last executing test programs: 7m35.698972346s ago: executing program 1 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) 7m35.66242421s ago: executing program 1 (id=1622): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x9d}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 7m35.529177232s ago: executing program 1 (id=1625): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2, 0x14}) rmdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x46, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 7m35.265272498s ago: executing program 1 (id=1629): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000001240)="$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") r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x0, 0x0, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x4, 0xe7, 0x9, 0xf5, 0x0, 0x6c7f, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x1018e, 0x75, 0x1000, 0x4, 0x3, 0x1, 0x8001, 0x0, 0x7, 0x0, 0x6}, r0, 0x10, r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x40000f63c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 7m34.307087433s ago: executing program 1 (id=1638): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 7m34.158191408s ago: executing program 1 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") 7m34.13379866s ago: executing program 32 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") 6m3.014354008s ago: executing program 2 (id=3547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setreuid(0x0, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2000840, &(0x7f0000000240)=ANY=[], 0x3c, 0x2e2, &(0x7f0000000e40)="$eJzs3M9rE1sUwPGTNE3TlDZZPB68J9KLbnQztHEvBGlBDCi1EX+AMG0mGjImIRMqEbFx5dZ/w9BldwWtf0A37ly5ETfdCG4CWkeSmdikTtskNU1Kvh8o92TuPTNzeyfhJDCze/f1k2za0tJ6SfwhJX6RiuyJROtRK5/4nCbovA45TUUuT337eF6JSDyRWFhSajG+fCWmlJqZffv0+caF7dLUnc2ZrQnZiT7c/Rr7vPPvzn+7P5cfZyyVsVQuX1K6Wsl/KukrpqFSGSurKXXLNHTLUJmcZRSd/nzJPawUCmWl51LT4ULRsCyl58oqa5RVKa9KxbLSH+mZnNI0TU2HZXTUZhtNodu8ZHVpSY/3eNDVHvPw120f2VssNt887+32nmS1f+cEAACGlWf9X2uv/31u62+t/10VqdTr/9v37t/ooP7fCh5S/+ePrf8b/WkzT/3fq9Cfm5LVsd7rf5wRxUmR6obsv6NfPtiYawTU/wAAAAAAAAAAAAAAAAAAAAAAnAU1247YtvhF7Ihf6rHzN+HeMNJ8PejzRH/U3PVttrYdqK866z8iWm7cC4mYr9aSa0mndfrjacmIKYbMSUR+NK4HlxMvXk8s+FRDVN6Z627++lpyrD1/XiIS9c6fd/JVe/64hFvzYxKRf7zzY575Qbl0sSVfk4h8WJW8mJJqXNf7+S/mlbp2M3Egf1JSHnfMAQAAAABwFmnqN8/v75p2WL+T38nvA3Oe388D8n9gsHMHAAAAAGBUWOVnWd00jeKxwRs349jBX9yBHe/5pMF4F7PoLvD1bc8nDZrPZO4+3f15Zn0YZjE0QfCIMYH6Rd+yJXzofmbG3FXp+OgT7lOZ61v27ANjrm6e+z64f8upfxQBAAAA6LP9on/QZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOg6jceJDXqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLD4FQAA///GbRru") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r10, @ANYRESHEX=r8, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES16=r5, @ANYRESHEX, @ANYRES32=r11, @ANYRES64=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffe4d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004a20d"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m2.945158776s ago: executing program 2 (id=3549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') 6m2.914688079s ago: executing program 2 (id=3551): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000000)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9_|\bZ\xf44\x7f)\x03c\x9a\x85\x01P\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\x06\x00\x00\x00\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7<\x05#\x1cg\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1%\x80\xb8\xe2\xb7\xa3\x8av\xaa\xb4\a\xb6\x8b\x9e*=\x8fE\x8b\x88\xc9\x12\xa6\x8fs~\xbaGl\x80\xf1\xaf\xa6D\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{\x01\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\,2 \xa8\xf8a\xd8\x97\x1e', 0x0) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="797fc6638f7f746a9feb00000200f200000407000000000000000000"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d266abfb74bce739b919bac0c87dce1bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df746fccb1b01fd85815abc4b2cd3d8a3e0ce5c932be454104e9a4e84d867c11d790012d548598251be2be276972b599b391b32ca8ecfecec3dc429112d207a2b02eaee36b66e383968b2b764d4d308414626504bd95f131d3c3fb146a1339588d49be4a5de97f35ec3d4385957603637ce90275b9088ff97ffaed13121b2bca31bf489b47a81d2f9bf01a593d2c031fa7674f1fa75d13bdc3b512a43d962cd3bb52e56db77dd19f55acd55170b872324d985982db8d3c39c70c9b99bd2671d4d7a58ea69754e8b69055c2f2a7f70dd0768d5b05a769904e393bf95afe35261fbd358719fd01e86aebfd96a770a7bcc0e611cf173c4f1c6b6a50731d872d9afa7eb32aa59dae737d86c1fdd25a9e022376a3921132c5560a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5cf, r4, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100), 0x10) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c010000100013070000000000000000fe880000000000000000000000000001e00000010000000000000000000000004e22000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000033000000e000000100000000000000000000000000000000000000000000000000000000040000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000005000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e53f299e9b3063aeb31e94fb366705ecd295cdb9ce1d1158f8766767d43ff25eeea3dc1202abd78810077b70eddf6c9c053463a119bc2c15c2976a21f01823a3004985ac7f4ebb84901bef659dc3fb4857d684601290211cb19fca71ba6312ca55159929a26a249d941d8a046e480c755104ac7f4f79a55c9eb7276da469e11e00ae761d78b39eab5ba4c13281d025302b7c485b9d7f3ee08facc6d28edf6931767714419269dc919f90e6524a5edcdfa20af9bc99f447ff80e47e4a6c1"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) io_setup(0x8, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r7, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe63) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 6m2.852657135s ago: executing program 2 (id=3555): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@errors_remount}, {@block_validity}, {@noload}, {}, {@errors_remount}]}, 0x1, 0x7a1, &(0x7f0000000740)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e"], 0x178) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f0000000440)=ANY=[@ANYBLOB=',seclabel']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 6m2.731791116s ago: executing program 2 (id=3558): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) syz_usb_disconnect(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m58.450710647s ago: executing program 2 (id=3630): mkdir(&(0x7f0000000300)='./bus\x00', 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x1}, 0x8) chdir(&(0x7f0000000140)='./bus\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 5m58.450512287s ago: executing program 33 (id=3630): mkdir(&(0x7f0000000300)='./bus\x00', 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x1}, 0x8) chdir(&(0x7f0000000140)='./bus\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 3.581946318s ago: executing program 5 (id=9980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d82", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x3, 0x400c0) 3.473134249s ago: executing program 5 (id=9981): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x28048005) sendto$inet6(r0, &(0x7f0000000180)="8699aff9499ff62efa", 0x9, 0x40040, 0x0, 0x0) 3.393650146s ago: executing program 5 (id=9983): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.791539376s ago: executing program 5 (id=9990): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2.526968612s ago: executing program 0 (id=9998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0x80000000d233}, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010062726964676500000c000280080001001c0000000e07dbdff5c43aec55c895a5e48c246a423cce5d227b87ea273c0890baeec8baa140c5ac9daa616b07c4b6041d3eed43cf77cd4ed245ed04c75c6ae305944c4e0c6b7d5f555eb6612075efd44703d4143191c82ffa05608185eb9edd2ede606a1662d82bbd1c5bfee0413fffb2e7f174a521c41a6d0d567daa6d89379e011cf292dbacf52fc7dfb7814a8f"], 0x3c}}, 0x20048010) 1.786847535s ago: executing program 6 (id=10001): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000740)="215329c2f92ca7a88ecd5bd07f530531b2cbfbcee90ef497b4ea6a70b85f81a1dbb4bc08c7f21946e8857a5288c3e3bb7e6067e3d5b870e0c2b9c549c52e6d181eee3542757594a645dbf6cd65b4209c8a47eea8bbf485368de74d58a998db0d8a7a120942e6d4636f2f1937959a5ee0a2af56396293e703c88d5ea68fa93118e355cd9b680d8cbb441e8b4384d6aa550466d83dd476e52f52c7b6bea4e947beec9a3a714d5d3d6b18778a0286cce70fe9243624d5401d0b9694b3d055eced7f2371daac647b2e6336d0cc0485b042b6a4b91aea859280f3cd5e66a3380c818a740aa8e97c3b6bd6c941cf30a49b54b7038beebd31bd3b77030f8e1577b2ec759b86381c4fe3ffde287a99f604fc91a4abf0177338e1b1380d4b88abbd3d2c8f5c3d763c65241240fba4f5187ffc2d75694abf39141a96a459ee2f730c5992c78649db4eae913914c73a311d34afdddf99f5fa8efcfe15c5113f50f073ee08da94285d0f6680bdb091e523237ef182d9f038fa77cfb0e0f8ab09d36cef479437fc703196956af4d715553122e8497b912fc113cc762b89469e90333c447d93532d8f7be1e18af50019491c742f1a1ef73c5f8207b59d84740c529a4a2c074dc1d812666f7cc1279d3e9dd0b19ff3952221dc709be5998a529b345104c1d11160c9c85b66a8bd8dd5039a4f3a88b19ba007c0e2e577fc3ef12c0aa81fbc0bd2bf75cf9972092448e720ad70701329278c4f85efcb5877f898f49ed34725649ca708152841fff38c3b18cde6e910e8b150fc995100eb7844a8aeac785d45a987bca225075b2f868da230c41a0dd64882e38ed7d2fcd0ef8a8d8942a023e878b6fe32c3b7f4baa3a7a4926c10d043781fbba58ff7471e5a17729afb56db8300935e8dac41c169e9f6c87e265c5c2fd30312986353074e064ab790db9ef65055629a80640388410bd1ce21955d98f064191d9a1c3736d566c182e866a2c50c0a28a9714f69c4ed8a01f3a4268a2fe58be7ef712f4bc90264c4f02a9d44605bd00c7978ee77d9a97255ce702777d5db6c2616c7a2062fdc8dede09cb959f323d06f883b42313042b5685668b70c2feba31bbbe4acf36fb32730de7bd47dc65d01a84afd2932534687da2f69c1a258f8671b416123ffadd37fe75a997f701ef69172265ba582ce3c574f0dea7ddd1cf899608a4890e238196bfe91b1beda92bfc3bd1d69c6f321e0d0ceb2072338a420791d62ef4936f0d66cdcb4f01b17cd0d70077cf81ccc5d6c31", 0x386, 0x10, 0x0, 0x0) 1.784927205s ago: executing program 6 (id=10002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000cad000/0x2000)=nil, &(0x7f0000f10000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x29}, 0x68) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x3087, 0xc000, 0xc, 0xa0002f5}) 1.759498828s ago: executing program 6 (id=10003): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/161, 0xa1}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000080)}], 0x1}, 0x0) 1.641538719s ago: executing program 6 (id=10005): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 1.595628963s ago: executing program 6 (id=10006): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$unix(0x1, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000200)=[{r2, 0x4080}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_io_uring_setup(0x3094, &(0x7f00000003c0)={0x0, 0xb374, 0x20, 0x3, 0x2d8}, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000040)) fallocate(r3, 0x30, 0xe6, 0x3) 1.467352046s ago: executing program 3 (id=10007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 1.428723219s ago: executing program 3 (id=10008): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 1.411871652s ago: executing program 3 (id=10009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r2) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r5, &(0x7f0000000580)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r1, &(0x7f0000000140)) r7 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x761c83, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x8004}, 0x0) epoll_create1(0x0) 1.372075585s ago: executing program 0 (id=10010): unshare(0x20020000) 1.350293307s ago: executing program 0 (id=10011): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r3, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f00000001c0)="a75619b9769c24999da037eeec8f54be5d48ec6f98f3c094f7027c513076cda83204970799fba3df64", 0x29}], 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, r6, 0x80000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6f63c6d0434"}, 0xb) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x1, 0x265, 0xc28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) 1.336636059s ago: executing program 3 (id=10012): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x28048005) sendto$inet6(r0, &(0x7f0000000180)="8699aff9499ff62efa", 0x9, 0x40040, 0x0, 0x0) 1.278727805s ago: executing program 3 (id=10013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fchdir(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02550400040000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.239410128s ago: executing program 5 (id=10014): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r8 = memfd_create(&(0x7f0000000080), 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r8, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11, 0x0, 0x9}, 0x18) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x78}, 0x1, 0x7}, 0x0) 714.8826ms ago: executing program 6 (id=10016): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 640.670967ms ago: executing program 4 (id=10018): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000005400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005600)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01078a6c48cec847d9cf696175f73b2b72a3b94b91549f95ea0ea372d69ed0f490d2cb3943986c15"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1002002, 0x0) r4 = dup(r3) ftruncate(0xffffffffffffffff, 