last executing test programs: 1m19.13691656s ago: executing program 4 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="3661bd2dff2a875143384a02710000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="010100000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) dup2(r3, r4) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) bind$bt_hci(r9, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 1m18.904202799s ago: executing program 4 (id=285): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000000040)=""/92, &(0x7f0000000140)=0x5c) 1m18.75896029s ago: executing program 4 (id=289): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, 0x0) 1m18.549639887s ago: executing program 4 (id=291): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0x9}, {0x8}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x6, 0x3, 0x2, 0x1, 0xffffffff, 0x7, 0x2}}, {0x8, 0x2, [0x5, 0x401]}}, {{0x1c, 0x1, {0x4, 0x6, 0x7ff, 0x7f, 0x1, 0x1, 0x7, 0x2}}, {0xfecb, 0x2, [0x7, 0x1ff]}}, {{0x1c, 0x1, {0xd, 0x1, 0xad9, 0x3, 0x2, 0x3, 0x2, 0x5}}, {0xe, 0x2, [0xbd, 0x6, 0x1, 0x7, 0xc]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x7cd0, 0x1, 0xbf1, 0x800, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0x4, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unshare(0x24040000) r9 = syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x8000) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r9, 0x40044590, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@quota}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x3, 0x2, 0x23b}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r10, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000008c0), 0x8}, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m18.382799091s ago: executing program 4 (id=294): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x4000}], 0x1, &(0x7f0000000100), 0x0, 0x0) 1m17.7699969s ago: executing program 4 (id=306): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xa2eb, 0x8}, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x9e, 0x1, 'queue1\x00', 0x10000}) tkill(r0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$unix(0x1, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000c00)={0x4, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r5, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 1m17.709944665s ago: executing program 32 (id=306): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xa2eb, 0x8}, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x9e, 0x1, 'queue1\x00', 0x10000}) tkill(r0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$unix(0x1, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000c00)={0x4, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r5, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 51.539402815s ago: executing program 0 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 51.518298737s ago: executing program 0 (id=1194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 51.502136578s ago: executing program 0 (id=1195): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800844, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000580)='./file2\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) unshare(0x2a020400) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 51.456444251s ago: executing program 0 (id=1196): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 51.455901362s ago: executing program 0 (id=1197): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040), 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 51.430532494s ago: executing program 0 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x1, 0x0, 0x0) 50.879103028s ago: executing program 2 (id=1215): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) rmdir(0x0) 50.844981961s ago: executing program 2 (id=1217): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x3000, 0x3) 50.762291968s ago: executing program 2 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 50.755747298s ago: executing program 2 (id=1219): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x100, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee1dcf457f0edf110ff4117639c2eb4b78c660e677df700905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 50.474405151s ago: executing program 2 (id=1224): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e11308"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 50.294386495s ago: executing program 2 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x7f3d64de8c1d433d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 50.214692551s ago: executing program 33 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x7f3d64de8c1d433d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 36.037659484s ago: executing program 34 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x1, 0x0, 0x0) 1.73548202s ago: executing program 5 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) 1.662136336s ago: executing program 1 (id=2417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1.576456273s ago: executing program 5 (id=2420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.575896503s ago: executing program 1 (id=2421): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000000050018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.514647158s ago: executing program 5 (id=2424): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 1.312801304s ago: executing program 1 (id=2426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.289812216s ago: executing program 1 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x3a) recvfrom(r3, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.249223279s ago: executing program 6 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.225770511s ago: executing program 6 (id=2429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x21) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) 1.188616664s ago: executing program 6 (id=2430): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@private2, 0x400002a}) 1.118179589s ago: executing program 7 (id=2432): r0 = syz_io_uring_setup(0x3b51, &(0x7f00000003c0)={0x0, 0x763, 0x80, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 1.004147379s ago: executing program 6 (id=2435): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x81) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 975.768801ms ago: executing program 7 (id=2446): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 929.246795ms ago: executing program 5 (id=2437): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) readv(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200200, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x2caf, 0x614d, 0x70, 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 854.053701ms ago: executing program 3 (id=2438): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003e3316b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 848.657671ms ago: executing program 5 (id=2439): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedreceive(r1, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000844, &(0x7f00000008c0)={[{@dots}, {@fat=@nocase}, {@nodots}, {@fat=@tz_utc}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@usefree}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000004cac2ad0cd8fa837770000000000000000441257c7106384cd101807f854c716d0de5d83b9c658885f4e2c35deab71d1f2ce791bd35e0e0dddf4f565a6a408b280b9f70415be8798f0753a2ede29fa5434a09cdd6f7ab6592d6bd401e4499912", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000200)={0x0, 0xb, 0x7, 0x0, "46200500000000000000b99e0e549fcfdea1abe476fabadb002000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 796.362616ms ago: executing program 3 (id=2440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 795.882436ms ago: executing program 6 (id=2441): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 795.243386ms ago: executing program 3 (id=2442): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 782.733407ms ago: executing program 7 (id=2443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r0) 708.076743ms ago: executing program 3 (id=2444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x31d, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x34}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaf96a42dffffffffffff08004500001c000000008002907800000000e000030000009078006400d2"], 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) 662.271527ms ago: executing program 6 (id=2445): removexattr(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 408.265837ms ago: executing program 1 (id=2447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000001000a1fb000000ff030000000000004a", @ANYBLOB="942a0000040006001400128009000100766574680000000004000280080013"], 0x54}}, 0x4008040) listen(0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x9081}], 0x1, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000340)={[{@debug}, {@discard}, {@quota}, {@nodiscard}, {@data_err_ignore}]}, 0x65, 0x536, &(0x7f0000000f40)="$eJzs3U9vI2cZAPBnHDtNstkmBQ5QiVJoUXYFaycNbSMOpUgITpWAckQqIXGiKE6yip12E1VsVnwAJIQAiRNcuCDxAZBQJS4cEVIlOIMAgRDswoEDdNDY42z+2LG7deI0+f2kybzvzDvzPK93ZzzjGc0EcGU9HREvR8Q7aZrejIipfHohH2K/NWTtHtx/cykbkkjTV/+RRJJPa68rycfX8sXGIuKrX4r4ZnIybn13b32xVqtu5/VKY+N2pb67d2ttY3G1ulrdnJ+fe2HhxYXnF2YH0s/rEfHSF/7y/e/89Isv/fLTb/zxtb/d+FaW1mQ+/3A/3qXiaTNbXS81P4vDC2w/YrCLqNjsYW68U4uRE1PunXFOAAB0lh3jfyAiPhERN2MqRk4/nAUAAADeh9LPTcZ/k4i0s9Eu0wEAAID3kULzHtikUM7vBZiMQqFcbt3D+6GYKNS26o1PrWztbC637pWdjlJhZa1Wnc3vFZ6OUpLV55rlh/XnjtXnI+KJiPje1HizXl7aqi0P+8cPAAAAuCKuHTv///dU6/y/7e4wkwMAAAAGZ3rYCQAAAABnrt/z/4kzzgMAAAA4O67/AwAAwKX25VdeyYa0/f7r5dd3d9a3Xr+1XK2vlzd2lspLX99ptWw+s2+j1/pqW1u3PxObO3cqjWq9UanvjsXG1s5m47W1I6/ABgAAAM7REx976/dJROx/drw5ZEb7W7TPZsBFVTwoJfm4w2b9h8db4z+fU1LAuRgZdgLA0BSHnQAwNKVhJwAMXdJjftebd36Tjz8+2HwAAIDBm/lI9+v/hVOX3D99NnDh2Yjh6nL9H66u5vX/fu/kdbAAl0qp1xHAqdv83QFnAwzDe77+31OavquEAACAgZtsDkmhXGzXC4VyOeJ687UApWRlrVadjYjHI+J3U6XHsvpcs2XS85wBAAAAAAAAAAAAAAAAAAAAAAAAAGhJ0yRSAAAA4FKLKPw1+VXrWf4zU89OHv99YDT5z1Tkrwh940ev/uDOYqOxPZdN/+fB9MYP8+nPDeMXDAAAALgSerzA/6j2eXr7PB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABunB/TeX2sN5xv375yNiulP8Yow1x2NRioiJfyVRPLRcEhEjA4g/nv35cCt+ciR+kqV1ELJT/PEBxN+/9zD+g5PxYz//FDrFvzaA+HCVvZXtf17utP0V4unmuPP2V4w4Un9U3fd/cbD/G+my/V/vM8aTb/+80jX+vYgni0fjP3YsftIl/jN9xv/G1/b2us1Lfxwx0/H7J2k3yfaQUWls3K7Ud/durW0srlZXq5vz83MvLLy48PzCbGVlrVbN/3aM8d2P/uKd0/o/0SX+dI/+P3tibaMdY/zv7Tv3P9gqljrFv/FMh/i//kne4mT8Qv7d98m8nM2faZf3W+XDnvrZb586rf/LXfrf69//RreVHnPzK9/+U59NAYBzUN/dW1+s1arbl7aQnaX32Tg7OrsQOV/0Qvt/z0XJ51ELdwe6wjRN0+xTeQ/rSeIifCzNwlB3SwAAwBl4eNA/7EwAAAAAAAAAAAAAAAAAAADg6jqPx4kdj7l/UEoG8QhtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB+H8AAAD//2Nm0fI=") r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000200)=""/145, 0x91, 0x40000000, &(0x7f00000002c0)=@ethernet={0x6, @multicast}, 0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 407.970657ms ago: executing program 3 (id=2448): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x78b, &(0x7f0000001440)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFRQqLkSwUNC17TCZhppJpmQmpQlZtIjgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjrT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxPnKxHx1y+rB69//Pqz35z4570nrn74UxIn4mB9fnMcO2UiJuqfyVD6Ed7jtZ2urM+SfjeAh5JumgO1rTwOxVgMVHNtjPSyZQBAt2wAAHtQYgwAAHtM43uAW+tr+Ubq7zcSvXXj1YjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV373yVpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3n3y7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs442XPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/J2Nb+vPu1irlJZmo7Yl7y5efrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF0xEBH7+90IAKDnHP8BYO/Z3vF/pGvtAAB64nI4/weAPanj4/+Z7rYDAOgd5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02amTJ9O08ff6Wj4tz15YWZ4vXTgyWyjPZxeW89l8ael8dq5UmisWsvnSQtt/dKn2UiyVzs/E4vLFqUqhXJkqr6yeXigtL1ZOn1vIzRVOF4Z6FhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdK68sjqfKxYLSzJbZkZ2RzN2TWYwdkUzZLqWad5LjPRvBwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy/0XAAD//9WLLt8=") io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0xffffffff, 0x40}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x4b, &(0x7f0000000580)="b9ff0307680a500649f587b3d033", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 407.124657ms ago: executing program 7 (id=2457): syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) keyctl$unlink(0x9, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) 342.720102ms ago: executing program 1 (id=2449): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4, 0xff, 0x80, 0xd, 0x0, 0x200, 0x8a00, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x150b, 0x2, @perf_bp={&(0x7f0000000200)}, 0x0, 0x80000000, 0x66a8f776, 0x9, 0x4, 0x6bb, 0xb, 0x0, 0x80000000, 0x0, 0x6}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x6, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x18bb, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000, 0xfffffffd, 0xfffb}, 0x0, 0x1, r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) close(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 320.250574ms ago: executing program 3 (id=2450): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 221.302142ms ago: executing program 7 (id=2451): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 36.701427ms ago: executing program 7 (id=2452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 0s ago: executing program 5 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) kernel console output (not intermixed with test programs): packet_socket permissive=1 [ 99.585881][ T29] audit: type=1400 audit(1756046932.414:3152): avc: denied { read } for pid=6271 comm="syz.2.928" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.610054][ T29] audit: type=1400 audit(1756046932.414:3153): avc: denied { open } for pid=6271 comm="syz.2.928" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.618926][ T6275] loop2: detected capacity change from 0 to 164 [ 99.644148][ T6275] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.679459][ T6275] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.692448][ T6275] Symlink component flag not implemented [ 99.698613][ T6275] Symlink component flag not implemented [ 99.720571][ T6275] Symlink component flag not implemented (7) [ 99.726618][ T6275] Symlink component flag not implemented (116) [ 99.828807][ T6301] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 100.088727][ T6339] netlink: 'syz.2.960': attribute type 3 has an invalid length. [ 100.324323][ T6356] lo speed is unknown, defaulting to 1000 [ 100.455849][ T6386] SELinux: Context is not valid (left unmapped). [ 100.514613][ T6391] loop2: detected capacity change from 0 to 512 [ 100.534697][ T6391] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.562045][ T6395] loop5: detected capacity change from 0 to 2048 [ 101.021692][ T9] usb usb6-port1: attempt power cycle [ 101.127204][ T6448] loop5: detected capacity change from 0 to 512 [ 101.135783][ T6448] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 101.145726][ T6450] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 101.154363][ T6450] SELinux: failed to load policy [ 101.196783][ T6454] loop5: detected capacity change from 0 to 512 [ 101.207836][ T6454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.244045][ T6454] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.257500][ T6454] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1016: corrupted xattr block 19: overlapping e_value [ 101.273294][ T6454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.282990][ T6454] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1016: corrupted xattr block 19: overlapping e_value [ 101.297851][ T6454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.307220][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.317138][ T6454] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1016: corrupted xattr block 19: overlapping e_value [ 101.332221][ T6454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.363518][ T6465] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 101.376635][ T6465] loop2: detected capacity change from 0 to 512 [ 101.389486][ T6465] EXT4-fs: Ignoring removed bh option [ 101.397462][ T6465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.406223][ T6465] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 101.433889][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 101.878576][ T6495] loop2: detected capacity change from 0 to 512 [ 101.890883][ T6495] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.930994][ T6498] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 102.305140][ T6521] netlink: 'syz.5.1045': attribute type 10 has an invalid length. [ 102.320668][ T6521] team0 (unregistering): Port device team_slave_0 removed [ 102.333467][ T6521] team0 (unregistering): Port device team_slave_1 removed [ 102.358986][ T6524] loop5: detected capacity change from 0 to 512 [ 102.371035][ T6524] EXT4-fs: Ignoring removed bh option [ 102.378047][ T6524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.386753][ T6524] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048) [ 102.447202][ T6528] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 102.650422][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.659797][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.677292][ T6536] lo speed is unknown, defaulting to 1000 [ 102.684512][ T1088] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 102.797457][ T6557] usb usb8: usbfs: process 6557 (syz.2.1061) did not claim interface 0 before use [ 102.839255][ T6561] loop2: detected capacity change from 0 to 512 [ 102.853598][ T6561] EXT4-fs mount: 16 callbacks suppressed [ 102.853657][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.872162][ T6561] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.932463][ T9] usb usb6-port1: unable to enumerate USB device [ 102.955351][ T6260] hub 6-0:1.0: USB hub found [ 102.961038][ T6260] hub 6-0:1.0: 8 ports detected [ 102.968445][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.984820][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28 [ 102.997617][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.997617][ T12] [ 103.008482][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 103.014531][ T12] EXT4-fs (loop2): Free/Dirty block details [ 103.020716][ T12] EXT4-fs (loop2): free_blocks=65280 [ 103.026213][ T12] EXT4-fs (loop2): dirty_blocks=1029 [ 103.031658][ T12] EXT4-fs (loop2): Block reservation details [ 103.037714][ T12] EXT4-fs (loop2): i_reserved_data_blocks=1029 [ 103.059849][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.110006][ T6577] pim6reg: entered allmulticast mode [ 103.116949][ T6577] pim6reg: left allmulticast mode [ 103.292334][ T6599] usb usb8: usbfs: process 6599 (syz.0.1080) did not claim interface 0 before use [ 103.324476][ T6599] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 103.539699][ T6627] IPv6: Can't replace route, no match found [ 103.580116][ T6630] loop5: detected capacity change from 0 to 512 [ 103.607549][ T6630] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.658073][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 103.855172][ T6664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1109'. [ 103.900123][ T6669] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 103.920760][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 103.929433][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 104.133421][ T6683] netlink: 536 bytes leftover after parsing attributes in process `syz.3.1118'. [ 104.143563][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1118'. [ 104.188617][ T6688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 104.252765][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 104.252783][ T29] audit: type=1400 audit(1756047193.108:3427): avc: denied { name_bind } for pid=6696 comm="syz.3.1125" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 104.284356][ T29] audit: type=1400 audit(1756047193.138:3428): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.356120][ T6703] Invalid ELF header magic: != ELF [ 104.361533][ T29] audit: type=1400 audit(1756047193.208:3429): avc: denied { sys_module } for pid=6702 comm="+}[@" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.361572][ T29] audit: type=1400 audit(1756047193.208:3430): avc: denied { module_load } for pid=6702 comm="+}[@" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 104.361617][ T29] audit: type=1400 audit(1756047193.208:3431): avc: denied { unmount } for pid=4727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 104.438386][ T51] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 104.473132][ T6708] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 104.474799][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 104.481706][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 104.490039][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 104.508095][ T29] audit: type=1400 audit(1756047193.328:3432): avc: denied { write } for pid=6705 comm="syz.5.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.599311][ T6713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6713 comm=syz.5.1133 [ 104.612031][ T6713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6713 comm=syz.5.1133 [ 104.625079][ T29] audit: type=1326 audit(1756047193.468:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89ef5ebe9 code=0x7ffc0000 [ 104.648802][ T29] audit: type=1326 audit(1756047193.468:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89ef5ebe9 code=0x7ffc0000 [ 104.672435][ T29] audit: type=1326 audit(1756047193.468:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89ef5ebe9 code=0x7ffc0000 [ 104.695984][ T29] audit: type=1326 audit(1756047193.468:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89ef5ebe9 code=0x7ffc0000 [ 104.920075][ T6729] loop5: detected capacity change from 0 to 1024 [ 104.926805][ T9] usb usb6-port1: attempt power cycle [ 104.938367][ T6729] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.949702][ T6729] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.963032][ T6729] JBD2: no valid journal superblock found [ 104.968805][ T6729] EXT4-fs (loop5): Could not load journal inode [ 104.975688][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 104.997312][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1143'. [ 105.060380][ T6739] loop5: detected capacity change from 0 to 164 [ 105.619921][ T6806] loop5: detected capacity change from 0 to 512 [ 105.648432][ T6806] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 105.671354][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 105.720602][ T6813] SELinux: Context is not valid (left unmapped). [ 106.035464][ T6842] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 106.215917][ T6851] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 106.394396][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 106.494958][ T6867] loop5: detected capacity change from 0 to 512 [ 106.511434][ T6867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.536918][ T6867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.563390][ T6867] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.607268][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.772381][ T9] usb usb6-port1: unable to enumerate USB device [ 106.957072][ T6902] loop2: detected capacity change from 0 to 512 [ 106.996610][ T3297] udevd[3297]: failed to send result of seq 10556 to main daemon: Connection refused [ 107.012333][ T3297] printk: udevd: 1 output lines suppressed due to ratelimiting [ 107.021839][ T6902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.064324][ T6902] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.108196][ T6910] loop5: detected capacity change from 0 to 512 [ 107.123582][ T6910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.136539][ T6910] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.151920][ T6910] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1223: corrupted inode contents [ 107.167236][ T6910] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1223: mark_inode_dirty error [ 107.179302][ T3306] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 107.192312][ T6910] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1223: corrupted inode contents [ 107.204764][ T3306] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 107.238613][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.273313][ T5459] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.291048][ T5459] syz_tun (unregistering): left allmulticast mode [ 107.322238][ T6919] netlink: 'syz.5.1227': attribute type 10 has an invalid length. [ 107.333580][ T6919] loop5: detected capacity change from 0 to 512 [ 107.340194][ T6919] EXT4-fs: Ignoring removed bh option [ 107.350195][ T6919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.359036][ T6919] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048) [ 107.582398][ T12] bridge_slave_1: left allmulticast mode [ 107.588205][ T12] bridge_slave_1: left promiscuous mode [ 107.593971][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.621130][ T12] bridge_slave_0: left allmulticast mode [ 107.627080][ T12] bridge_slave_0: left promiscuous mode [ 107.632966][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.721966][ T6937] loop5: detected capacity change from 0 to 128 [ 107.743907][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.763447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.782887][ T12] bond0 (unregistering): Released all slaves [ 107.790277][ T6938] bio_check_eod: 13128 callbacks suppressed [ 107.790295][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.790295][ T6938] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 107.842250][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.842250][ T6938] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 107.858865][ T12] tipc: Left network mode [ 107.872531][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.872531][ T6938] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 107.927305][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.927305][ T6938] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 107.968778][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.968778][ T6938] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 107.986019][ T12] hsr_slave_0: left promiscuous mode [ 107.991434][ T6938] syz.5.1235: attempt to access beyond end of device [ 107.991434][ T6938] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 108.005087][ T12] hsr_slave_1: left promiscuous mode [ 108.018269][ T6938] syz.5.1235: attempt to access beyond end of device [ 108.018269][ T6938] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 108.032623][ T6938] syz.5.1235: attempt to access beyond end of device [ 108.032623][ T6938] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 108.046529][ T6938] syz.5.1235: attempt to access beyond end of device [ 108.046529][ T6938] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 108.060172][ T6938] syz.5.1235: attempt to access beyond end of device [ 108.060172][ T6938] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 108.136422][ T6921] lo speed is unknown, defaulting to 1000 [ 108.233163][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 108.244246][ T6955] loop5: detected capacity change from 0 to 1024 [ 108.264894][ T6955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.283932][ T6955] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.301456][ T6955] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1240: lblock 0 mapped to illegal pblock 0 (length 6) [ 108.316813][ T12] IPVS: stop unused estimator thread 0... [ 108.321481][ T6955] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.1240: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 