29] audit: type=1400 audit(1755121128.781:5603): avc: denied { create } for pid=9679 comm="syz.9.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.152806][ T29] audit: type=1400 audit(1755121128.951:5604): avc: denied { create } for pid=9688 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.183052][ T29] audit: type=1400 audit(1755121128.981:5605): avc: denied { create } for pid=9690 comm="syz.5.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.225619][ T29] audit: type=1400 audit(1755121129.001:5606): avc: denied { ioctl } for pid=9690 comm="syz.5.2249" path="socket:[36437]" dev="sockfs" ino=36437 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.250432][ T29] audit: type=1326 audit(1755121129.001:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9693 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea2d4ebe9 code=0x7ffc0000 [ 157.274097][ T29] audit: type=1326 audit(1755121129.001:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9693 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ea2d4ebe9 code=0x7ffc0000 [ 157.297592][ T29] audit: type=1326 audit(1755121129.001:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9693 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea2d4ebe9 code=0x7ffc0000 [ 157.321273][ T29] audit: type=1326 audit(1755121129.001:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9693 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ea2d4ebe9 code=0x7ffc0000 [ 157.344706][ T29] audit: type=1326 audit(1755121129.001:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9693 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea2d4ebe9 code=0x7ffc0000 [ 157.818225][ T9711] netlink: 'syz.5.2255': attribute type 10 has an invalid length. [ 157.888910][ T9713] loop5: detected capacity change from 0 to 1024 [ 157.912106][ T9713] EXT4-fs: Ignoring removed orlov option [ 157.934043][ T9713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.490702][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.822863][ T9745] __nla_validate_parse: 8 callbacks suppressed [ 158.822878][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.838075][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.891747][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.922956][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.931977][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.944274][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.971458][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.980370][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 158.989640][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 159.267142][ T9773] loop5: detected capacity change from 0 to 512 [ 159.300106][ T9773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.326187][ T9773] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.495933][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.934408][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2281'. [ 160.307829][ T9811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.322787][ T9811] bond3: (slave bond4): Enslaving as an active interface with an up link [ 160.363933][ T9811] bond3 (unregistering): (slave bond4): Releasing backup interface [ 160.373548][ T9811] bond3 (unregistering): Released all slaves [ 160.974007][ T9853] tipc: Cannot configure node identity twice [ 160.984742][ T9855] ref_ctr increment failed for inode: 0x7e3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810961ae00 [ 161.015291][ T9855] uprobe: syz.5.2308:9855 failed to unregister, leaking uprobe [ 162.048181][ T9895] loop7: detected capacity change from 0 to 512 [ 162.090144][ T9895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.108137][ T9895] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.141818][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 162.141835][ T29] audit: type=1400 audit(1755121133.931:5771): avc: denied { write } for pid=9916 comm="syz.1.2330" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 162.205720][ T29] audit: type=1400 audit(1755121133.971:5772): avc: denied { sys_module } for pid=9912 comm="syz.3.2328" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.232842][ T29] audit: type=1400 audit(1755121134.021:5773): avc: denied { create } for pid=9925 comm="syz.3.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.252349][ T29] audit: type=1400 audit(1755121134.021:5774): avc: denied { ioctl } for pid=9925 comm="syz.3.2342" path="socket:[36869]" dev="sockfs" ino=36869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.277206][ T29] audit: type=1400 audit(1755121134.021:5775): avc: denied { bind } for pid=9925 comm="syz.3.