0xee76) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3000011, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB="9ae55f1c96dcaaaca5d3c0f127bdc673735a853013ff9c0555e99fbebced324f7ed90008bd7bf1a7d951ef9220220ce1f6a285d3f07f2680b9b17ecc1adeebc45b3d9161f3734b2e35cdde125a76f80fca1ba4bb4907ba969910bd44b6aa9f805e9a002914feb6f4fb9a5aa0972d563ae5aeb95db5157cfe54a2052b97046f7b1e88bf371ecbfed8996595306a7081b17d1d3a513b7ae6cc73b0eaaad9be63bbc2eaac1d854343cd41d8b2031e3512bb5f3700624fb7a890c31863990843f06687e26b60879c1fc55c6e26506a162d54dc27be6c960327595f1621dd4b81a6406be0bc74e78c2cecaab716547df924db77f1ef6371637a"], 0x0, 0x23e, &(0x7f0000000600)="$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") r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000300)={0x198, 0x1, 0x839, 0x5, 0xe, "8530b3fe1010b844e5696b52cbb6d1507a0c35"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ptrace(0x8, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) fcntl$setown(r0, 0x8, r2) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, 0x0) 569.222824ms ago: executing program 4 (id=10019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 541.693237ms ago: executing program 4 (id=10020): socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000000002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a300000000014000000110001000000000008000000"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 494.163752ms ago: executing program 4 (id=10021): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0), 0x0, 0x28048005) sendto$inet6(r0, &(0x7f0000000180)="8699aff9499ff62efa", 0x9, 0x40040, 0x0, 0x0) 432.540357ms ago: executing program 4 (id=10022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r2) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r5, &(0x7f0000000580)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r1, &(0x7f0000000140)) r7 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x761c83, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x8004}, 0x0) epoll_create1(0x0) 431.931218ms ago: executing program 0 (id=10023): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x28048005) sendto$inet6(r0, &(0x7f0000000180)="8699aff9499ff62efa", 0x9, 0x40040, 0x0, 0x0) 402.38602ms ago: executing program 3 (id=10024): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 373.609933ms ago: executing program 0 (id=10025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe6, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x6, 0x80, 0x10000, 0xb, 0x2, 0xd93}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0xff, 0x7, 0xfffffffa, 0x3}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 361.657865ms ago: executing program 5 (id=10026): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0x8, 0x2000402) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) 312.01406ms ago: executing program 4 (id=10027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$unix(0x1, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000200)=[{r2, 0x4080}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_io_uring_setup(0x3094, &(0x7f00000003c0)={0x0, 0xb374, 0x20, 0x3, 0x2d8}, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000040)) fallocate(r3, 0x30, 0xe6, 0x3) 0s ago: executing program 0 (id=10028): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) kernel console output (not intermixed with test programs): 26 audit(1760604624.540:38656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29751 comm="syz.0.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 521.828731][T29763] tipc: Enabled bearer , priority 0 [ 521.835798][T29763] syzkaller0: entered promiscuous mode [ 521.841341][T29763] syzkaller0: entered allmulticast mode [ 521.851018][T29763] tipc: Resetting bearer [ 521.858518][T29762] tipc: Resetting bearer [ 521.886378][T29762] tipc: Disabling bearer [ 522.290228][T29784] validate_nla: 1 callbacks suppressed [ 522.290269][T29784] netlink: 'syz.6.9000': attribute type 25 has an invalid length. [ 522.432572][T29791] bridge0: port 3(ipvlan2) entered blocking state [ 522.439084][T29791] bridge0: port 3(ipvlan2) entered disabled state [ 522.445656][T29791] ipvlan2: entered allmulticast mode [ 522.450988][T29791] bridge0: entered allmulticast mode [ 522.456744][T29791] ipvlan2: left allmulticast mode [ 522.461827][T29791] bridge0: left allmulticast mode [ 522.724679][T29800] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9006'. [ 522.734206][T29800] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9006'. [ 522.773624][T29810] tipc: Enabled bearer , priority 0 [ 522.780776][T29810] syzkaller0: entered promiscuous mode [ 522.786355][T29810] syzkaller0: entered allmulticast mode [ 522.799728][T29810] tipc: Resetting bearer [ 522.807080][T29809] tipc: Resetting bearer [ 522.870120][T29809] tipc: Disabling bearer [ 523.478575][T29827] loop6: detected capacity change from 0 to 512 [ 523.499898][T29827] EXT4-fs mount: 40 callbacks suppressed [ 523.499915][T29827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.518328][T29827] ext4 filesystem being mounted at /465/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.551288][T23672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.186672][T29865] loop6: detected capacity change from 0 to 2048 [ 524.228000][T29865] EXT4-fs (loop6): failed to initialize system zone (-117) [ 524.249949][T29865] EXT4-fs (loop6): mount failed [ 524.367527][T29875] loop5: detected capacity change from 0 to 128 [ 524.989459][T29901] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9029'. [ 525.002740][T29901] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9029'. [ 525.128585][T29897] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.9032'. [ 525.309445][T16993] Bluetooth: hci0: Frame reassembly failed (-84) [ 526.308397][T29939] bridge3: entered promiscuous mode [ 526.313732][T29939] bridge3: entered allmulticast mode [ 526.466125][T16993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.524211][T16993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.543289][T29928] chnl_net:caif_netlink_parms(): no params data found [ 526.596091][T16993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.626916][T29928] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.634413][T29928] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.641859][T29928] bridge_slave_0: entered allmulticast mode [ 526.648407][T29928] bridge_slave_0: entered promiscuous mode [ 526.656217][T16993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.667446][T29928] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.674540][T29928] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.681789][T29928] bridge_slave_1: entered allmulticast mode [ 526.688541][T29928] bridge_slave_1: entered promiscuous mode [ 526.708085][T29928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.718836][T29928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.740996][T29928] team0: Port device team_slave_0 added [ 526.750436][T29928] team0: Port device team_slave_1 added [ 526.778647][T29928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.785678][T29928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.811869][T29928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.823007][T16993] bridge_slave_1: left allmulticast mode [ 526.828727][T16993] bridge_slave_1: left promiscuous mode [ 526.834469][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.842407][T16993] bridge_slave_0: left allmulticast mode [ 526.848107][T16993] bridge_slave_0: left promiscuous mode [ 526.853714][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.052004][T16993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.076678][T29960] loop5: detected capacity change from 0 to 2048 [ 527.090690][T16993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.127754][T29960] EXT4-fs (loop5): failed to initialize system zone (-117) [ 527.135034][T29960] EXT4-fs (loop5): mount failed [ 527.264163][T16993] bond0 (unregistering): Released all slaves [ 527.273193][T16993] bond1 (unregistering): Released all slaves [ 527.282551][T16993] bond2 (unregistering): Released all slaves [ 527.291292][T29928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.298293][T29928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.324370][T29928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.359211][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 527.365256][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 527.403869][T29961] tipc: Enabled bearer , priority 0 [ 527.410640][T29965] syzkaller0: entered promiscuous mode [ 527.416154][T29965] syzkaller0: entered allmulticast mode [ 527.441218][T29928] hsr_slave_0: entered promiscuous mode [ 527.489344][T29928] hsr_slave_1: entered promiscuous mode [ 527.505262][T29928] debugfs: 'hsr0' already exists in 'hsr' [ 527.511094][T29928] Cannot create hsr debugfs directory [ 527.516690][T16993] tipc: Left network mode [ 527.521273][T29953] tipc: Resetting bearer [ 527.539202][T29953] tipc: Disabling bearer [ 527.551100][T16993] hsr_slave_0: left promiscuous mode [ 527.562476][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.569939][T16993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.618943][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.621327][T29979] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9046'. [ 527.626370][T16993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.678846][T16993] veth1_macvtap: left promiscuous mode [ 527.684390][T16993] veth0_macvtap: left promiscuous mode [ 527.690051][T16993] veth1_vlan: left promiscuous mode [ 527.695286][T16993] veth0_vlan: left promiscuous mode [ 527.766325][T16993] team0 (unregistering): Port device team_slave_1 removed [ 527.805356][T16993] team0 (unregistering): Port device dummy0 removed [ 527.832733][T29974] hub 6-0:1.0: USB hub found [ 527.837580][T29974] hub 6-0:1.0: 8 ports detected [ 527.975020][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 527.975037][ T29] audit: type=1326 audit(1760604631.050:38726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.004815][ T29] audit: type=1326 audit(1760604631.050:38727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.028405][ T29] audit: type=1326 audit(1760604631.050:38728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.051917][ T29] audit: type=1326 audit(1760604631.050:38729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.075519][ T29] audit: type=1326 audit(1760604631.050:38730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.099241][ T29] audit: type=1326 audit(1760604631.050:38731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.099770][T29996] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 528.122981][ T29] audit: type=1326 audit(1760604631.050:38732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.156437][ T29] audit: type=1326 audit(1760604631.050:38733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.180027][ T29] audit: type=1326 audit(1760604631.050:38734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.203674][ T29] audit: type=1326 audit(1760604631.050:38735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29994 comm="syz.4.9050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5508eec9 code=0x7ffc0000 [ 528.259073][T29996] vhci_hcd: invalid port number 96 [ 528.264204][T29996] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 528.600162][T29928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 528.608405][T30007] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9051'. [ 528.617414][T30007] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9051'. [ 528.643948][T29928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 528.675338][T29928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 528.730142][T29928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 528.979466][T30022] loop5: detected capacity change from 0 to 512 [ 528.992425][T29928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.004111][T29928] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.015137][T30023] bridge4: entered promiscuous mode [ 529.020390][T30023] bridge4: entered allmulticast mode [ 529.041342][T29928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 529.051906][T29928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.071094][T16985] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.078314][T16985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.087183][T16985] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.088850][T30022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.094256][T16985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.115936][T30022] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.139540][T30013] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9053'. [ 529.184195][ T785] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.365596][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.433534][T29928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.567584][T29928] veth0_vlan: entered promiscuous mode [ 529.577503][T29928] veth1_vlan: entered promiscuous mode [ 529.593116][T29928] veth0_macvtap: entered promiscuous mode [ 529.601668][T29928] veth1_macvtap: entered promiscuous mode [ 529.613800][T29928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.626068][T29928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.638891][T16991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.656020][T16991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.683321][T16991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.698999][T16991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.765806][T30049] loop5: detected capacity change from 0 to 2048 [ 529.844329][T30049] EXT4-fs (loop5): failed to initialize system zone (-117) [ 529.877765][T30049] EXT4-fs (loop5): mount failed [ 530.013397][T30064] serio: Serial