108.349591][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.357026][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.372775][ T6921] bridge_slave_0: entered allmulticast mode [ 108.384314][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.395978][ T6921] bridge_slave_0: entered promiscuous mode [ 108.414852][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.422208][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.448178][ T6921] bridge_slave_1: entered allmulticast mode [ 108.455788][ T6921] bridge_slave_1: entered promiscuous mode [ 108.476869][ T6965] netlink: 'syz.5.1242': attribute type 10 has an invalid length. [ 108.488038][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.501055][ T6965] loop5: detected capacity change from 0 to 512 [ 108.511204][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.521005][ T6965] EXT4-fs: Ignoring removed bh option [ 108.528127][ T6965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.536694][ T6965] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048) [ 108.559686][ T6921] team0: Port device team_slave_0 added [ 108.567752][ T6921] team0: Port device team_slave_1 added [ 108.628119][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.635356][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.661580][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.674493][ T9] usb usb6-port1: attempt power cycle [ 108.690902][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.698025][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.724157][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.755855][ T6921] hsr_slave_0: entered promiscuous mode [ 108.762150][ T6921] hsr_slave_1: entered promiscuous mode [ 108.841817][ T6944] syz.3.1236 (6944) used greatest stack depth: 8872 bytes left [ 108.847339][ T6921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.863636][ T6921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.884985][ T6921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.921878][ T6921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.966229][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.973457][ T6921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.980841][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.987921][ T6921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.080764][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.116023][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.127473][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.139691][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.165219][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.172470][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.186797][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.193925][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.308349][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 109.308368][ T29] audit: type=1326 audit(1756047198.158:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.350486][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.380713][ T29] audit: type=1326 audit(1756047198.198:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.404728][ T29] audit: type=1326 audit(1756047198.198:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.428356][ T29] audit: type=1326 audit(1756047198.198:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.438805][ T6997] loop5: detected capacity change from 0 to 8192 [ 109.451915][ T29] audit: type=1326 audit(1756047198.198:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.481900][ T29] audit: type=1326 audit(1756047198.198:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.505832][ T29] audit: type=1326 audit(1756047198.198:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.529582][ T29] audit: type=1326 audit(1756047198.198:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.553127][ T29] audit: type=1326 audit(1756047198.198:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.576761][ T29] audit: type=1326 audit(1756047198.198:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 109.757059][ T6921] veth0_vlan: entered promiscuous mode [ 109.773076][ T6921] veth1_vlan: entered promiscuous mode [ 109.789534][ T6921] veth0_macvtap: entered promiscuous mode [ 109.819170][ T6921] veth1_macvtap: entered promiscuous mode [ 109.841743][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.860702][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.874695][ T7018] loop5: detected capacity change from 0 to 164 [ 109.882658][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.896195][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.906493][ T7018] ISOFS: unable to read i-node block [ 109.911885][ T7018] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 109.922960][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.932258][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.003908][ T7021] loop5: detected capacity change from 0 to 2048 [ 110.090926][ T7023] lo speed is unknown, defaulting to 1000 [ 110.162502][ T7029] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 110.292996][ T7044] loop5: detected capacity change from 0 to 512 [ 110.301703][ T7044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 110.309863][ T7044] System zones: 1-12 [ 110.315967][ T7044] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1266: error while reading EA inode 32 err=-116 [ 110.336501][ T7044] EXT4-fs (loop5): Remounting filesystem read-only [ 110.343455][ T7044] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 110.344334][ T7047] loop6: detected capacity change from 0 to 2048 [ 110.362283][ T7044] EXT4-fs (loop5): 1 orphan inode deleted [ 110.368547][ T7044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.384333][ T7047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.411018][ T7047] EXT4-fs (loop6): shut down requested (0) [ 110.422560][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.438713][ T7047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 110.449340][ T7047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 110.469761][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.541151][ T7058] loop6: detected capacity change from 0 to 1024 [ 110.563847][ T7058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.567123][ T7062] loop5: detected capacity change from 0 to 128 [ 110.584598][ T7058] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.598713][ T7062] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.617066][ T7058] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 110.634703][ T7062] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.667162][ T7058] EXT4-fs (loop6): Remounting filesystem read-only [ 110.707501][ T4727] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.721731][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.801625][ T9] usb usb6-port1: unable to enumerate USB device [ 110.839519][ T7080] __nla_validate_parse: 1 callbacks suppressed [ 110.839540][ T7080] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1280'. [ 110.880102][ T7080] 0{X: renamed from gretap0 (while UP) [ 110.895025][ T7080] 0{X: entered allmulticast mode [ 110.912744][ T7080] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 110.931000][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 110.940115][ T7086] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1282'. [ 110.959672][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 110.991564][ T7086] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1282'. [ 111.000934][ T7086] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1282'. [ 111.076397][ T7104] netlink: 'syz.3.1290': attribute type 21 has an invalid length. [ 111.086105][ T7104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1290'. [ 111.095410][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 111.105312][ T7106] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1288'. [ 111.115666][ T7105] loop5: detected capacity change from 0 to 512 [ 111.124247][ T7100] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1288'. [ 111.134618][ T7105] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 111.226484][ T7112] netlink: 'syz.6.1293': attribute type 10 has an invalid length. [ 111.255178][ T7112] team0 (unregistering): Port device team_slave_0 removed [ 111.269825][ T7112] team0 (unregistering): Port device team_slave_1 removed [ 111.284985][ T7115] loop6: detected capacity change from 0 to 512 [ 111.299690][ T7115] EXT4-fs: Ignoring removed bh option [ 111.318590][ T7115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.327270][ T7115] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 111.484948][ T7117] capability: warning: `syz.3.1295' uses 32-bit capabilities (legacy support in use) [ 111.769960][ T7129] IPv6: Can't replace route, no match found [ 111.873135][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 112.050513][ T7163] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 112.059517][ T7163] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 112.068735][ T7163] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 112.077875][ T7163] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 112.955376][ T7181] loop6: detected capacity change from 0 to 1024 [ 112.976574][ T7181] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.999122][ T7181] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1325: bg 0: block 10: padding at end of block bitmap is not set [ 113.015692][ T7188] loop5: detected capacity change from 0 to 1024 [ 113.033118][ T7188] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.045125][ T7181] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1325: Failed to acquire dquot type 0 [ 113.066941][ T7188] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1329: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.086462][ T7181] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1325: Failed to acquire dquot type 0 [ 113.105864][ T7188] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1329: Failed to acquire dquot type 0 [ 113.117654][ T7181] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1325: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.132872][ T7188] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1329: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.148243][ T7181] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1325: Failed to acquire dquot type 0 [ 113.161220][ T7188] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1329: Invalid inode bitmap blk 0 in block_group 0 [ 113.174357][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.182750][ T7181] EXT4-fs (loop6): 1 orphan inode deleted [ 113.196206][ T7188] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 113.205277][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 113.218275][ T7188] EXT4-fs (loop5): 1 orphan inode deleted [ 113.225113][ T7181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.239455][ T7188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.267035][ T7188] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.279968][ T7181] syz.6.1325 (7181) used greatest stack depth: 8728 bytes left [ 113.288920][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.304812][ T7188] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (18333!=0) [ 113.322807][ T7196] serio: Serial port ptm0 [ 113.335530][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.423545][ T7203] loop9: detected capacity change from 0 to 7 [ 113.430143][ T7203] buffer_io_error: 49414 callbacks suppressed [ 113.430233][ T7203] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.445845][ T7203] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.453857][ T7203] loop9: unable to read partition table [ 113.459720][ T7203] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.459720][ T7203] ) failed (rc=-5) [ 113.466591][ T7205] loop5: detected capacity change from 0 to 512 [ 113.499326][ T7205] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.506262][ T7205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.517359][ T7205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 113.519699][ T7207] netlink: 'syz.6.1336': attribute type 10 has an invalid length. [ 113.525703][ T7205] System zones: 1-12 [ 113.538057][ T7205] EXT4-fs (loop5): 1 truncate cleaned up [ 113.544275][ T7205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.560980][ T7207] loop6: detected capacity change from 0 to 512 [ 113.575743][ T7207] EXT4-fs: Ignoring removed bh option [ 113.589479][ T7207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.598141][ T7207] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 113.763883][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.032607][ T7249] netlink: 'syz.6.1350': attribute type 1 has an invalid length. [ 114.167735][ T7269] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 114.167780][ T7271] loop6: detected capacity change from 0 to 512 [ 114.168125][ T7271] EXT4-fs: Ignoring removed orlov option [ 114.212007][ T7271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.286914][ T7271] EXT4-fs (loop6): orphan cleanup on readonly fs [ 114.299883][ T7271] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1357: bg 0: block 248: padding at end of block bitmap is not set [ 114.312029][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 114.312050][ T29] audit: type=1326 audit(1756047203.168:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.344430][ T29] audit: type=1326 audit(1756047203.168:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.375318][ T7271] Quota error (device loop6): write_blk: dquota write failed [ 114.375506][ T29] audit: type=1326 audit(1756047203.228:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.382902][ T7271] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 114.406329][ T29] audit: type=1326 