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.320317][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.328417][ T9917] hub 9-0:1.0: USB hub found [ 162.334192][ T9917] hub 9-0:1.0: 8 ports detected [ 162.734117][ T29] audit: type=1400 audit(1755121134.531:5776): avc: denied { ioctl } for pid=10006 comm="syz.7.2348" path="socket:[36897]" dev="sockfs" ino=36897 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 162.784594][ T29] audit: type=1400 audit(1755121134.531:5777): avc: denied { read } for pid=10002 comm="syz.1.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.804053][ T29] audit: type=1400 audit(1755121134.571:5778): avc: denied { ioctl } for pid=10006 comm="syz.7.2348" path="socket:[36898]" dev="sockfs" ino=36898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.157374][T10020] tipc: Started in network mode [ 163.162713][T10020] tipc: Node identity 7, cluster identity 4711 [ 163.168979][T10020] tipc: Node number set to 7 [ 163.202282][T10021] ipvlan2: entered promiscuous mode [ 163.212806][T10021] bridge0: port 1(ipvlan2) entered blocking state [ 163.219333][T10021] bridge0: port 1(ipvlan2) entered disabled state [ 163.253139][T10021] ipvlan2: entered allmulticast mode [ 163.258524][T10021] bridge0: entered allmulticast mode [ 163.274894][T10021] ipvlan2: left allmulticast mode [ 163.279992][T10021] bridge0: left allmulticast mode [ 163.385428][T10035] ref_ctr increment failed for inode: 0x3b3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810961d640 [ 163.426640][T10035] uprobe: syz.1.2343:10035 failed to unregister, leaking uprobe [ 163.473647][T10041] hub 9-0:1.0: USB hub found [ 163.478597][T10041] hub 9-0:1.0: 8 ports detected [ 164.095367][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.098304][ T29] audit: type=1400 audit(1755121135.881:5779): avc: denied { create } for pid=10054 comm="syz.1.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.102909][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.122902][ T29] audit: type=1400 audit(1755121135.891:5780): avc: denied { setopt } for pid=10054 comm="syz.1.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.212943][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.220351][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.246036][T10055] bond0: (slave batadv0): Releasing backup interface [ 164.262996][T10055] batadv0 (unregistering): left promiscuous mode [ 164.514971][T10068] ipvlan2: entered promiscuous mode [ 164.529811][T10068] bridge0: port 3(ipvlan2) entered blocking state [ 164.536322][T10068] bridge0: port 3(ipvlan2) entered disabled state [ 164.544302][T10068] ipvlan2: entered allmulticast mode [ 164.549766][T10068] bridge0: entered allmulticast mode [ 164.557434][T10068] ipvlan2: left allmulticast mode [ 164.562639][T10068] bridge0: left allmulticast mode [ 164.571610][T10071] __nla_validate_parse: 32 callbacks suppressed [ 164.578167][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2363'. [ 164.637866][T10073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.664625][T10073] bond2: (slave bond3): Enslaving as an active interface with an up link [ 164.680995][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2363'. [ 164.710022][T10071] bond2 (unregistering): (slave bond3): Releasing backup interface [ 164.759822][T10071] bond2 (unregistering): Released all slaves [ 164.869676][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 164.878657][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 164.893365][T10092] loop9: detected capacity change from 0 to 1024 [ 164.900174][T10092] EXT4-fs: Ignoring removed orlov option [ 164.907906][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 164.922443][T10092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.944842][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 164.953967][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 164.999591][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 165.148773][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 165.157733][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 165.415252][T10122] loop7: detected capacity change from 0 to 128 [ 165.440271][T10122] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.454326][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.463629][T10122] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.339369][ T5246] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.228280][T10177] ref_ctr increment failed for inode: 0x461 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888122676d40 [ 167.258528][T10177] uprobe: syz.9.2394:10177 failed to unregister, leaking uprobe [ 167.582694][T10193] 9pnet_fd: Insufficient options for proto=fd [ 167.706462][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 167.706478][ T29] audit: type=1400 audit(1755121139.501:5793): avc: denied { write } for pid=10199 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.902705][ T29] audit: type=1400 audit(1755121139.691:5794): avc: denied { bind } for pid=10203 comm="syz.5.