port ptm1 [ 530.025700][T30045] hub 6-0:1.0: USB hub found [ 530.030799][T30045] hub 6-0:1.0: 8 ports detected [ 530.229405][T30072] team0: Port device team_slave_0 removed [ 530.647264][T30080] loop6: detected capacity change from 0 to 8192 [ 530.671216][T30081] bridge1: entered promiscuous mode [ 530.676537][T30081] bridge1: entered allmulticast mode [ 531.187086][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 531.242974][T30089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9070'. [ 531.252221][T30089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9070'. [ 531.603536][T30099] loop5: detected capacity change from 0 to 2048 [ 531.615712][T30100] loop6: detected capacity change from 0 to 2048 [ 531.658663][T30100] EXT4-fs (loop6): failed to initialize system zone (-117) [ 531.658977][T30099] EXT4-fs (loop5): failed to initialize system zone (-117) [ 531.665930][T30100] EXT4-fs (loop6): mount failed [ 531.674944][T30099] EXT4-fs (loop5): mount failed [ 531.803336][T30112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9077'. [ 531.812372][T30112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9077'. [ 531.875546][T30121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.884173][T30121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.982331][T30123] loop5: detected capacity change from 0 to 2048 [ 531.999226][T30123] EXT4-fs (loop5): failed to initialize system zone (-117) [ 532.008042][T30123] EXT4-fs (loop5): mount failed [ 532.304147][T30133] netlink: 7 bytes leftover after parsing attributes in process `syz.5.9083'. [ 532.314052][T30133] netlink: 7 bytes leftover after parsing attributes in process `syz.5.9083'. [ 532.657766][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9084'. [ 532.684678][T30137] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 532.964309][T30164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.977523][T30164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.611568][T30179] hub 6-0:1.0: USB hub found [ 533.633922][T30179] hub 6-0:1.0: 8 ports detected [ 533.798597][T30193] loop5: detected capacity change from 0 to 2048 [ 533.822805][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 533.822818][ T29] audit: type=1326 audit(1760604636.900:38941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.852650][ T29] audit: type=1326 audit(1760604636.900:38942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.881044][ T29] audit: type=1326 audit(1760604636.960:38943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.905499][ T29] audit: type=1326 audit(1760604636.960:38944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.929142][ T29] audit: type=1326 audit(1760604636.960:38945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.949437][T30193] EXT4-fs (loop5): failed to initialize system zone (-117) [ 533.959210][ T29] audit: type=1326 audit(1760604636.990:38946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.983441][ T29] audit: type=1326 audit(1760604636.990:38947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 533.985292][T30193] EXT4-fs (loop5): mount failed [ 534.007221][ T29] audit: type=1326 audit(1760604636.990:38948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 534.035663][ T29] audit: type=1326 audit(1760604637.020:38949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 534.035786][T30205] loop6: detected capacity change from 0 to 128 [ 534.059412][ T29] audit: type=1326 audit(1760604637.020:38950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.6.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 534.219082][T30212] __nla_validate_parse: 6 callbacks suppressed [ 534.219096][T30212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9111'. [ 534.234311][T30212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9111'. [ 534.249431][T30216] tipc: Started in network mode [ 534.254340][T30216] tipc: Node identity e2e8fe65187b, cluster identity 4711 [ 534.261777][T30216] tipc: Enabled bearer , priority 0 [ 534.278881][T30216] syzkaller0: entered promiscuous mode [ 534.284431][T30216] syzkaller0: entered allmulticast mode [ 534.299774][T30219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.299890][T30216] tipc: Resetting bearer [ 534.324157][T30219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.332654][T30215] tipc: Resetting bearer [ 534.349174][T30215] tipc: Disabling bearer [ 534.372131][T30221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9115'. [ 534.381241][T30221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9115'. [ 534.426886][T30214] netlink: 'syz.4.9112': attribute type 10 has an invalid length. [ 534.456021][T30214] bond0: (slave dummy0): Releasing backup interface [ 534.489947][T30214] team0: Port device dummy0 added [ 534.500833][T30228] netlink: 'syz.4.9112': attribute type 10 has an invalid length. [ 534.513233][T30228] team0: Port device dummy0 removed [ 534.522748][T30228] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 534.617176][T30238] program syz.5.9122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.646464][T30240] loop5: detected capacity change from 0 to 128 [ 534.824987][T30247] loop6: detected capacity change from 0 to 2048 [ 534.838432][T30247] EXT4-fs (loop6): failed to initialize system zone (-117) [ 534.848598][T30247] EXT4-fs (loop6): mount failed [ 535.041338][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9127'. [ 535.072662][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9127'. [ 535.087479][ T785] bio_check_eod: 50 callbacks suppressed [ 535.087496][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.087496][ T785] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 535.109808][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.109808][ T785] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 535.126105][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.126105][ T785] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 535.139637][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.139637][ T785] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 535.153168][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.153168][ T785] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 535.166669][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.166669][ T785] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 535.180266][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.180266][ T785] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 535.193670][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.193670][ T785] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 535.207121][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.207121][ T785] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 535.220563][ T785] kworker/u8:6: attempt to access beyond end of device [ 535.220563][ T785] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 535.251187][T30262] tipc: Enabled bearer , priority 0 [ 535.258350][T30262] syzkaller0: entered promiscuous mode [ 535.263868][T30262] syzkaller0: entered allmulticast mode [ 535.273498][T30262] tipc: Resetting bearer [ 535.297108][T30261] tipc: Resetting bearer [ 535.305768][T30261] tipc: Disabling bearer [ 535.322261][T30259] netlink: 'syz.0.9129': attribute type 10 has an invalid length. [ 535.338727][T30259] netlink: 'syz.0.9129': attribute type 10 has an invalid length. [ 535.349464][T30259] team0: Port device dummy0 removed [ 535.405300][T30259] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 535.422182][T30271] loop5: detected capacity change from 0 to 128 [ 535.624578][T30273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9132'. [ 535.698890][T30271] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 535.809458][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9140'. [ 536.046253][T30307] loop5: detected capacity change from 0 to 256 [ 536.152059][T30307] FAT-fs (loop5): bogus number of FAT sectors [ 536.158612][T30307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 536.258174][T30307] netlink: 'syz.5.9147': attribute type 10 has an invalid length. [ 536.516622][T30325] loop5: detected capacity change from 0 to 128 [ 536.642363][T30327] loop6: detected capacity change from 0 to 2048 [ 536.684699][T30327] EXT4-fs (loop6): failed to initialize system zone (-117) [ 536.765461][T30327] EXT4-fs (loop6): mount failed [ 536.771499][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9153'. [ 536.871627][T30345] netlink: 5388 bytes leftover after parsing attributes in process `syz.3.9159'. [ 537.387301][ T785] Bluetooth: hci0: Frame reassembly failed (-84) [ 538.321193][T30391] loop5: detected capacity change from 0 to 8192 [ 538.655494][T30416] netlink: 'syz.3.9185': attribute type 10 has an invalid length. [ 538.698508][T30416] team0: Port device dummy0 added [ 538.706822][T30416] netlink: 'syz.3.9185': attribute type 10 has an invalid length. [ 538.725236][T30416] team0: Port device dummy0 removed [ 538.774500][T30416] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 539.211295][T30445] loop5: detected capacity change from 0 to 128 [ 539.396572][T30456] loop5: detected capacity change from 0 to 128 [ 539.418796][T30456] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 539.430997][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 539.485783][T30456] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 539.540416][T30456] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.553889][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 539.553924][ T29] audit: type=1326 audit(1760604642.610:39380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30464 comm="syz.6.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 539.583741][ T29] audit: type=1326 audit(1760604642.610:39381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30464 comm="syz.6.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 539.607367][ T29] audit: type=1326 audit(1760604642.610:39382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30464 comm="syz.6.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 539.630952][ T29] audit: type=1326 audit(1760604642.610:39383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30464 comm="syz.6.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 539.654685][ T29] audit: type=1326 audit(1760604642.610:39384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30464 comm="syz.6.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 539.903396][T30487] bridge1: entered promiscuous mode [ 539.908693][T30487] bridge1: entered allmulticast mode [ 540.605332][T30500] loop6: detected capacity change from 0 to 128 [ 540.749446][ T29] audit: type=1326 audit(1760604643.820:39385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30499 comm="syz.6.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 540.773309][ T29] audit: type=1326 audit(1760604643.830:39387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30499 comm="syz.6.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 540.797115][ T29] audit: type=1326 audit(1760604643.830:39388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30499 comm="syz.6.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 540.820718][ T29] audit: type=1326 audit(1760604643.820:39386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30499 comm="syz.6.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 540.844294][ T29] audit: type=1326 audit(1760604643.830:39389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30499 comm="syz.6.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 540.945163][T30511] loop5: detected capacity change from 0 to 128 [ 540.958791][T30511] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.971265][T30511] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 541.005407][T30511] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.019610][T16986] bio_check_eod: 3197 callbacks suppressed [ 541.019625][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.019625][T16986] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 541.054220][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.054220][T16986] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 541.067869][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.067869][T16986] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 541.086797][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.086797][T16986] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 541.101080][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.101080][T16986] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 541.115020][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.115020][T16986] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 541.130617][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.130617][T16986] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 541.144282][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.144282][T16986] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 541.157910][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.157910][T16986] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 541.221157][T16986] kworker/u8:10: attempt to access beyond end of device [ 541.221157][T16986] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 541.429227][T30535] xt_CT: No such helper "netbios-ns" [ 541.524859][T30541] loop5: detected capacity change from 0 to 2048 [ 541.557999][T30541] EXT4-fs (loop5): failed to initialize system zone (-117) [ 541.565369][T30541] EXT4-fs (loop5): mount failed [ 542.178678][T30550] loop5: detected