audit(1756047203.228:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.416347][ T7271] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1357: Failed to acquire dquot type 1 [ 114.439973][ T29] audit: type=1326 audit(1756047203.228:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.454375][ T7271] EXT4-fs (loop6): 1 truncate cleaned up [ 114.474507][ T29] audit: type=1326 audit(1756047203.228:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.474543][ T29] audit: type=1326 audit(1756047203.228:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.527746][ T29] audit: type=1326 audit(1756047203.228:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 114.582722][ T7271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.668586][ T7271] EXT4-fs: Ignoring removed orlov option [ 114.680050][ T7271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.698134][ T7271] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 114.740796][ T7271] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.1357: Abort forced by user [ 114.762463][ T7271] EXT4-fs (loop6): Remounting filesystem read-only [ 114.769101][ T7271] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.789132][ T7271] ext4 filesystem being remounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.345601][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.384911][ T7334] __nla_validate_parse: 15 callbacks suppressed [ 116.384934][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 116.400660][ T7334] netem: change failed [ 116.597714][ T7361] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 116.806551][ T7377] IPVS: stopping master sync thread 3723 ... [ 116.935014][ T7388] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 117.062611][ T7401] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 117.096485][ T7404] loop5: detected capacity change from 0 to 256 [ 117.201475][ T7414] netlink: 'syz.1.1416': attribute type 298 has an invalid length. [ 117.264257][ T7422] loop5: detected capacity change from 0 to 512 [ 117.271247][ T7420] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 117.277880][ T7422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.350919][ T7427] loop6: detected capacity change from 0 to 1024 [ 117.395920][ T7427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.409369][ T7422] EXT4-fs (loop5): 1 truncate cleaned up [ 117.438606][ T7422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.466849][ T7426] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.509782][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.529730][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.195266][ T7443] netlink: 'syz.3.1428': attribute type 21 has an invalid length. [ 118.221199][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1428'. [ 118.230334][ T7443] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 118.259964][ T7449] loop6: detected capacity change from 0 to 512 [ 118.267860][ T7449] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.694164][ T7475] loop5: detected capacity change from 0 to 512 [ 121.701055][ T7475] EXT4-fs: Ignoring removed orlov option [ 121.728352][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 121.728367][ T29] audit: type=1400 audit(1756047210.578:4775): avc: denied { remount } for pid=7471 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.760094][ T3550] syz_tun (unregistering): left allmulticast mode [ 121.772292][ T7475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.791547][ T7475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.801936][ T7475] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1443: bg 0: block 248: padding at end of block bitmap is not set [ 121.822990][ T7475] Quota error (device loop5): write_blk: dquota write failed [ 121.830554][ T7475] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 121.840686][ T7475] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1443: Failed to acquire dquot type 1 [ 121.913720][ T7475] EXT4-fs (loop5): 1 truncate cleaned up [ 121.932022][ T7475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.955480][ T29] audit: type=1400 audit(1756047210.808:4776): avc: denied { mount } for pid=7504 comm="syz.3.1452" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.970826][ T7475] EXT4-fs: Ignoring removed orlov option [ 121.990558][ T1088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.000752][ T7475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.013733][ T7475] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 122.034453][ T29] audit: type=1400 audit(1756047210.868:4777): avc: denied { associate } for pid=7511 comm="syz.3.1455" name="449" dev="tmpfs" ino=2345 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 122.061864][ T29] audit: type=1400 audit(1756047210.878:4778): avc: denied { remove_name } for pid=7511 comm="syz.3.1455" name="bus" dev="tmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 122.090755][ T29] audit: type=1400 audit(1756047210.878:4779): avc: denied { add_name } for pid=7511 comm="syz.3.1455" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 122.123067][ T1088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.125391][ T29] audit: type=1400 audit(1756047210.888:4780): avc: denied { rmdir } for pid=3310 comm="syz-executor" name="449" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 122.163200][ T7475] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.1443: Abort forced by user [ 122.183631][ T1088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.195767][ T7475] EXT4-fs (loop5): Remounting filesystem read-only [ 122.202403][ T7475] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 122.233530][ T1088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.249746][ T7475] ext4 filesystem being remounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.324830][ T1088] bridge_slave_1: left allmulticast mode [ 122.330719][ T1088] bridge_slave_1: left promiscuous mode [ 122.336645][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.366987][ T1088] bridge_slave_0: left allmulticast mode [ 122.372744][ T1088] bridge_slave_0: left promiscuous mode [ 122.378547][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.442668][ T29] audit: type=1400 audit(1756047211.298:4781): avc: denied { ioctl } for pid=7535 comm="syz.3.1464" path="socket:[17193]" dev="sockfs" ino=17193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.529696][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.552991][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.580006][ T29] audit: type=1400 audit(1756047211.418:4782): avc: denied { ioctl } for pid=7543 comm="syz.1.1468" path="socket:[18137]" dev="sockfs" ino=18137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.607678][ T1088] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 122.617509][ T1088] bond0 (unregistering): Released all slaves [ 122.629289][ T7482] lo speed is unknown, defaulting to 1000 [ 122.635263][ T7544] syz_tun: entered allmulticast mode [ 122.734978][ T7550] bridge0: port 3(syz_tun) entered blocking state [ 122.741569][ T7550] bridge0: port 3(syz_tun) entered disabled state [ 122.748917][ T7550] syz_tun: entered promiscuous mode [ 122.755651][ T7550] bridge0: port 3(syz_tun) entered blocking state [ 122.762249][ T7550] bridge0: port 3(syz_tun) entered forwarding state [ 122.774420][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.781900][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.791965][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.799488][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.810274][ T1088] veth1_macvtap: left promiscuous mode [ 122.816300][ T1088] veth0_macvtap: left promiscuous mode [ 122.834749][ T1088] veth1_vlan: left promiscuous mode [ 122.843093][ T4727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.042621][ T7560] tipc: Started in network mode [ 123.047755][ T7560] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.085223][ T7560] tipc: Enabled bearer , priority 10 [ 123.157327][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 123.187728][ T7482] chnl_net:caif_netlink_parms(): no params data found [ 123.296099][ T7582] loop6: detected capacity change from 0 to 512 [ 123.344175][ T7582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.386933][ T1088] IPVS: stop unused estimator thread 0... [ 123.393077][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.400197][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.407669][ T7582] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.419376][ T7590] loop9: detected capacity change from 0 to 7 [ 123.431593][ T7590] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.433350][ T7482] bridge_slave_0: entered allmulticast mode [ 123.446070][ T7590] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.454087][ T7590] loop9: unable to read partition table [ 123.459921][ T7482] bridge_slave_0: entered promiscuous mode [ 123.470195][ T7582] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1483: corrupted inode contents [ 123.472878][ T7590] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 123.472878][ T7590] ) failed (rc=-5) [ 123.495868][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.503048][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.513470][ T7482] bridge_slave_1: entered allmulticast mode [ 123.519449][ T7582] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1483: mark_inode_dirty error [ 123.537386][ T7482] bridge_slave_1: entered promiscuous mode [ 123.544656][ T7582] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1483: corrupted inode contents [ 123.573463][ T7482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.591419][ T7582] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1483: mark_inode_dirty error [ 123.613512][ T7482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.626654][ T7596] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1483: corrupted inode contents [ 123.646015][ T7596] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1483: mark_inode_dirty error [ 123.657742][ T7596] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1483: corrupted inode contents [ 123.671058][ T7482] team0: Port device team_slave_0 added [ 123.672800][ T7602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1483: corrupted inode contents [ 123.680070][ T7482] team0: Port device team_slave_1 added [ 123.689318][ T7602] EXT4-fs error (device loop6): add_dirent_to_buf:2153: inode #2: comm syz.6.1483: mark_inode_dirty error [ 123.714635][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.721822][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.748064][ T7482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.761942][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.768941][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.795537][ T7482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.814148][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.863607][ T7482] hsr_slave_0: entered promiscuous mode [ 123.894478][ T7482] hsr_slave_1: entered promiscuous mode [ 123.902768][ T7482] debugfs: 'hsr0' already exists in 'hsr' [ 123.908588][ T7482] Cannot create hsr debugfs directory [ 124.008404][ T7482] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.028792][ T7482] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.050686][ T7482] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.062233][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 124.071678][ T7482] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.086612][ T7636] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1501'. [ 124.096113][ T9] tipc: Node number set to 2886997162 [ 124.103845][ T7636] netlink: 'syz.6.1501': attribute type 9 has an invalid length. [ 124.111707][ T7636] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1501'. [ 124.120876][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1501'. [ 124.189808][ T7649] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 124.203646][ T7482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.236794][ T7482] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.252484][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.259702][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.279351][ T7482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.289941][ T7482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.322166][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.329507][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.471081][ T7482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.504657][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'. [ 124.648071][ T7482] veth0_vlan: entered promiscuous mode [ 124.662840][ T7482] veth1_vlan: entered promiscuous mode [ 124.680722][ T7482] veth0_macvtap: entered promiscuous mode [ 124.688616][ T7482] veth1_macvtap: entered promiscuous mode [ 124.702803][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.716785][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.743569][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.764423][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.795439][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.810018][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.842869][ T7694] loop6: detected capacity change from 0 to 1024 [ 124.849893][ T7694] EXT4-fs: Ignoring removed oldalloc option [ 124.856030][ T7694] EXT4-fs: Ignoring removed bh option [ 124.873094][ T7694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.595161][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1534'. [ 125.605640][ T7736] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1534'. [ 125.694810][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.757699][ T7752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 125.758044][ T7746] IPVS: stopping master sync thread 7752 ... [ 125.892658][ T7767] loop6: detected capacity change from 0 to 512 [ 125.899475][ T7767] EXT4-fs: Ignoring removed bh option [ 125.906677][ T7767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.915300][ T7767] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 125.969241][ T7762] sd 0:0:1:0: device reset [ 126.177950][ T7801] IPVS: Error connecting to the multicast addr [ 126.220203][ T7807] netlink: 'syz.6.1566': attribute type 3 has an invalid length. [ 126.287978][ T7811] SELinux: failed to load policy [ 126.288415][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1571'. [ 126.334241][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1574'. [ 126.335020][ T7823] syz_tun: entered allmulticast mode [ 126.451590][ T7839] vhci_hcd: invalid port number 236 [ 126.731776][ T29] kauditd_printk_skb: 1042 callbacks suppressed [ 126.731796][ T29] audit: type=1326 audit(1756047215.578:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f138bbf5ba7 code=0x7ffc0000 [ 126.762099][ T29] audit: type=1326 audit(1756047215.578:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f138bb9add9 code=0x7ffc0000 [ 126.786191][ T29] audit: type=1326 audit(1756047215.578:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 126.816399][ T29] audit: type=1400 audit(1756047215.588:5828): avc: denied { prog_load } for pid=7861 comm="syz.7.