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.986131][ T29] audit: type=1400 audit(1755121139.741:5795): avc: denied { mount } for pid=10206 comm="syz.9.2405" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 167.993770][T10211] loop5: detected capacity change from 0 to 512 [ 168.008299][ T29] audit: type=1400 audit(1755121139.741:5796): avc: denied { write } for pid=10206 comm="syz.9.2405" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.008351][ T29] audit: type=1400 audit(1755121139.741:5797): avc: denied { open } for pid=10206 comm="syz.9.2405" path="/213/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.058290][ T29] audit: type=1400 audit(1755121139.771:5798): avc: denied { unmount } for pid=7118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 168.174529][T10211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.187846][ T29] audit: type=1400 audit(1755121139.981:5799): avc: denied { setopt } for pid=10213 comm="syz.9.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.202533][T10211] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.268765][ T29] audit: type=1400 audit(1755121140.061:5800): avc: denied { write } for pid=10217 comm="syz.1.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.312647][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.320083][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.324316][T10220] loop7: detected capacity change from 0 to 128 [ 168.335741][T10220] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.349345][T10220] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.382603][ T29] audit: type=1400 audit(1755121140.181:5801): avc: denied { setattr } for pid=10219 comm="syz.7.2408" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.416304][ T4357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.425914][T10214] veth0_to_team: left promiscuous mode [ 168.426059][ T5246] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.472897][T10214] vlan2: left promiscuous mode [ 168.477754][T10214] bond1: left promiscuous mode [ 168.484258][ T3704] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.503905][ T3704] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.523443][ T3704] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.542967][ T3704] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.586619][T10227] veth7: entered promiscuous mode [ 168.602621][ T29] audit: type=1400 audit(1755121140.391:5802): avc: denied { firmware_load } for pid=10228 comm="syz.5.2411" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 168.639775][T10233] TC_ACT_REPEAT abuse ? [ 168.644311][T10233] TC_ACT_REPEAT abuse ? [ 168.659015][T10233] TC_ACT_REPEAT abuse ? [ 168.673607][T10233] TC_ACT_REPEAT abuse ? [ 168.691190][T10233] TC_ACT_REPEAT abuse ? [ 168.698839][T10233] TC_ACT_REPEAT abuse ? [ 168.714765][T10233] TC_ACT_REPEAT abuse ? [ 168.733156][T10237] TC_ACT_REPEAT abuse ? [ 168.737597][T10237] TC_ACT_REPEAT abuse ? [ 168.762768][T10237] TC_ACT_REPEAT abuse ? [ 169.195854][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.203117][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.232536][T10264] ref_ctr increment failed for inode: 0xa04 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888122676d40 [ 169.245888][T10259] bond0: left promiscuous mode [ 169.250800][T10259] bond_slave_0: left promiscuous mode [ 169.250869][T10264] uprobe: syz.3.2425:10264 failed to unregister, leaking uprobe [ 169.256372][T10259] bond_slave_1: left promiscuous mode [ 169.323665][T10259] team1: left promiscuous mode [ 169.328472][T10259] team1: left allmulticast mode [ 169.336705][T10259] vlan0: left promiscuous mode [ 169.341560][T10259] bond1: left promiscuous mode [ 169.357173][T10259] veth7: left promiscuous mode [ 169.366313][ T3679] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.376237][ T3679] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.384782][ T3679] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.403863][ T3679] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.427749][T10272] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 169.453897][T10272] bond0: entered promiscuous mode [ 169.459018][T10272] bond_slave_0: entered promiscuous mode [ 169.464832][T10272] bond_slave_1: entered promiscuous mode [ 169.470836][T10272] dummy0: entered promiscuous mode [ 169.487087][T10275] siw: device registration error -23 [ 169.534680][T10281] loop9: detected capacity change from 0 to 512 [ 169.546352][T10281] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.554619][T10281] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 