capacity change from 0 to 512 [ 542.215644][T30550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.228366][T30550] ext4 filesystem being mounted at /302/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.265195][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.285067][T30569] loop5: detected capacity change from 0 to 512 [ 542.312117][T30569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.357031][T30569] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.415804][T30579] loop6: detected capacity change from 0 to 2048 [ 542.458681][T30579] EXT4-fs (loop6): failed to initialize system zone (-117) [ 542.477537][T30571] netlink: 'syz.4.9237': attribute type 10 has an invalid length. [ 542.495647][T30579] EXT4-fs (loop6): mount failed [ 542.498586][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.549118][T30582] netlink: 'syz.4.9237': attribute type 10 has an invalid length. [ 542.783373][T30578] __nla_validate_parse: 5 callbacks suppressed [ 542.783389][T30578] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9238'. [ 542.802379][T30571] bond0: (slave dummy0): Releasing backup interface [ 542.812112][T30586] loop6: detected capacity change from 0 to 128 [ 542.843906][T30571] team0: Port device dummy0 added [ 542.897726][T30582] team0: Port device dummy0 removed [ 542.906381][T30582] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 543.027541][ T785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.037966][ T785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.110195][T30591] loop5: detected capacity change from 0 to 2048 [ 543.167473][ T785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.177881][ T785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.190733][T30591] EXT4-fs (loop5): failed to initialize system zone (-117) [ 543.198822][T30591] EXT4-fs (loop5): mount failed [ 543.231200][ T785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.241571][ T785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.256350][T30608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.264782][T30608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.273651][T30608] netlink: 'syz.6.9244': attribute type 10 has an invalid length. [ 543.318175][T30608] team0: Port device dummy0 added [ 543.324727][T30610] netlink: 'syz.6.9244': attribute type 10 has an invalid length. [ 543.335093][T30610] team0: Port device dummy0 removed [ 543.342423][T30610] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 543.368972][ T785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.379349][ T785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.418759][T30611] bridge0: port 3(ipvlan2) entered blocking state [ 543.425244][T30611] bridge0: port 3(ipvlan2) entered disabled state [ 543.432532][T30611] ipvlan2: entered allmulticast mode [ 543.437889][T30611] bridge0: entered allmulticast mode [ 543.443741][T30611] ipvlan2: left allmulticast mode [ 543.448835][T30611] bridge0: left allmulticast mode [ 543.498669][ T785] bridge_slave_1: left allmulticast mode [ 543.504361][ T785] bridge_slave_1: left promiscuous mode [ 543.510019][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.517722][ T785] bridge_slave_0: left allmulticast mode [ 543.523357][ T785] bridge_slave_0: left promiscuous mode [ 543.529163][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.820907][ T785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.839466][ T785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.872371][ T785] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 543.928327][ T785] bond0 (unregistering): Released all slaves [ 543.937105][ T785] bond1 (unregistering): Released all slaves [ 543.945826][ T785] bond2 (unregistering): Released all slaves [ 543.949287][T30632] xt_CT: No such helper "netbios-ns" [ 543.965093][T30632] loop6: detected capacity change from 0 to 512 [ 543.974891][T30592] chnl_net:caif_netlink_parms(): no params data found [ 543.988262][T30632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.005280][T30632] ext4 filesystem being mounted at /505/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.026131][ T785] tipc: Left network mode [ 544.053153][T23672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.071790][ T785] hsr_slave_0: left promiscuous mode [ 544.077603][ T785] hsr_slave_1: left promiscuous mode [ 544.083307][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.090847][ T785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.100804][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.108256][ T785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.119481][ T785] veth1_macvtap: left promiscuous mode [ 544.124998][ T785] veth0_macvtap: left promiscuous mode [ 544.138455][ T785] veth1_vlan: left promiscuous mode [ 544.150172][ T785] veth0_vlan: left promiscuous mode [ 544.484256][ T785] team0 (unregistering): Port device team_slave_1 removed [ 544.602933][T30592] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.610150][T30592] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.648416][T30592] bridge_slave_0: entered allmulticast mode [ 544.670852][T30592] bridge_slave_0: entered promiscuous mode [ 544.678109][T30592] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.685221][T30592] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.692331][T30592] bridge_slave_1: entered allmulticast mode [ 544.699400][T30592] bridge_slave_1: entered promiscuous mode [ 544.709322][T30652] bridge5: entered promiscuous mode [ 544.714601][T30652] bridge5: entered allmulticast mode [ 544.782856][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 544.782873][ T29] audit: type=1326 audit(1760604647.860:39521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.783519][T30592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.789118][ T29] audit: type=1326 audit(1760604647.860:39522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.789470][ T29] audit: type=1326 audit(1760604647.880:39523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.868939][ T29] audit: type=1326 audit(1760604647.880:39524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.890905][T30592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.903273][ T29] audit: type=1326 audit(1760604647.900:39525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.927085][ T29] audit: type=1326 audit(1760604647.900:39526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.950722][ T29] audit: type=1326 audit(1760604647.900:39527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.974333][ T29] audit: type=1326 audit(1760604647.980:39528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 544.997971][ T29] audit: type=1326 audit(1760604647.980:39529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 545.021621][ T29] audit: type=1326 audit(1760604647.980:39530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.9258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 545.056433][T30592] team0: Port device team_slave_0 added [ 545.065816][T30592] team0: Port device team_slave_1 added [ 545.086618][T30663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.095159][T30663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.103840][T30592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.104173][T30663] netlink: 'syz.3.9260': attribute type 10 has an invalid length. [ 545.110850][T30592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.110898][T30592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.112541][T30592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.162419][T30592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.170400][T30664] netlink: 'syz.3.9260': attribute type 10 has an invalid length. [ 545.188579][T30592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.209925][T30663] bond0: (slave dummy0): Releasing backup interface [ 545.219652][T30663] team0: Port device dummy0 added [ 545.228679][T30664] team0: Port device dummy0 removed [ 545.238322][T30664] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 545.249681][T30657] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.9258'. [ 545.279393][T30592] hsr_slave_0: entered promiscuous mode [ 545.285405][T30592] hsr_slave_1: entered promiscuous mode [ 545.291346][T30592] debugfs: 'hsr0' already exists in 'hsr' [ 545.297123][T30592] Cannot create hsr debugfs directory [ 545.305026][ T785] IPVS: stop unused estimator thread 0... [ 545.343911][T30668] tipc: Enabled bearer , priority 0 [ 545.352911][T30668] syzkaller0: entered promiscuous mode [ 545.358483][T30668] syzkaller0: entered allmulticast mode [ 545.382281][T30668] tipc: Resetting bearer [ 545.394161][T30667] tipc: Resetting bearer [ 545.403334][T30667] tipc: Disabling bearer [ 545.468263][T30670] xt_CT: No such helper "netbios-ns" [ 545.476284][T30670] loop5: detected capacity change from 0 to 512 [ 545.477474][T30673] netlink: 5388 bytes leftover after parsing attributes in process `syz.0.9263'. [ 545.500805][T30670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.515446][T30670] ext4 filesystem being mounted at /309/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.536865][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.083409][T30592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.092942][T30592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.101672][T30592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.110933][T30592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.151404][T30592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.164510][T30592] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.174841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.182006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.202165][T30592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.212658][T30592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.226344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.233399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.287961][T30592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.414869][T30592] veth0_vlan: entered promiscuous mode [ 546.423016][T30592] veth1_vlan: entered promiscuous mode [ 546.437723][T30592] veth0_macvtap: entered promiscuous mode [ 546.445444][T30592] veth1_macvtap: entered promiscuous mode [ 546.456909][T30592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.466152][T30592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.490220][T30721] bridge2: entered promiscuous mode [ 546.495446][T30721] bridge2: entered allmulticast mode [ 546.551443][T16991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.560687][T16991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.569797][T16991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.578682][T16991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.676246][T30733] loop5: detected capacity change from 0 to 2048 [ 546.719941][T30733] EXT4-fs (loop5): failed to initialize system zone (-117) [ 546.758132][T30741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.766641][T30741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.827154][T30733] EXT4-fs (loop5): mount failed [ 546.833751][T30741] netlink: 'syz.6.9276': attribute type 10 has an invalid length. [ 546.847042][T30741] bond0: (slave dummy0): Releasing backup interface [ 546.857328][T30741] team0: Port device dummy0 added [ 546.873534][T30741] netlink: 'syz.6.9276': attribute type 10 has an invalid length. [ 546.898825][T30741] team0: Port device dummy0 removed [ 546.906054][T30741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 546.942808][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9275'. [ 546.972339][T30735] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 547.130857][T30746] netlink: 'syz.3.9279': attribute type 10 has an invalid length. [ 547.192164][T16986] Bluetooth: hci0: Frame reassembly failed (-84) [ 547.321732][T30749] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9277'. [ 547.658939][T30762] xt_CT: No such helper "netbios-ns" [ 547.667424][T30762] loop6: detected capacity change from 0 to 512 [ 547.678742][T30762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.691353][T30762] ext4 filesystem being mounted at /510/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.712283][T23672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.731612][T30767] loop6: detected capacity change from 0 to 512 [ 547.749132][T30767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.761868][T30767] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.849103][T23672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.202931][T30790] program syz.3.9290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.668701][T30806] bridge0: port 3(ipvlan2) entered blocking state [ 548.675195][T30806] bridge0: port 3(ipvlan2) entered disabled state [ 548.682421][T30806] ipvlan2: entered allmulticast mode [ 548.687831][T30806] bridge0: entered allmulticast mode [ 548.697075][T30806] ipvlan2: left allmulticast mode [ 548.702137][T30806] bridge0: left allmulticast mode [ 548.818391][T30811] loop6: detected capacity change from 0 to 128 [ 548.901429][T30811] bio_check_eod: 200 callbacks suppressed [ 548.901447][T30811] syz.6.9299: attempt to access beyond end of device [ 548.901447][T30811] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 548.946580][T30811] syz.6.9299: attempt to access beyond end of device [ 548.946580][T30811] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 548.960400][T30811] syz.6.9299: attempt to access beyond end of device [ 