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.835700][ T29] audit: type=1400 audit(1756047215.588:5829): avc: denied { bpf } for pid=7861 comm="syz.7.1588" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.856605][ T29] audit: type=1400 audit(1756047215.588:5830): avc: denied { perfmon } for pid=7861 comm="syz.7.1588" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.877921][ T29] audit: type=1400 audit(1756047215.588:5831): avc: denied { prog_run } for pid=7861 comm="syz.7.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.897384][ T29] audit: type=1400 audit(1756047215.638:5832): avc: denied { open } for pid=7862 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.916983][ T29] audit: type=1400 audit(1756047215.638:5833): avc: denied { kernel } for pid=7862 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.936724][ T29] audit: type=1400 audit(1756047215.638:5834): avc: denied { tracepoint } for pid=7862 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.939781][ T7860] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 127.033712][ T7880] IPVS: Error joining to the multicast group [ 127.065791][ T7887] Illegal XDP return value 2390388260 on prog (id 791) dev syz_tun, expect packet loss! [ 127.092625][ T7881] netlink: 'syz.7.1599': attribute type 10 has an invalid length. [ 127.111694][ T7897] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 127.127068][ T7897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.147873][ T7881] team0 (unregistering): Port device team_slave_0 removed [ 127.148413][ T7901] loop7: detected capacity change from 0 to 512 [ 127.162103][ T7901] EXT4-fs: Ignoring removed bh option [ 127.168451][ T7901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.169966][ T7881] team0 (unregistering): Port device team_slave_1 removed [ 127.176943][ T7901] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048) [ 127.224806][ T7904] bond0: (slave dummy0): Releasing backup interface [ 127.571799][ T7931] SELinux: ebitmap: truncated map [ 127.581699][ T7931] SELinux: failed to load policy [ 128.032099][ T8005] raw_sendmsg: syz.6.1654 forgot to set AF_INET. Fix it! [ 128.073201][ T8011] loop6: detected capacity change from 0 to 128 [ 128.090302][ T8013] syzkaller1: entered promiscuous mode [ 128.095978][ T8013] syzkaller1: entered allmulticast mode [ 128.107171][ T8011] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.120411][ T8011] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.158736][ T8011] EXT4-fs (loop6): shut down requested (1) [ 128.178226][ T6921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.301038][ T8041] loop6: detected capacity change from 0 to 512 [ 128.325109][ T8041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.338491][ T8041] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.350119][ T8049] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 128.368334][ T8049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.444471][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.508559][ T8076] __nla_validate_parse: 5 callbacks suppressed [ 128.508643][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1681'. [ 129.637726][ T8142] syz_tun: entered allmulticast mode [ 129.675854][ T8145] loop7: detected capacity change from 0 to 1024 [ 129.684462][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1713'. [ 129.696481][ T8145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.720479][ T8145] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1712: bg 0: block 88: padding at end of block bitmap is not set [ 129.760214][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.906238][ T8167] syz_tun: entered allmulticast mode [ 129.914611][ T8173] loop7: detected capacity change from 0 to 128 [ 129.942733][ T8173] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.963487][ T8173] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.983314][ T8180] netlink: 'syz.5.1727': attribute type 1 has an invalid length. [ 130.020071][ T7482] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.103389][ T8201] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.154992][ T8209] netlink: 'syz.3.1737': attribute type 4 has an invalid length. [ 130.248422][ T8218] loop7: detected capacity change from 0 to 2048 [ 130.265352][ T8220] netlink: 'syz.1.1746': attribute type 10 has an invalid length. [ 130.273337][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1746'. [ 130.287921][ T8220] dummy0: entered promiscuous mode [ 130.294905][ T8220] bridge0: port 4(dummy0) entered blocking state [ 130.301421][ T8220] bridge0: port 4(dummy0) entered disabled state [ 130.309260][ T8220] dummy0: entered allmulticast mode [ 130.316784][ T8218] EXT4-fs (loop7): failed to initialize system zone (-117) [ 130.316837][ T8220] bridge0: port 4(dummy0) entered blocking state [ 130.316878][ T8220] bridge0: port 4(dummy0) entered forwarding state [ 130.337950][ T8218] EXT4-fs (loop7): mount failed [ 130.359426][ T8231] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 130.359521][ T8229] IPVS: stopping master sync thread 8231 ... [ 130.403755][ T8232] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 130.418692][ T8235] loop7: detected capacity change from 0 to 2048 [ 130.541850][ T3418] usb usb6-port1: attempt power cycle [ 130.548840][ T8235] loop7: unable to read partition table [ 130.556001][ T8235] loop7: partition table beyond EOD, truncated [ 130.562365][ T8235] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 130.650256][ T8264] loop7: detected capacity change from 0 to 1024 [ 130.662603][ T8264] EXT4-fs: Ignoring removed oldalloc option [ 130.668902][ T8264] EXT4-fs: Ignoring removed nobh option [ 130.688524][ T8264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.735399][ T8264] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1763: Allocating blocks 497-513 which overlap fs metadata [ 130.772807][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.810413][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1769'. [ 130.860430][ T8291] netlink: 'syz.7.1775': attribute type 10 has an invalid length. [ 130.871123][ T8291] loop7: detected capacity change from 0 to 512 [ 130.878010][ T8291] EXT4-fs: Ignoring removed bh option [ 130.884741][ T8291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.893518][ T8291] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048) [ 131.108828][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 131.125476][ T8303] team0: entered promiscuous mode [ 131.130594][ T8303] team0: entered allmulticast mode [ 131.157786][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1781'. [ 131.169989][ T8305] vlan2: entered allmulticast mode [ 131.175299][ T8305] dummy0: entered allmulticast mode [ 131.334606][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 131.344428][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 131.422592][ T8336] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1795'. [ 131.860242][ T29] kauditd_printk_skb: 1021 callbacks suppressed [ 131.860260][ T29] audit: type=1326 audit(1756047220.708:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 131.900381][ T29] audit: type=1326 audit(1756047220.738:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 131.924084][ T29] audit: type=1326 audit(1756047220.738:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 131.947578][ T29] audit: type=1326 audit(1756047220.738:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 131.971232][ T29] audit: type=1326 audit(1756047220.738:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80d52ebe9 code=0x7ffc0000 [ 132.000394][ T8382] bridge0: entered promiscuous mode [ 132.005953][ T8382] macsec1: entered promiscuous mode [ 132.012600][ T8382] bridge0: port 3(macsec1) entered blocking state [ 132.019138][ T8382] bridge0: port 3(macsec1) entered disabled state [ 132.025952][ T8382] macsec1: entered allmulticast mode [ 132.031285][ T8382] bridge0: entered allmulticast mode [ 132.038408][ T29] audit: type=1400 audit(1756047220.778:6861): avc: denied { connect } for pid=8375 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.043189][ T8382] macsec1: left allmulticast mode [ 132.058242][ T29] audit: type=1400 audit(1756047220.778:6862): avc: denied { setopt } for pid=8375 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.063380][ T8382] bridge0: left allmulticast mode [ 132.082803][ T29] audit: type=1400 audit(1756047220.778:6863): avc: denied { bind } for pid=8375 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.107304][ T29] audit: type=1400 audit(1756047220.778:6864): avc: denied { write } for pid=8375 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.127234][ T29] audit: type=1400 audit(1756047220.778:6865): avc: denied { read } for pid=8375 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.147771][ T8382] bridge0: left promiscuous mode [ 132.240512][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.249209][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.381683][ T3418] usb usb6-port1: unable to enumerate USB device [ 132.389988][ T8095] hub 6-0:1.0: USB hub found [ 132.394979][ T8095] hub 6-0:1.0: 8 ports detected [ 133.338695][ T8438] netlink: 'syz.3.1840': attribute type 10 has an invalid length. [ 133.551114][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'. [ 134.231624][ T3413] usb usb6-port1: attempt power cycle [ 134.523759][ T8476] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 134.576991][ T8480] ref_ctr_offset mismatch. inode: 0x5c0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000200 [ 134.730898][ T8494] ip6gre1: entered allmulticast mode [ 135.473207][ T8547] lo speed is unknown, defaulting to 1000 [ 135.615738][ T8563] netlink: 'syz.3.1907': attribute type 14 has an invalid length. [ 135.695402][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.699491][ T8578] netlink: 'syz.5.1903': attribute type 10 has an invalid length. [ 135.704423][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.776856][ T8584] IPv6: Can't replace route, no match found [ 136.051990][ T3413] usb usb6-port1: unable to enumerate USB device [ 136.290884][ T8622] ip6gre1: entered allmulticast mode [ 136.325980][ T8625] loop7: detected capacity change from 0 to 128 [ 136.399045][ T8625] bio_check_eod: 101 callbacks suppressed [ 136.399062][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.399062][ T8625] loop7: rw=2049, sector=633, nr_sectors = 8 limit=128 [ 136.419000][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.419000][ T8625] loop7: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 136.432578][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.432578][ T8625] loop7: rw=2049, sector=697, nr_sectors = 8 limit=128 [ 136.453383][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.453383][ T8625] loop7: rw=2049, sector=729, nr_sectors = 8 limit=128 [ 136.466942][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.466942][ T8625] loop7: rw=2049, sector=761, nr_sectors = 8 limit=128 [ 136.481430][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.481430][ T8625] loop7: rw=2049, sector=793, nr_sectors = 8 limit=128 [ 136.495357][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.495357][ T8625] loop7: rw=2049, sector=825, nr_sectors = 8 limit=128 [ 136.510366][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.510366][ T8625] loop7: rw=2049, sector=857, nr_sectors = 8 limit=128 [ 136.524671][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.524671][ T8625] loop7: rw=2049, sector=889, nr_sectors = 8 limit=128 [ 136.538935][ T8625] syz.7.1925: attempt to access beyond end of device [ 136.538935][ T8625] loop7: rw=2049, sector=921, nr_sectors = 8 limit=128 [ 136.577400][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 136.586396][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 136.595276][ T8636] loop7: detected capacity change from 0 to 512 [ 136.602132][ T8636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.613694][ T8636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.627130][ T8636] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.641036][ T8636] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1929: corrupted xattr block 19: overlapping e_value [ 136.655055][ T8636] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 136.665168][ T8636] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1929: corrupted xattr block 19: overlapping e_value [ 136.679889][ T8636] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 136.690253][ T8636] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1929: corrupted xattr block 19: overlapping e_value [ 