169.566425][T10281] EXT4-fs (loop9): 1 truncate cleaned up [ 169.574185][T10281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.997212][T10326] netlink: 'syz.3.2451': attribute type 3 has an invalid length. [ 170.024083][T10327] netlink: 'syz.7.2448': attribute type 10 has an invalid length. [ 170.338855][T10331] __nla_validate_parse: 2 callbacks suppressed [ 170.338871][T10331] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2452'. [ 170.366324][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 170.689822][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.141300][T10372] loop9: detected capacity change from 0 to 1024 [ 172.148286][T10372] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.243400][T10372] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.2467: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.258434][T10372] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2467: Failed to acquire dquot type 0 [ 172.292840][T10372] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2467: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.327812][T10372] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2467: Invalid inode bitmap blk 0 in block_group 0 [ 172.339960][T10380] loop7: detected capacity change from 0 to 512 [ 172.347502][T10380] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.352065][ T3736] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.369412][T10372] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 172.369537][T10380] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.378180][T10372] EXT4-fs (loop9): 1 orphan inode deleted [ 172.394829][ T3736] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:67: Failed to release dquot type 0 [ 172.406991][T10372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.421187][T10380] EXT4-fs (loop7): 1 truncate cleaned up [ 172.432114][T10380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.445131][ T7118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.697923][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 172.756084][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 172.779947][T10380] ================================================================== [ 172.788074][T10380] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 172.795923][T10380] [ 172.798261][T10380] write to 0xffffea00050161d8 of 8 bytes by task 10388 on cpu 1: [ 172.805982][T10380] __filemap_remove_folio+0x1a5/0x2a0 [ 172.811388][T10380] folio_unmap_invalidate+0x1dd/0x360 [ 172.816792][T10380] invalidate_inode_pages2_range+0x27c/0x3d0 [ 172.822789][T10380] filemap_invalidate_pages+0x16d/0x1a0 [ 172.828346][T10380] kiocb_invalidate_pages+0x6e/0x80 [ 172.833574][T10380] __iomap_dio_rw+0x5d4/0x1250 [ 172.838352][T10380] iomap_dio_rw+0x40/0x90 [ 172.842695][T10380] ext4_file_write_iter+0xad9/0xf00 [ 172.847915][T10380] iter_file_splice_write+0x669/0x9e0 [ 172.853298][T10380] direct_splice_actor+0x156/0x2a0 [ 172.858416][T10380] splice_direct_to_actor+0x312/0x680 [ 172.863792][T10380] do_splice_direct+0xda/0x150 [ 172.868566][T10380] do_sendfile+0x380/0x650 [ 172.872997][T10380] __x64_sys_sendfile64+0x105/0x150 [ 172.878214][T10380] x64_sys_call+0x2bb0/0x2ff0 [ 172.882899][T10380] do_syscall_64+0xd2/0x200 [ 172.887417][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.893321][T10380] [ 172.895659][T10380] read to 0xffffea00050161d8 of 8 bytes by task 10380 on cpu 0: [ 172.903310][T10380] folio_mapping+0xa1/0x120 [ 172.907836][T10380] lru_add+0x80/0x430 [ 172.911839][T10380] folio_batch_move_lru+0x177/0x230 [ 172.917057][T10380] lru_add_drain_cpu+0x77/0x250 [ 172.921918][T10380] __folio_batch_release+0x44/0xb0 [ 172.927045][T10380] filemap_splice_read+0x59e/0x740 [ 172.932168][T10380] ext4_file_splice_read+0x8f/0xb0 [ 172.937299][T10380] splice_direct_to_actor+0x26c/0x680 [ 172.942675][T10380] do_splice_direct+0xda/0x150 [ 172.947445][T10380] do_sendfile+0x380/0x650 [ 172.951888][T10380] __x64_sys_sendfile64+0x105/0x150 [ 172.957102][T10380] x64_sys_call+0x2bb0/0x2ff0 [ 172.961786][T10380] do_syscall_64+0xd2/0x200 [ 172.966308][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.972212][T10380] [ 172.974563][T10380] value changed: 0xffff888119d9a998 -> 0x0000000000000000 [ 172.981676][T10380] [ 172.984003][T10380] Reported by Kernel Concurrency Sanitizer on: [ 172.990161][T10380] CPU: 0 UID: 0 PID: 10380 Comm: syz.7.2469 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 173.004236][T10380] Tainted: [W]=WARN [ 173.008042][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.018119][T10380] ================================================================== [ 173.320629][ T5246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.