548.960400][T30811] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 548.974073][T30811] syz.6.9299: attempt to access beyond end of device [ 548.974073][T30811] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 548.992421][T30811] syz.6.9299: attempt to access beyond end of device [ 548.992421][T30811] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 549.006202][T30811] syz.6.9299: attempt to access beyond end of device [ 549.006202][T30811] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 549.035990][T30811] syz.6.9299: attempt to access beyond end of device [ 549.035990][T30811] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 549.084251][T30809] hub 6-0:1.0: USB hub found [ 549.089107][T30809] hub 6-0:1.0: 8 ports detected [ 549.267049][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 549.273188][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 549.336934][T30836] loop5: detected capacity change from 0 to 128 [ 549.355116][T30836] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.389832][T30836] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.428344][T30836] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.500864][T30844] program syz.4.9310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.674807][T30854] loop5: detected capacity change from 0 to 512 [ 549.693357][T30854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.715999][T30854] ext4 filesystem being mounted at /315/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.875713][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.960122][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 549.960135][ T29] audit: type=1326 audit(1760604653.040:39769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 549.990204][ T29] audit: type=1326 audit(1760604653.040:39770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.013964][ T29] audit: type=1326 audit(1760604653.040:39771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.037650][ T29] audit: type=1326 audit(1760604653.040:39772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.061311][ T29] audit: type=1326 audit(1760604653.040:39773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.084881][ T29] audit: type=1326 audit(1760604653.040:39774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.108534][ T29] audit: type=1326 audit(1760604653.040:39775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.132165][ T29] audit: type=1326 audit(1760604653.040:39776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.176914][T30852] hub 6-0:1.0: USB hub found [ 550.184176][T30852] hub 6-0:1.0: 8 ports detected [ 550.200301][ T29] audit: type=1326 audit(1760604653.140:39777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.224044][ T29] audit: type=1326 audit(1760604653.140:39778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.0.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 550.270320][T30887] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 550.320429][T30887] vhci_hcd: invalid port number 96 [ 550.325621][T30887] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 550.400086][T30870] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9320'. [ 550.496332][T30892] loop6: detected capacity change from 0 to 256 [ 550.505660][T30892] FAT-fs (loop6): bogus number of FAT sectors [ 550.513059][T30892] FAT-fs (loop6): Can't find a valid FAT filesystem [ 550.536035][T30892] netlink: 'syz.6.9328': attribute type 10 has an invalid length. [ 550.577367][T30902] tipc: Enabled bearer , priority 0 [ 550.584383][T30902] syzkaller0: entered promiscuous mode [ 550.589963][T30902] syzkaller0: entered allmulticast mode [ 550.687850][T30905] tipc: Resetting bearer [ 550.694436][T30901] tipc: Resetting bearer [ 550.702181][T30901] tipc: Disabling bearer [ 550.784951][T30912] netlink: 5388 bytes leftover after parsing attributes in process `syz.6.9335'. [ 550.862634][T30917] loop6: detected capacity change from 0 to 128 [ 550.937313][T30919] syz.6.9337: attempt to access beyond end of device [ 550.937313][T30919] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 550.960190][T30919] syz.6.9337: attempt to access beyond end of device [ 550.960190][T30919] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 550.973960][T30919] syz.6.9337: attempt to access beyond end of device [ 550.973960][T30919] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 551.052887][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9337'. [ 551.171009][T30933] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.9343'. [ 551.220496][T30928] loop5: detected capacity change from 0 to 256 [ 551.236023][T30928] FAT-fs (loop5): bogus number of FAT sectors [ 551.242735][T30928] FAT-fs (loop5): Can't find a valid FAT filesystem [ 551.293499][T30928] netlink: 'syz.5.9341': attribute type 10 has an invalid length. [ 551.311561][T30928] bond0: (slave dummy0): Releasing backup interface [ 551.386877][T30928] team0: Port device dummy0 added [ 551.426398][T30921] hub 6-0:1.0: USB hub found [ 551.431545][T30921] hub 6-0:1.0: 8 ports detected [ 551.566286][T30949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9346'. [ 551.593504][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.602886][T30949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9346'. [ 551.612295][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.621742][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.630529][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.907731][T30957] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.9349'. [ 551.910403][T30961] bridge0: port 3(ipvlan2) entered blocking state [ 551.923519][T30961] bridge0: port 3(ipvlan2) entered disabled state [ 551.937152][T30961] ipvlan2: entered allmulticast mode [ 551.942500][T30961] bridge0: entered allmulticast mode [ 551.949797][T30961] ipvlan2: left allmulticast mode [ 551.954865][T30961] bridge0: left allmulticast mode [ 552.149601][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9352'. [ 552.316087][T30989] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.9362'. [ 552.383553][T30998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.392331][T30998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.400970][T30998] netlink: 'syz.0.9366': attribute type 10 has an invalid length. [ 552.410588][T30998] bond0: (slave dummy0): Releasing backup interface [ 552.419589][T30998] team0: Port device dummy0 added [ 552.426303][T30998] netlink: 'syz.0.9366': attribute type 10 has an invalid length. [ 552.438033][T30998] team0: Port device dummy0 removed [ 552.445325][T30998] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 552.483576][T31004] netlink: 5388 bytes leftover after parsing attributes in process `syz.5.9368'. [ 552.548244][T31009] loop5: detected capacity change from 0 to 8192 [ 552.593126][T31011] xt_CT: No such helper "netbios-ns" [ 552.601549][T31011] loop5: detected capacity change from 0 to 512 [ 552.625885][T31011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.639049][T31011] ext4 filesystem being mounted at /326/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.660595][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.750154][T31020] loop5: detected capacity change from 0 to 512 [ 552.768920][T31020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.781652][T31020] ext4 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.807440][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.038932][T31033] bridge2: entered promiscuous mode [ 553.044240][T31033] bridge2: entered allmulticast mode [ 553.517288][T31049] xt_CT: No such helper "netbios-ns" [ 553.675435][T31052] netlink: 'syz.3.9384': attribute type 10 has an invalid length. [ 553.711264][T31052] bond0: (slave dummy0): Releasing backup interface [ 553.726383][T31059] netlink: 'syz.3.9384': attribute type 10 has an invalid length. [ 553.749602][T31052] team0: Port device dummy0 added [ 553.769011][T31059] team0: Port device dummy0 removed [ 553.786219][T31059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 554.184276][T31092] loop6: detected capacity change from 0 to 256 [ 554.200871][T31092] FAT-fs (loop6): bogus number of FAT sectors [ 554.207542][T31092] FAT-fs (loop6): Can't find a valid FAT filesystem [ 554.211086][T31090] bridge0: port 3(ipvlan2) entered blocking state [ 554.221024][T31090] bridge0: port 3(ipvlan2) entered disabled state [ 554.227843][T31090] ipvlan2: entered allmulticast mode [ 554.233182][T31090] bridge0: entered allmulticast mode [ 554.239086][T31090] ipvlan2: left allmulticast mode [ 554.244148][T31090] bridge0: left allmulticast mode [ 554.290881][T31092] netlink: 'syz.6.9400': attribute type 10 has an invalid length. [ 554.303106][T31092] bond0: (slave dummy0): Releasing backup interface [ 554.331877][T31092] team0: Port device dummy0 added [ 554.342548][T31095] netlink: 'syz.6.9400': attribute type 10 has an invalid length. [ 554.353278][T31095] team0: Port device dummy0 removed [ 554.361409][T31095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 554.430886][T31106] loop6: detected capacity change from 0 to 764 [ 554.438318][T31106] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 554.978140][T31140] tipc: Enabling of bearer rejected, failed to enable media [ 555.015533][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 555.015546][ T29] audit: type=1326 audit(1760604658.090:40137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31143 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.045519][ T29] audit: type=1326 audit(1760604658.090:40138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31143 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.054184][T31151] loop5: detected capacity change from 0 to 128 [ 555.069208][ T29] audit: type=1326 audit(1760604658.090:40139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31143 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.099167][ T29] audit: type=1326 audit(1760604658.090:40140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31143 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.122792][ T29] audit: type=1326 audit(1760604658.090:40141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31143 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.241418][ T29] audit: type=1326 audit(1760604658.320:40142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.5.9418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.312587][T31167] xt_CT: No such helper "netbios-ns" [ 555.333685][ T29] audit: type=1326 audit(1760604658.320:40143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.5.9418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.357515][ T29] audit: type=1326 audit(1760604658.320:40144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.5.9418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.381106][ T29] audit: type=1326 audit(1760604658.320:40145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.5.9418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.404761][ T29] audit: type=1326 audit(1760604658.370:40146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.5.9418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 555.412507][T31170] tipc: Started in network mode [ 555.433369][T31170] tipc: Node identity 7e6acbb7e91e, cluster identity 4711 [ 555.440530][T31170] tipc: Enabled bearer , priority 0 [ 555.450490][T31170] syzkaller0: entered promiscuous mode [ 555.456034][T31170] syzkaller0: entered allmulticast mode [ 555.457884][ T12] bio_check_eod: 823 callbacks suppressed [ 555.457901][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.457901][ T12] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 555.482290][T31170] tipc: Resetting bearer [ 555.489015][T31169] tipc: Resetting bearer [ 555.497877][T31169] tipc: Disabling bearer [ 555.502193][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.502193][ T12] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 555.524273][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.524273][ T12] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 555.538237][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.538237][ T12] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 555.551662][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.551662][ T12] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 555.565305][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.565305][ T12] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 555.579279][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.579279][ T12] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 555.606279][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.606279][ T12] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 555.620423][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.620423][ T12] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 555.634191][ T12] kworker/u8:0: attempt to access beyond end of device [ 555.634191][ T12] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 555.658099][T31177] program syz.3.9426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.750645][T31183] __nla_validate_parse: 6 callbacks suppressed [ 555.750660][T31183] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.9428'. [ 555.795136][T31189] tipc: Enabling of bearer rejected, failed to enable media [ 555.872538][T31200] loop5: detected capacity change from 0 to 128 [ 556.021771][T31207] loop5: detected capacity change from 0 to 256 [ 556.029947][T31207] FAT-fs (loop5): bogus number of FAT sectors [ 556.036080][T31207] FAT-fs (loop5): Can't find