136.704203][ T8636] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 136.724750][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.863201][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 136.863263][ T29] audit: type=1326 audit(1756047225.718:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19069a5ba7 code=0x7ffc0000 [ 136.894023][ T29] audit: type=1326 audit(1756047225.718:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f190694add9 code=0x7ffc0000 [ 136.917828][ T29] audit: type=1326 audit(1756047225.718:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 136.941272][ T29] audit: type=1326 audit(1756047225.718:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19069a5ba7 code=0x7ffc0000 [ 136.964981][ T29] audit: type=1326 audit(1756047225.718:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f190694add9 code=0x7ffc0000 [ 136.988491][ T29] audit: type=1326 audit(1756047225.718:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 137.012087][ T29] audit: type=1326 audit(1756047225.718:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19069a5ba7 code=0x7ffc0000 [ 137.035586][ T29] audit: type=1326 audit(1756047225.718:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f190694add9 code=0x7ffc0000 [ 137.059306][ T29] audit: type=1326 audit(1756047225.718:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 137.082735][ T29] audit: type=1326 audit(1756047225.748:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19069a5ba7 code=0x7ffc0000 [ 137.260510][ T8662] loop7: detected capacity change from 0 to 8192 [ 137.289234][ T8669] loop6: detected capacity change from 0 to 512 [ 137.302893][ T8669] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 137.338411][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1939'. [ 137.462597][ T8685] SELinux: failed to load policy [ 138.056467][ T51] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.075232][ T23] Process accounting resumed [ 138.134802][ T8726] loop6: detected capacity change from 0 to 8192 [ 138.201946][ T8726] loop6: p1 < > p2 p4 [ 138.206097][ T8726] loop6: partition table partially beyond EOD, truncated [ 138.213308][ T8726] loop6: p1 start 408832 is beyond EOD, truncated [ 138.213332][ T8726] loop6: p2 size 8388352 extends beyond EOD, truncated [ 138.269482][ T8745] wireguard0: entered promiscuous mode [ 138.275242][ T8745] wireguard0: entered allmulticast mode [ 138.362578][ T8753] loop7: detected capacity change from 0 to 512 [ 138.370545][ T8753] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.456957][ T9] Process accounting resumed [ 138.874602][ T8789] loop6: detected capacity change from 0 to 512 [ 138.883740][ T8789] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1990: error while reading EA inode 32 err=-116 [ 138.896748][ T8789] EXT4-fs (loop6): Remounting filesystem read-only [ 138.903435][ T8789] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 138.915584][ T8789] EXT4-fs (loop6): 1 orphan inode deleted [ 138.921830][ T8789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.985120][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.084514][ T8802] loop6: detected capacity change from 0 to 512 [ 139.091576][ T8802] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.103455][ T8802] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1995: invalid indirect mapped block 4294967295 (level 0) [ 139.117880][ T8802] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1995: invalid indirect mapped block 4294967295 (level 1) [ 139.135512][ T8802] EXT4-fs (loop6): 1 orphan inode deleted [ 139.141561][ T8802] EXT4-fs (loop6): 1 truncate cleaned up [ 139.150615][ T12] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 139.150651][ T8802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.188014][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.216865][ T8812] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 139.229217][ T8812] loop6: detected capacity change from 0 to 512 [ 139.235885][ T8812] EXT4-fs: Ignoring removed bh option [ 139.241950][ T8812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.250647][ T8812] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 139.660233][ T8839] syzkaller1: entered promiscuous mode [ 139.665944][ T8839] syzkaller1: entered allmulticast mode [ 139.673967][ T8825] lo speed is unknown, defaulting to 1000 [ 139.734569][ T8842] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 139.760821][ T8845] loop7: detected capacity change from 0 to 512 [ 139.767750][ T8845] EXT4-fs: Ignoring removed bh option [ 139.775905][ T8845] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.785120][ T8845] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 139.795543][ T8845] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 139.805164][ T8845] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 139.813933][ T8845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.844354][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.096462][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 140.106976][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 140.192381][ T8872] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 140.442617][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2034'. [ 140.461666][ T8893] loop6: detected capacity change from 0 to 512 [ 140.472466][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2033'. [ 140.485561][ T8893] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 140.501717][ T8893] System zones: 0-2, 18-18, 34-34 [ 140.513964][ T8893] EXT4-fs (loop6): orphan cleanup on readonly fs [ 140.523644][ T8893] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2034: bg 0: block 248: padding at end of block bitmap is not set [ 140.554213][ T8893] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2034: Failed to acquire dquot type 1 [ 140.557464][ T8905] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 140.578999][ T8893] EXT4-fs (loop6): 1 orphan inode deleted [ 140.585023][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 140.608605][ T8907] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 140.617334][ T8893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.730579][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.932919][ T8937] SELinux: failed to load policy [ 140.942664][ T8942] netlink: 'syz.7.2055': attribute type 10 has an invalid length. [ 140.955732][ T8942] loop7: detected capacity change from 0 to 512 [ 140.963655][ T8942] EXT4-fs: Ignoring removed bh option [ 140.969831][ T8942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.978452][ T8942] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048) [ 141.033264][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 141.188886][ T8956] loop6: detected capacity change from 0 to 512 [ 141.197030][ T8956] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 141.292365][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 141.302973][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 141.309450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.317385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.325329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.333364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.341244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.349193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.357163][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.365174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.373076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.381240][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.389602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.397536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.405653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.413582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.421448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.429451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.437325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.445286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.453246][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.461234][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.469081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.477036][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.485180][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.493085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.501028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.509070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.516948][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.524848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.532970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.540848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.548895][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.556868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.564833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.572773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.580628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.588564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.596537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.604448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.612325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.620226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.628194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.636105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.643953][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.651873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.659703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.667593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.675434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.683351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.691427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.699520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.707378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.715290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.723141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.731058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.738927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.746853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.754901][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.762811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.770658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.778657][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.786718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.794651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.802537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.810475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.818590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.826499][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.834435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.842336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.850177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.858385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.866441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.874440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.882362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.890421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.898310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.906459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.914309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.922214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.930074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.937998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.945873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.953794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.961649][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.969500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.977469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 141.985453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 141.993411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.001284][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.009196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.017130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.024993][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.032878][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.040718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.048628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.056478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.064496][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.072336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.080464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.088318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.096254][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.104199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.112099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.119950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.127850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.135888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.147811][ T1092] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 142.231540][ T29] kauditd_printk_skb: 893 callbacks suppressed [ 142.231608][ T29] audit: type=1400 audit(1756047231.078:8159): avc: denied { read } for pid=8968 comm="syz.1.2066" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.297048][ T8971] loop6: detected capacity change from 0 to 512 [ 142.321675][ T8971] EXT4-fs: Ignoring removed nobh option [ 142.358704][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2067: corrupted inode contents [ 142.376009][ T8971] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.2067: mark_inode_dirty error [ 142.388159][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2067: corrupted inode contents [ 142.416195][ T8971] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2067: mark_inode_dirty error [ 142.442038][ T8971] Quota error (device loop6): write_blk: dquota write failed [ 142.454403][ T8971] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 142.477699][ T8971] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2067: Failed to acquire dquot type 0 [ 142.510202][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2067: corrupted inode contents [ 142.534478][ T8971] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.2067: mark_inode_dirty error [ 142.558304][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2067: corrupted inode contents [ 142.584068][ T8971] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2067: mark_inode_dirty error [ 142.607964][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2067: corrupted inode contents [ 142.624340][ T8971] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 142.634038][ T8971] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2067: corrupted inode contents [ 142.671646][ T8971] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.2067: mark_inode_dirty error [ 142.682849][ T29] audit: type=1400 audit(1756047231.528:8160): avc: denied { watch_reads } for pid=8990 comm="syz.7.2074" path="/94/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.684016][ T8971] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 142.725892][ T8971] EXT4-fs (loop6): 1 truncate cleaned up [ 142.743793][ T8971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.783065][ T8971] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.813735][ T8971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.929277][ T29] audit: type=1326 audit(1756047231.778:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm=77DEA305FF07 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe80d52ebe9 code=0x0 [ 142.975909][ T29] audit: type=1400 audit(1756047231.808:8162): avc: denied { write } for pid=9012 comm="syz.1.2082" name="unix" dev="proc" ino=4026532524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 143.018889][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 143.030529][ T29] audit: type=1326 audit(1756047231.868:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9014 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e342ebe9 code=0x7ffc0000 [ 143.054357][ T29] audit: type=1326 audit(1756047231.868:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9014 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e342ebe9 code=0x7ffc0000 [ 143.078032][ T29] audit: type=1326 audit(1756047231.888:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9014 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e342ebe9 code=0x7ffc0000 [ 143.102095][ T29] audit: type=1326 audit(1756047231.888:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9014 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e342ebe9 code=0x7ffc0000 [ 143.312919][ T9041] netlink: 'syz.7.2091': attribute type 10 has an invalid length. [ 143.325288][ T9041] loop7: detected capacity change from 0 to 512 [ 143.332220][ T9041] EXT4-fs: Ignoring removed bh option [ 143.338215][ T9041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.346697][ T9041] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048) [ 144.038471][ T9078] loop6: detected capacity change from 0 to 512 [ 144.045438][ T9078] EXT4-fs: Ignoring removed nobh option [ 144.053037][ T9078] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2107: iget: bad i_size value: 38620345925642 [ 144.068227][ T9078] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2107: couldn't read orphan inode 15 (err -117) [ 144.081456][ T9078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.100838][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.108481][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.116035][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.123786][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.131592][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.139268][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.146828][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.154712][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.162225][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.169941][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.178256][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 144.202556][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.605917][ T9135] serio: Serial port ptm1 [ 144.619239][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 144.629967][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 144.824573][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 144.843714][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.851392][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.869282][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.876981][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.078998][ T9170] vhci_hcd: invalid port number 254 [ 145.084477][ T9170] vhci_hcd: invalid port number 254 [ 145.116465][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2148'. [ 145.125591][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2148'. [ 145.170622][ T9191] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2150'. [ 145.409735][ T9252] loop7: detected capacity change from 0 to 512 [ 145.421259][ T9252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.454510][ T9252] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.607103][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.246432][ T9302] tipc: Started in network mode [ 146.251606][ T9302] tipc: Node identity e2ceb3897c09, cluster identity 4711 [ 146.259086][ T9302] tipc: Enabled bearer , priority 0 [ 146.292230][ T9302] tipc: Disabling bearer [ 146.435563][ T9320] netlink: 'syz.5.2186': attribute type 10 has an invalid length. [ 146.686731][ T9337] loop6: detected capacity change from 0 to 512 [ 146.693993][ T9337] EXT4-fs: Ignoring removed bh option [ 146.697436][ T9338] loop7: detected capacity change from 0 to 512 [ 146.708021][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 146.719060][ T9337] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.728587][ T9337] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 146.732186][ T9338] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 146.740346][ T9337] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 146.762417][ T9337] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 146.779486][ T9337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.829358][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.242969][ T9365] netlink: 'syz.1.2203': attribute type 10 has an invalid length. [ 147.355707][ T29] kauditd_printk_skb: 716 callbacks suppressed [ 147.355722][ T29] audit: type=1326 audit(1756047236.208:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.389204][ T29] audit: type=1326 audit(1756047236.208:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.413859][ T29] audit: type=1326 audit(1756047236.238:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.437858][ T29] audit: type=1326 audit(1756047236.238:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.461390][ T29] audit: type=1326 audit(1756047236.238:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.485079][ T29] audit: type=1326 audit(1756047236.238:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.518687][ T29] audit: type=1326 audit(1756047236.238:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.542628][ T29] audit: type=1326 audit(1756047236.238:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.566076][ T29] audit: type=1326 audit(1756047236.268:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.589697][ T29] audit: type=1326 audit(1756047236.268:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 147.616180][ T9184] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.639380][ T9367] netem: change failed [ 147.909085][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 147.917588][ T9381] lo speed is unknown, defaulting to 1000 [ 147.969282][ T9405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.033866][ T9416] netlink: 'syz.7.2226': attribute type 10 has an invalid length. [ 148.038289][ T9405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.042222][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2226'. [ 148.073877][ T9416] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 148.132549][ T9405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.188276][ T9405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.215178][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2227'. [ 148.270378][ T9177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.285522][ T9177] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.305884][ T9177] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.314867][ T9177] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.377262][ T9432] $H: renamed from bond0 (while UP) [ 148.384955][ T9432] $H: entered promiscuous mode [ 148.390040][ T9432] bond_slave_0: entered promiscuous mode [ 148.395987][ T9432] bond_slave_1: entered promiscuous mode [ 148.402229][ T9432] dummy0: entered promiscuous mode [ 149.118541][ T9466] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2246'. [ 149.268613][ T9479] bridge0: port 3(veth1) entered blocking state [ 149.275032][ T9479] bridge0: port 3(veth1) entered disabled state [ 149.281721][ T9479] veth1: entered allmulticast mode [ 149.287446][ T9479] veth1: entered promiscuous mode [ 149.292782][ T9479] bridge0: port 3(veth1) entered blocking state [ 149.299353][ T9479] bridge0: port 3(veth1) entered forwarding state [ 149.373044][ T9490] loop7: detected capacity change from 0 to 128 [ 149.388694][ T9490] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 149.396767][ T9490] FAT-fs (loop7): Filesystem has been set read-only [ 149.406122][ T9490] bio_check_eod: 102 callbacks suppressed [ 149.406150][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.406150][ T9490] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 149.436947][ T9490] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 149.445043][ T9490] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 149.453368][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.453368][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.467021][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.467021][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.483054][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.483054][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.485657][ T9497] loop9: detected capacity change from 0 to 7 [ 149.498508][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.498508][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.504321][ T9497] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.516730][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.516730][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.524661][ T9497] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.540876][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.540876][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.545745][ T9497] loop9: unable to read partition table [ 149.548147][ T9497] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 149.548147][ T9497] ) failed (rc=-5) [ 149.560828][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.560828][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.593734][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.593734][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.607343][ T9490] syz.7.2256: attempt to access beyond end of device [ 149.607343][ T9490] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.757576][ T9513] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.783882][ T9517] netlink: 'syz.5.2268': attribute type 10 has an invalid length. [ 149.875411][ T9513] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.923220][ T9525] netlink: 'gtp': attribute type 30 has an invalid length. [ 149.944492][ T9513] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.046370][ T9513] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.157021][ T9184] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.202424][ T9239] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.221252][ T9239] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.233808][ T9239] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.264874][ T9538] loop7: detected capacity change from 0 to 512 [ 150.306423][ T9538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.311515][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2281'. [ 150.321785][ T9538] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.328306][ T9549] netem: change failed [ 150.368636][ T9551] netlink: 'syz.1.2282': attribute type 12 has an invalid length. [ 150.389130][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.410487][ T9553] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 150.479656][ T9561] loop6: detected capacity change from 0 to 128 [ 150.701014][ T36] hid_parser_main: 18 callbacks suppressed [ 150.701035][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.714569][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.722171][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.729760][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.737280][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.744813][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.752349][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.759865][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.767403][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.774950][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 150.784401][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 150.869796][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 150.995842][ T9608] SELinux: failed to load policy [ 151.097356][ T9623] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2310'. [ 151.108708][ T9626] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 151.138773][ T9626] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 151.476051][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2326'. [ 151.546435][ T9655] loop6: detected capacity change from 0 to 1024 [ 151.574191][ T9655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.593525][ T9655] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.615029][ T9655] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 151.631121][ T9655] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 151.644046][ T9655] EXT4-fs (loop6): This should not happen!! Data will be lost [ 151.644046][ T9655] [ 151.653822][ T9655] EXT4-fs (loop6): Total free blocks count 0 [ 151.659835][ T9655] EXT4-fs (loop6): Free/Dirty block details [ 151.665772][ T9655] EXT4-fs (loop6): free_blocks=4293918720 [ 151.671607][ T9655] EXT4-fs (loop6): dirty_blocks=192 [ 151.677107][ T9655] EXT4-fs (loop6): Block reservation details [ 151.683689][ T9655] EXT4-fs (loop6): i_reserved_data_blocks=12 [ 151.720434][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.153786][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2335'. [ 152.217065][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2337'. [ 152.254149][ T9682] syzkaller0: entered allmulticast mode [ 152.260007][ T9682] syzkaller0: entered promiscuous mode [ 152.267727][ T9682] syzkaller0 (unregistering): left allmulticast mode [ 152.274601][ T9682] syzkaller0 (unregistering): left promiscuous mode [ 152.404702][ T9687] SELinux: failed to load policy [ 152.417136][ T29] kauditd_printk_skb: 1483 callbacks suppressed [ 152.417192][ T29] audit: type=1400 audit(1756047241.268:10376): avc: denied { create } for pid=9688 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.527164][ T29] audit: type=1326 audit(1756047241.378:10377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.551359][ T29] audit: type=1326 audit(1756047241.378:10378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.575271][ T29] audit: type=1326 audit(1756047241.378:10379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.599188][ T29] audit: type=1326 audit(1756047241.378:10380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.623200][ T29] audit: type=1326 audit(1756047241.378:10381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.646833][ T29] audit: type=1326 audit(1756047241.388:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.670929][ T29] audit: type=1326 audit(1756047241.388:10383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.694788][ T29] audit: type=1326 audit(1756047241.388:10384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.718785][ T29] audit: type=1326 audit(1756047241.388:10385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19069aebe9 code=0x7ffc0000 [ 152.772410][ T9706] siw: device registration error -23 [ 152.885428][ T9709] loop6: detected capacity change from 0 to 512 [ 152.904540][ T9709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.917402][ T9709] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.987289][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.031294][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2353'. [ 153.137165][ T9725] : renamed from vlan0 (while UP) [ 153.166971][ T9728] loop7: detected capacity change from 0 to 512 [ 153.176725][ T9728] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.2357: error while reading EA inode 32 err=-116 [ 153.189784][ T9728] EXT4-fs (loop7): Remounting filesystem read-only [ 153.196507][ T9728] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 153.206943][ T9728] EXT4-fs (loop7): 1 orphan inode deleted [ 153.213327][ T9728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.239149][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.269159][ T9731] loop7: detected capacity change from 0 to 1764 [ 153.510324][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2362'. [ 153.623605][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 153.699844][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'. [ 153.738401][ T9757] pim6reg1: entered promiscuous mode [ 153.743881][ T9757] pim6reg1: entered allmulticast mode [ 154.011849][ T9772] loop6: detected capacity change from 0 to 128 [ 154.120048][ T9777] syzkaller0: entered allmulticast mode [ 154.126288][ T9777] syzkaller0: entered promiscuous mode [ 154.134614][ T9777] syzkaller0 (unregistering): left allmulticast mode [ 154.141467][ T9777] syzkaller0 (unregistering): left promiscuous mode [ 154.296298][ T9788] netlink: 'syz.6.2381': attribute type 10 has an invalid length. [ 154.308418][ T9788] loop6: detected capacity change from 0 to 512 [ 154.316833][ T9788] EXT4-fs: Ignoring removed bh option [ 154.323345][ T9788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.331897][ T9788] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 154.594632][ T9796] loop7: detected capacity change from 0 to 2048 [ 154.604756][ T9802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.626116][ T9796] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2386: bad orphan inode 61 [ 154.638001][ T9796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.672843][ T9802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.696484][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.730251][ T9814] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.749955][ T9802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.791750][ T9816] loop7: detected capacity change from 0 to 512 [ 154.818701][ T9802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.891440][ T9239] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.906938][ T9239] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.920187][ T9239] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.932385][ T9239] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.984733][ T9824] netlink: 'syz.7.2404': attribute type 10 has an invalid length. [ 154.996337][ T9824] netlink: 'syz.7.2404': attribute type 10 has an invalid length. [ 155.007611][ T9824] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.429047][ T9832] loop6: detected capacity change from 0 to 512 [ 155.436591][ T9832] EXT4-fs: Ignoring removed bh option [ 155.442780][ T9832] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.451977][ T9832] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 155.462403][ T9832] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 155.472465][ T9832] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 155.483567][ T9832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.510258][ T9836] netlink: 'syz.5.2399': attribute type 10 has an invalid length. [ 155.530145][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.591815][ T9843] __nla_validate_parse: 1 callbacks suppressed [ 155.591840][ T9843] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2403'. [ 155.877731][ T9864] tipc: Enabled bearer , priority 0 [ 155.888621][ T9864] tipc: Disabling bearer [ 155.921212][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2413'. [ 155.942320][ T9866] loop7: detected capacity change from 0 to 512 [ 155.957438][ T9866] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 155.974727][ T9866] System zones: 0-2, 18-18, 34-34 [ 155.984112][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2416'. [ 155.987831][ T9866] EXT4-fs (loop7): orphan cleanup on readonly fs [ 155.993497][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2416'. [ 156.009518][ T9866] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2413: bg 0: block 248: padding at end of block bitmap is not set [ 156.030891][ T9866] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2413: Failed to acquire dquot type 1 [ 156.052397][ T9866] EXT4-fs (loop7): 1 orphan inode deleted [ 156.058472][ T9184] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 156.098306][ T9866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.132227][ T9884] smc: net device bond0 applied user defined pnetid SYZ2 [ 156.139583][ T9884] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2421'. [ 156.151850][ T7482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.163084][ T9884] smc: removing net device bond0 with user defined pnetid SYZ2 [ 156.180162][ T9884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.192789][ T9884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.203599][ T9884] bond0 (unregistering): Released all slaves [ 156.213634][ T9890] netlink: 'syz.7.2423': attribute type 10 has an invalid length. [ 156.225395][ T9890] loop7: detected capacity change from 0 to 512 [ 156.232358][ T9890] EXT4-fs: Ignoring removed bh option [ 156.238627][ T9890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.247266][ T9890] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048) [ 156.647868][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2434'. [ 156.690569][ T9918] loop6: detected capacity change from 0 to 1024 [ 156.733869][ T9918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.767959][ T9918] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2435: Allocating blocks 385-513 which overlap fs metadata [ 156.805605][ T9918] EXT4-fs (loop6): pa ffff888105567380: logic 16, phys. 129, len 24 [ 156.813931][ T9918] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 156.828718][ T9921] loop7: detected capacity change from 0 to 128 [ 156.884405][ T6921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.910339][ T9239] bio_check_eod: 13026 callbacks suppressed [ 156.910355][ T9239] kworker/u8:62: attempt to access beyond end of device [ 156.910355][ T9239] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 156.915567][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2439'. [ 156.963059][ T9938] bridge: RTM_NEWNEIGH with invalid ether address [ 156.990394][ T9940] tipc: Started in network mode [ 156.995574][ T9940] tipc: Node identity c671c65aeec8, cluster identity 4711 [ 157.003176][ T9940] tipc: Enabled bearer , priority 0 [ 157.012334][ T9940] tipc: Disabling bearer [ 157.290476][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 157.659239][ T9961] loop7: detected capacity change from 0 to 128 [ 157.700291][ T29] kauditd_printk_skb: 1131 callbacks suppressed [ 157.700311][ T29] audit: type=1326 audit(1756047246.548:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.733566][ T29] audit: type=1326 audit(1756047246.548:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.757485][ T29] audit: type=1326 audit(1756047246.548:11516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.781449][ T29] audit: type=1326 audit(1756047246.548:11517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.805477][ T29] audit: type=1326 audit(1756047246.548:11518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.829361][ T29] audit: type=1326 audit(1756047246.548:11519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.853356][ T29] audit: type=1326 audit(1756047246.548:11520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.877046][ T29] audit: type=1326 audit(1756047246.548:11521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.900665][ T29] audit: type=1326 audit(1756047246.548:11522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 157.924667][ T29] audit: type=1326 audit(1756047246.548:11523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.5.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138bbfebe9 code=0x7ffc0000 [ 158.053539][ T9964] ================================================================== [ 158.061687][ T9964] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 158.069895][ T9964] [ 158.072293][ T9964] write to 0xffff88811a031928 of 4 bytes by task 9961 on cpu 0: [ 158.080041][ T9964] writeback_single_inode+0x14a/0x3e0 [ 158.085487][ T9964] sync_inode_metadata+0x5b/0x90 [ 158.090549][ T9964] __generic_file_fsync+0xf8/0x140 [ 158.095710][ T9964] fat_file_fsync+0x49/0x100 [ 158.100679][ T9964] vfs_fsync_range+0x10d/0x130 [ 158.105741][ T9964] generic_file_write_iter+0x1b8/0x2f0 [ 158.111333][ T9964] iter_file_splice_write+0x666/0x9e0 [ 158.116736][ T9964] direct_splice_actor+0x153/0x2a0 [ 158.121875][ T9964] splice_direct_to_actor+0x30f/0x680 [ 158.127303][ T9964] do_splice_direct+0xda/0x150 [ 158.132095][ T9964] do_sendfile+0x380/0x650 [ 158.136647][ T9964] __x64_sys_sendfile64+0x105/0x150 [ 158.141901][ T9964] x64_sys_call+0x2bb0/0x2ff0 [ 158.146803][ T9964] do_syscall_64+0xd2/0x200 [ 158.151443][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.157378][ T9964] [ 158.159754][ T9964] read to 0xffff88811a031928 of 4 bytes by task 9964 on cpu 1: [ 158.167595][ T9964] vfs_fsync_range+0x9b/0x130 [ 158.172654][ T9964] generic_file_write_iter+0x1b8/0x2f0 [ 158.178173][ T9964] iter_file_splice_write+0x666/0x9e0 [ 158.183567][ T9964] direct_splice_actor+0x153/0x2a0 [ 158.188698][ T9964] splice_direct_to_actor+0x30f/0x680 [ 158.194105][ T9964] do_splice_direct+0xda/0x150 [ 158.198888][ T9964] do_sendfile+0x380/0x650 [ 158.203326][ T9964] __x64_sys_sendfile64+0x105/0x150 [ 158.208574][ T9964] x64_sys_call+0x2bb0/0x2ff0 [ 158.213267][ T9964] do_syscall_64+0xd2/0x200 [ 158.217788][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.224129][ T9964] [ 158.226452][ T9964] value changed: 0x00000038 -> 0x00000022 [ 158.232176][ T9964] [ 158.234501][ T9964] Reported by Kernel Concurrency Sanitizer on: [ 158.240759][ T9964] CPU: 1 UID: 0 PID: 9964 Comm: syz.7.2452 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 158.251532][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.261599][ T9964] ==================================================================