a valid FAT filesystem [ 556.052671][T31207] netlink: 'syz.5.9434': attribute type 10 has an invalid length. [ 556.074639][T31207] team0: Port device dummy0 removed [ 556.090366][T31207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 556.185860][T31218] program syz.5.9438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.215228][T31219] loop6: detected capacity change from 0 to 2048 [ 556.229487][T31219] EXT4-fs (loop6): failed to initialize system zone (-117) [ 556.242985][T31219] EXT4-fs (loop6): mount failed [ 556.305507][T31225] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.9440'. [ 556.341522][T31229] tipc: Enabling of bearer rejected, failed to enable media [ 556.413002][T31240] loop6: detected capacity change from 0 to 128 [ 556.421606][T31240] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 556.433892][T31240] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 556.465972][T31240] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.714387][T31246] hub 6-0:1.0: USB hub found [ 556.719676][T31246] hub 6-0:1.0: 8 ports detected [ 556.903275][T31261] tipc: Enabled bearer , priority 0 [ 556.920360][T31261] syzkaller0: entered promiscuous mode [ 556.926052][T31261] syzkaller0: entered allmulticast mode [ 556.944078][T31267] tipc: Enabled bearer , priority 0 [ 556.954195][T31261] tipc: Resetting bearer [ 556.961043][T31260] tipc: Resetting bearer [ 556.970786][T31260] tipc: Disabling bearer [ 556.978724][T31267] tipc: Resetting bearer [ 556.986272][T31266] tipc: Disabling bearer [ 557.034280][T31275] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9459'. [ 557.359933][T31305] loop5: detected capacity change from 0 to 1024 [ 557.369132][T31305] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 557.385321][T31307] tipc: Enabled bearer , priority 0 [ 557.390973][T31305] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9466: Invalid block bitmap block 0 in block_group 0 [ 557.392480][T31307] syzkaller0: entered promiscuous mode [ 557.410806][T31307] syzkaller0: entered allmulticast mode [ 557.420820][T31305] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.9466: Failed to acquire dquot type 0 [ 557.437362][T31307] tipc: Resetting bearer [ 557.441548][T31305] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.9466: Freeing blocks not in datazone - block = 0, count = 4096 [ 557.456646][T31306] tipc: Resetting bearer [ 557.462689][T31305] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9466: Invalid inode bitmap blk 0 in block_group 0 [ 557.479123][T31306] tipc: Disabling bearer [ 557.485505][ T785] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 557.498412][T31305] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 557.509460][T31305] EXT4-fs (loop5): 1 orphan inode deleted [ 557.515717][T31305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.529221][T31305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.167731][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9475'. [ 558.390458][T31342] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 558.402101][T31331] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.9480'. [ 558.439098][T31342] vhci_hcd: invalid port number 96 [ 558.444248][T31342] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 558.969101][T31358] netlink: 5388 bytes leftover after parsing attributes in process `syz.5.9489'. [ 559.008117][T31361] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9491'. [ 559.919167][T31387] loop5: detected capacity change from 0 to 764 [ 559.926365][T31387] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 559.951307][T31382] hub 6-0:1.0: USB hub found [ 559.956032][T31382] hub 6-0:1.0: 8 ports detected [ 560.002185][T31391] netlink: 5388 bytes leftover after parsing attributes in process `syz.5.9502'. [ 560.028543][T31393] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.9503'. [ 560.041730][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 560.041741][ T29] audit: type=1326 audit(1760604663.120:40606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.080185][T31385] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.9499'. [ 560.091333][ T29] audit: type=1326 audit(1760604663.160:40607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.114958][ T29] audit: type=1326 audit(1760604663.160:40608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.138606][ T29] audit: type=1326 audit(1760604663.160:40609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.162292][ T29] audit: type=1326 audit(1760604663.160:40610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.185913][ T29] audit: type=1326 audit(1760604663.160:40611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.209518][ T29] audit: type=1326 audit(1760604663.160:40612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.233101][ T29] audit: type=1326 audit(1760604663.160:40613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.256731][ T29] audit: type=1326 audit(1760604663.160:40614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.280226][ T29] audit: type=1326 audit(1760604663.160:40615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31384 comm="syz.6.9499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6823efeec9 code=0x7ffc0000 [ 560.727197][T31429] loop6: detected capacity change from 0 to 128 [ 560.800755][T31432] bio_check_eod: 212 callbacks suppressed [ 560.800774][T31432] syz.6.9515: attempt to access beyond end of device [ 560.800774][T31432] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 560.820317][T31432] syz.6.9515: attempt to access beyond end of device [ 560.820317][T31432] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 560.834002][T31432] syz.6.9515: attempt to access beyond end of device [ 560.834002][T31432] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 560.847917][T31432] syz.6.9515: attempt to access beyond end of device [ 560.847917][T31432] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 560.862613][T31432] syz.6.9515: attempt to access beyond end of device [ 560.862613][T31432] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 560.878066][T31432] syz.6.9515: attempt to access beyond end of device [ 560.878066][T31432] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 560.891933][T31432] syz.6.9515: attempt to access beyond end of device [ 560.891933][T31432] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 560.905654][T31432] syz.6.9515: attempt to access beyond end of device [ 560.905654][T31432] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 560.955574][T31432] syz.6.9515: attempt to access beyond end of device [ 560.955574][T31432] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 560.970868][T31432] syz.6.9515: attempt to access beyond end of device [ 560.970868][T31432] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 561.066320][T31441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 561.119939][T31441] vhci_hcd: invalid port number 96 [ 561.125180][T31441] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 561.234097][T31453] loop6: detected capacity change from 0 to 256 [ 561.248154][T31453] FAT-fs (loop6): bogus number of FAT sectors [ 561.254492][T31453] FAT-fs (loop6): Can't find a valid FAT filesystem [ 561.272212][T31458] __nla_validate_parse: 2 callbacks suppressed [ 561.272227][T31458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'. [ 561.394601][T31453] netlink: 'syz.6.9525': attribute type 10 has an invalid length. [ 561.420211][T31453] bond0: (slave dummy0): Releasing backup interface [ 561.431296][T31456] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.9526'. [ 561.446905][T31453] team0: Port device dummy0 added [ 561.449709][T31462] netlink: 'syz.6.9525': attribute type 10 has an invalid length. [ 561.464719][T31462] team0: Port device dummy0 removed [ 561.471970][T31462] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 561.513569][T31464] loop6: detected capacity change from 0 to 128 [ 562.061915][T31483] loop5: detected capacity change from 0 to 128 [ 562.077501][T31483] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.090014][T31483] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 562.134940][T26160] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 562.231164][T31493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9542'. [ 562.465174][T31514] loop6: detected capacity change from 0 to 128 [ 562.488104][T31517] loop5: detected capacity change from 0 to 128 [ 562.559992][T31514] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.581845][T31514] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 562.624667][T31514] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 562.710001][T31530] loop5: detected capacity change from 0 to 128 [ 562.789248][T31535] loop6: detected capacity change from 0 to 2048 [ 562.824975][T31535] EXT4-fs (loop6): failed to initialize system zone (-117) [ 562.833074][T31535] EXT4-fs (loop6): mount failed [ 563.344976][T31553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.374610][T31553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.384034][T31553] netlink: 'syz.3.9565': attribute type 10 has an invalid length. [ 563.398185][T31553] bond0: (slave dummy0): Releasing backup interface [ 563.407375][T31553] team0: Port device dummy0 added [ 563.422384][T31553] netlink: 'syz.3.9565': attribute type 10 has an invalid length. [ 563.433027][T31553] team0: Port device dummy0 removed [ 563.440592][T31553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 563.611138][T31559] loop6: detected capacity change from 0 to 2048 [ 563.620784][T31563] loop5: detected capacity change from 0 to 128 [ 563.628443][T31559] EXT4-fs (loop6): failed to initialize system zone (-117) [ 563.635952][T31559] EXT4-fs (loop6): mount failed [ 564.744219][T31600] loop5: detected capacity change from 0 to 512 [ 564.763113][T31600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.775816][T31600] ext4 filesystem being mounted at /375/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.798181][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.814107][T31616] loop5: detected capacity change from 0 to 128 [ 565.162861][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2ee200: rx timeout, send abort [ 565.171358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a2ee200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 565.195882][T31625] hub 6-0:1.0: USB hub found [ 565.205844][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 565.205916][ T29] audit: type=1326 audit(1760604668.290:40799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.213573][T31625] hub 6-0:1.0: 8 ports detected [ 565.235839][ T29] audit: type=1326 audit(1760604668.290:40800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.264514][ T29] audit: type=1326 audit(1760604668.330:40801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.288048][ T29] audit: type=1326 audit(1760604668.330:40802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.311701][ T29] audit: type=1326 audit(1760604668.330:40803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.337366][ T29] audit: type=1326 audit(1760604668.340:40804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.360926][ T29] audit: type=1326 audit(1760604668.340:40805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.384510][ T29] audit: type=1326 audit(1760604668.340:40806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31633 comm="syz.4.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.408135][ T29] audit: type=1326 audit(1760604668.390:40807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31637 comm="syz.4.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.432192][ T29] audit: type=1326 audit(1760604668.390:40808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31637 comm="syz.4.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 565.598671][T31648] syzkaller0: entered promiscuous mode [ 565.604353][T31648] syzkaller0: entered allmulticast mode [ 565.693336][T31651] program syz.6.9598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.719769][T31654] loop6: detected capacity change from 0 to 764 [ 565.726792][T31654] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 565.750889][T31656] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.9600'. [ 565.777184][T31658] loop6: detected capacity change from 0 to 128 [ 565.785275][T31658] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 565.797585][T31658] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 565.829895][T31658] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.855579][T31661] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9602'. [ 566.395312][T31688] syzkaller0: entered promiscuous mode [ 566.400881][T31688] syzkaller0: entered allmulticast mode [ 566.488208][T31691] program syz.5.9610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.708302][T31716] loop6: detected capacity change from 0 to 764 [ 566.715433][T31716] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 566.744884][T31717] loop5: detected capacity change from 0 to 2048 [ 566.767862][T31717] EXT4-fs (loop5): failed to initialize system zone (-117) [ 566.775157][T31717] EXT4-fs (loop5): mount failed [ 566.790454][T31723] syzkaller0: entered promiscuous mode [ 566.795948][T31723] syzkaller0: entered allmulticast mode [ 566.859626][T31725] program syz.5.9622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.869584][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 566.875596][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 566.901855][T31729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.910404][T31729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.917226][T31731] loop5: detected capacity change from 0 to 764 [ 566.919838][T31729] netlink: 'syz.0.9624': attribute type 10 has an invalid length. [ 566.932994][T31731] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 567.018628][T31739] loop6: detected capacity change from 0 to 2048 [ 567.124503][T31739] EXT4-fs (loop6): failed to initialize system zone (-117) [ 567.132042][T31739] EXT4-fs (loop6): mount failed [ 567.173130][T31749] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9630'. [ 567.183526][T31749] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9630'. [ 567.490896][T31766] xt_CT: No such helper "netbios-ns" [ 568.461488][T31806] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9650'. [ 568.473850][T31806] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9650'. [ 568.488433][T31808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.496912][T31808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.835322][T31821] loop5: detected capacity change from 0 to 512 [ 568.848911][T31821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.861536][T31821] ext4 filesystem being mounted at /398/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.883416][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.074354][T31848] loop5: detected capacity change from 0 to 128 [ 569.139377][T31848] bio_check_eod: 30793 callbacks suppressed [ 569.139390][T31848] syz.5.9664: attempt to access beyond end of device [ 569.139390][T31848] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 569.159049][T31848] syz.5.9664: attempt to access beyond end of device [ 569.159049][T31848] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 569.172650][T31848] syz.5.9664: attempt to access beyond end of device [ 569.172650][T31848] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 569.186086][T31848] syz.5.9664: attempt to access beyond end of device [ 569.186086][T31848] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 569.200190][T31848] syz.5.9664: attempt to access beyond end of device [ 569.200190][T31848] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 569.208411][T31858] syzkaller0: entered promiscuous mode [ 569.214029][T31848] syz.5.9664: attempt to access beyond end of device [ 569.214029][T31848] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 569.219119][T31858] syzkaller0: entered allmulticast mode [ 569.233162][T31848] syz.5.9664: attempt to access beyond end of device [ 569.233162][T31848] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 569.251503][T31848] syz.5.9664: attempt to access beyond end of device [ 569.251503][T31848] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 569.267037][T31848] syz.5.9664: attempt to access beyond end of device [ 569.267037][T31848] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 569.267107][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 569.284409][T31848] syz.5.9664: attempt to access beyond end of device [ 569.284409][T31848] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 569.286451][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 569.345361][T31865] netlink: 'syz.5.9670': attribute type 25 has an invalid length. [ 569.386732][T31873] loop5: detected capacity change from 0 to 128 [ 569.538839][T31873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9674'. [ 569.602751][ T44] Bluetooth: hci0: sending frame failed (-49) [ 569.609017][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 569.764093][T31904] syzkaller0: entered promiscuous mode [ 569.769783][T31904] syzkaller0: entered allmulticast mode [ 569.786551][T31903] netlink: 'syz.4.9685': attribute type 25 has an invalid length. [ 570.022986][T31916] loop5: detected capacity change from 0 to 128 [ 570.213637][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 570.213654][ T29] audit: type=1326 audit(1760604673.290:40982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.243507][ T29] audit: type=1326 audit(1760604673.290:40983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.267175][ T29] audit: type=1326 audit(1760604673.290:40984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.290752][ T29] audit: type=1326 audit(1760604673.290:40985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.314435][ T29] audit: type=1326 audit(1760604673.290:40986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.338512][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9690'. [ 570.435430][ T29] audit: type=1326 audit(1760604673.340:40987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.435450][T31939] loop5: detected capacity change from 0 to 512 [ 570.465381][ T29] audit: type=1326 audit(1760604673.340:40988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.489272][ T29] audit: type=1326 audit(1760604673.340:40989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.512889][ T29] audit: type=1326 audit(1760604673.390:40990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.536692][ T29] audit: type=1326 audit(1760604673.390:40991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31915 comm="syz.5.9690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9727feec9 code=0x7ffc0000 [ 570.563326][T31939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.579023][T31939] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.591626][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9702'. [ 570.631612][T31953] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9703'. [ 570.642366][T31954] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 570.681442][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.774992][T31959] loop5: detected capacity change from 0 to 1024 [ 570.798370][T31959] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 570.837080][T31959] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9704: Invalid block bitmap block 0 in block_group 0 [ 570.849530][T31963] xt_CT: No such helper "netbios-ns" [ 570.867365][T31959] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.9704: Failed to acquire dquot type 0 [ 570.901640][T31959] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.9704: Freeing blocks not in datazone - block = 0, count = 4096 [ 570.916417][T31959] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9704: Invalid inode bitmap blk 0 in block_group 0 [ 570.930054][T16991] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 570.942136][T31959] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 570.967486][T31959] EXT4-fs (loop5): 1 orphan inode deleted [ 570.980706][T31959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.009335][T31959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.257070][T31973] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9708'. [ 571.418163][T31994] xt_CT: No such helper "netbios-ns" [ 571.426804][T31994] loop6: detected capacity change from 0 to 512 [ 571.439054][T31994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.451692][T31994] ext4 filesystem being mounted at /595/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.475066][T23672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.493741][T32004] netlink: 'syz.6.9717': attribute type 10 has an invalid length. [ 571.503431][T32004] bond0: (slave dummy0): Releasing backup interface [ 571.512930][T32004] team0: Port device dummy0 added [ 571.519749][T32004] netlink: 'syz.6.9717': attribute type 10 has an invalid length. [ 571.530074][T32004] team0: Port device dummy0 removed [ 571.537424][T32004] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 571.563811][T32007] netlink: 'syz.5.9719': attribute type 25 has an invalid length. [ 571.572822][T31990] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9714'. [ 572.208088][T32029] program syz.4.9729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.270412][T32038] netlink: 'syz.4.9731': attribute type 24 has an invalid length. [ 572.365851][T32051] __nla_validate_parse: 1 callbacks suppressed [ 572.365922][T32051] netlink: 5388 bytes leftover after parsing attributes in process `syz.3.9735'. [ 572.418536][T32054] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9736'. [ 572.435196][T32030] chnl_net:caif_netlink_parms(): no params data found [ 572.486890][T16993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.574037][T16993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.604169][T32030] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.611419][T32030] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.618874][T32030] bridge_slave_0: entered allmulticast mode [ 572.625458][T32030] bridge_slave_0: entered promiscuous mode [ 572.634922][T16993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.647175][T32030] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.654348][T32030] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.682066][T32030] bridge_slave_1: entered allmulticast mode [ 572.695181][T32030] bridge_slave_1: entered promiscuous mode [ 572.703648][T16993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.730318][T32081] bridge3: entered promiscuous mode [ 572.735601][T32081] bridge3: entered allmulticast mode [ 572.769341][T32030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.809885][T16993] bridge_slave_1: left allmulticast mode [ 572.815594][T16993] bridge_slave_1: left promiscuous mode [ 572.821340][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.829442][T16993] bridge_slave_0: left allmulticast mode [ 572.835093][T16993] bridge_slave_0: left promiscuous mode [ 572.840870][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.149370][T16993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.177590][T16993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.195036][T16993] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 573.220079][T16993] bond0 (unregistering): Released all slaves [ 573.230062][T32030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.266022][T32030] team0: Port device team_slave_0 added [ 573.282223][T16993] tipc: Left network mode [ 573.287607][T32030] team0: Port device team_slave_1 added [ 573.297375][T16993] hsr_slave_0: left promiscuous mode [ 573.306148][T16993] hsr_slave_1: left promiscuous mode [ 573.312366][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.320031][T16993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.332956][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.340501][T16993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.362984][T16993] veth1_macvtap: left promiscuous mode [ 573.374677][T16993] veth0_macvtap: left promiscuous mode [ 573.474166][T16993] team0 (unregistering): Port device team_slave_1 removed [ 573.526385][T32105] loop5: detected capacity change from 0 to 764 [ 573.544706][T32030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.551819][T32030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.577768][T32030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.588448][T32105] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 573.621961][T32030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.629402][T32030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.629464][T32030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.693888][T32030] hsr_slave_0: entered promiscuous mode [ 573.700052][T32030] hsr_slave_1: entered promiscuous mode [ 573.710972][T32030] debugfs: 'hsr0' already exists in 'hsr' [ 573.716736][T32030] Cannot create hsr debugfs directory [ 574.023430][T32130] loop5: detected capacity change from 0 to 2048 [ 574.257341][T32030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.266414][T32030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.276636][T32030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.289534][T32130] EXT4-fs (loop5): failed to initialize system zone (-117) [ 574.296905][T32130] EXT4-fs (loop5): mount failed [ 574.303779][T32030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.401337][T32030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.412559][T32030] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.428752][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.435861][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.452480][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.459734][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.516041][T32030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.537201][T32161] netlink: 5388 bytes leftover after parsing attributes in process `syz.5.9768'. [ 574.604935][T32168] loop5: detected capacity change from 0 to 128 [ 574.605017][T32030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.712826][T32176] bio_check_eod: 2500 callbacks suppressed [ 574.712893][T32176] syz.5.9769: attempt to access beyond end of device [ 574.712893][T32176] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 574.741457][T32179] xt_CT: No such helper "netbios-ns" [ 574.753494][T32176] syz.5.9769: attempt to access beyond end of device [ 574.753494][T32176] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 574.807281][T32176] syz.5.9769: attempt to access beyond end of device [ 574.807281][T32176] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 574.821092][T32176] syz.5.9769: attempt to access beyond end of device [ 574.821092][T32176] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 574.860535][T32176] syz.5.9769: attempt to access beyond end of device [ 574.860535][T32176] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 574.861951][T32030] veth0_vlan: entered promiscuous mode [ 574.882597][T32030] veth1_vlan: entered promiscuous mode [ 574.898340][T32030] veth0_macvtap: entered promiscuous mode [ 574.905507][T32030] veth1_macvtap: entered promiscuous mode [ 574.917168][T32030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.928933][T32030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.939560][T32176] syz.5.9769: attempt to access beyond end of device [ 574.939560][T32176] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 574.957763][T16993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.970307][T32176] syz.5.9769: attempt to access beyond end of device [ 574.970307][T32176] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 574.984626][T32176] syz.5.9769: attempt to access beyond end of device [ 574.984626][T32176] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 575.003239][T16993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.003537][T32176] syz.5.9769: attempt to access beyond end of device [ 575.003537][T32176] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 575.025767][T32176] syz.5.9769: attempt to access beyond end of device [ 575.025767][T32176] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 575.028649][T16993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.049298][T32195] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 575.056607][T16993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.085167][T32168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9769'. [ 575.099202][T32195] vhci_hcd: invalid port number 96 [ 575.104365][T32195] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 575.123638][T32201] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9776'. [ 575.212341][T32208] netlink: 5388 bytes leftover after parsing attributes in process `syz.5.9778'. [ 575.414670][T32228] loop6: detected capacity change from 0 to 128 [ 575.426225][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 575.426247][ T29] audit: type=1326 audit(1760604678.510:41271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.470871][ T29] audit: type=1326 audit(1760604678.540:41272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.494586][ T29] audit: type=1326 audit(1760604678.540:41273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.518297][ T29] audit: type=1326 audit(1760604678.540:41274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.542974][ T29] audit: type=1326 audit(1760604678.630:41275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3baa91785 code=0x7ffc0000 [ 575.570337][ T29] audit: type=1326 audit(1760604678.630:41276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.594051][ T29] audit: type=1326 audit(1760604678.630:41277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.617672][ T29] audit: type=1326 audit(1760604678.650:41278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.641280][ T29] audit: type=1326 audit(1760604678.650:41279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32227 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 575.902911][T32247] netlink: 5388 bytes leftover after parsing attributes in process `syz.4.9791'. [ 576.479041][ T29] audit: type=1326 audit(1760604679.560:41280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 576.538360][T32267] loop5: detected capacity change from 0 to 512 [ 576.606573][T32267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.648611][T32267] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.738923][T32287] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9804'. [ 576.752242][T32289] loop6: detected capacity change from 0 to 764 [ 576.759461][T32289] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 576.793101][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.833385][T32296] loop6: detected capacity change from 0 to 128 [ 577.096102][T32321] syzkaller0: entered promiscuous mode [ 577.101725][T32321] syzkaller0: entered allmulticast mode [ 577.306320][T32328] netlink: 'syz.4.9820': attribute type 10 has an invalid length. [ 577.343408][T32328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 577.860672][T32345] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9826'. [ 578.206779][T32366] loop5: detected capacity change from 0 to 128 [ 578.315646][T32372] 9pnet: Could not find request transport: t [ 578.386075][T32353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9830'. [ 578.615240][T32391] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9844'. [ 579.708318][T32416] netlink: 'syz.3.9851': attribute type 25 has an invalid length. [ 579.818881][T32430] bridge1: entered promiscuous mode [ 579.824127][T32430] bridge1: entered allmulticast mode [ 579.837190][T32429] 9pnet: Could not find request transport: t [ 580.447956][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 580.447975][ T29] audit: type=1326 audit(1760604683.520:41704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64fb521785 code=0x7ffc0000 [ 580.517527][ T29] audit: type=1326 audit(1760604683.560:41705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64fb521785 code=0x7ffc0000 [ 580.541251][ T29] audit: type=1326 audit(1760604683.560:41706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 580.565012][ T29] audit: type=1326 audit(1760604683.560:41707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb4eeec9 code=0x7ffc0000 [ 580.588646][ T29] audit: type=1326 audit(1760604683.570:41708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64fb521785 code=0x7ffc0000 [ 580.612353][ T29] audit: type=1326 audit(1760604683.580:41709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.3.9853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e11e1eec9 code=0x7ffc0000 [ 580.636118][ T29] audit: type=1326 audit(1760604683.580:41710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.3.9853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e11e1eec9 code=0x7ffc0000 [ 580.659875][ T29] audit: type=1326 audit(1760604683.580:41711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.3.9853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9e11e1eec9 code=0x7ffc0000 [ 580.683373][ T29] audit: type=1326 audit(1760604683.580:41712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.0.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64fb521785 code=0x7ffc0000 [ 580.707318][ T29] audit: type=1326 audit(1760604683.590:41713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.3.9853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e11e1eec9 code=0x7ffc0000 [ 580.731382][T32432] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 580.783277][T32446] loop6: detected capacity change from 0 to 128 [ 580.882480][T32453] bio_check_eod: 6883 callbacks suppressed [ 580.882495][T32453] syz.6.9860: attempt to access beyond end of device [ 580.882495][T32453] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 580.920619][T32453] syz.6.9860: attempt to access beyond end of device [ 580.920619][T32453] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 580.946794][T32455] netlink: 'syz.5.9865': attribute type 25 has an invalid length. [ 580.975003][T32453] syz.6.9860: attempt to access beyond end of device [ 580.975003][T32453] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 580.999833][T32453] syz.6.9860: attempt to access beyond end of device [ 580.999833][T32453] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 581.037045][T32453] syz.6.9860: attempt to access beyond end of device [ 581.037045][T32453] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 581.147073][T32453] syz.6.9860: attempt to access beyond end of device [ 581.147073][T32453] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 581.167058][T32453] syz.6.9860: attempt to access beyond end of device [ 581.167058][T32453] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 581.197057][T32453] syz.6.9860: attempt to access beyond end of device [ 581.197057][T32453] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 581.210537][T32453] syz.6.9860: attempt to access beyond end of device [ 581.210537][T32453] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 581.225961][T32453] syz.6.9860: attempt to access beyond end of device [ 581.225961][T32453] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 581.659033][T32482] loop6: detected capacity change from 0 to 128 [ 581.812126][T32487] loop6: detected capacity change from 0 to 128 [ 582.129775][T32496] xt_CT: No such helper "netbios-ns" [ 582.140391][T32496] loop6: detected capacity change from 0 to 512 [ 582.176792][T32496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.197066][T32496] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.229299][T32030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.377152][T32492] hub 6-0:1.0: USB hub found [ 582.392605][T32492] hub 6-0:1.0: 8 ports detected [ 582.485328][T32519] syzkaller0: entered promiscuous mode [ 582.491008][T32519] syzkaller0: entered allmulticast mode [ 582.691456][T32536] tipc: Enabling of bearer rejected, failed to enable media [ 582.710709][T32536] syzkaller0: entered promiscuous mode [ 582.716232][T32536] syzkaller0: entered allmulticast mode [ 583.443327][T32571] 9pnet: Could not find request transport: tc [ 583.465793][T32556] hub 6-0:1.0: USB hub found [ 583.470578][T32556] hub 6-0:1.0: 8 ports detected [ 583.489133][T32574] loop5: detected capacity change from 0 to 128 [ 583.587212][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9904'. [ 583.645468][T32577] loop6: detected capacity change from 0 to 2048 [ 583.688655][T32577] EXT4-fs (loop6): failed to initialize system zone (-117) [ 583.695912][T32577] EXT4-fs (loop6): mount failed [ 584.277954][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9910'. [ 584.390827][T32621] loop6: detected capacity change from 0 to 2048 [ 584.418009][T32624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9915'. [ 584.427146][T32624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9915'. [ 584.437013][T32621] EXT4-fs (loop6): failed to initialize system zone (-117) [ 584.446379][T32624] gretap0: entered promiscuous mode [ 584.451834][T32621] EXT4-fs (loop6): mount failed [ 584.472135][T32624] gretap0: left promiscuous mode [ 584.494382][T32630] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9917'. [ 584.609205][T32639] 9pnet: Could not find request transport: tc [ 584.729504][T32642] loop6: detected capacity change from 0 to 2048 [ 584.763777][T32642] EXT4-fs (loop6): failed to initialize system zone (-117) [ 584.771737][T32642] EXT4-fs (loop6): mount failed [ 585.047306][T32658] team0: Port device team_slave_0 removed [ 585.286385][T32667] xt_CT: No such helper "netbios-ns" [ 585.597693][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9932'. [ 585.714775][T32684] tipc: Enabling of bearer rejected, failed to enable media [ 585.755989][T32684] syzkaller0: entered promiscuous mode [ 585.761565][T32684] syzkaller0: entered allmulticast mode [ 585.902711][T32688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.912608][T32688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.922627][T32688] netlink: 'syz.5.9934': attribute type 10 has an invalid length. [ 585.933120][T32688] bond0: (slave dummy0): Releasing backup interface [ 585.945810][T32688] team0: Port device dummy0 added [ 585.958350][T32688] netlink: 'syz.5.9934': attribute type 10 has an invalid length. [ 585.972983][T32688] team0: Port device dummy0 removed [ 585.980651][T32688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 586.095832][T32706] xt_CT: No such helper "netbios-ns" [ 586.104463][T32706] loop6: detected capacity change from 0 to 512 [ 586.129222][T32706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.142663][T32706] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.180090][T32030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.277495][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 586.277512][ T29] audit: type=1326 audit(1760604689.360:41930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.326935][ T29] audit: type=1326 audit(1760604689.400:41931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.350609][ T29] audit: type=1326 audit(1760604689.400:41932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.374235][ T29] audit: type=1326 audit(1760604689.400:41933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.397821][ T29] audit: type=1326 audit(1760604689.400:41934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.421567][ T29] audit: type=1326 audit(1760604689.400:41935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32726 comm="syz.4.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.449310][T32733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9949'. [ 586.522237][ T29] audit: type=1326 audit(1760604689.410:41936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32728 comm="syz.4.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.546062][ T29] audit: type=1326 audit(1760604689.410:41937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32728 comm="syz.4.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.569560][ T29] audit: type=1326 audit(1760604689.410:41938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32728 comm="syz.4.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 586.767526][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9952'. [ 587.000769][T32758] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.9955'. [ 587.039689][ T29] audit: type=1326 audit(1760604690.120:41939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32764 comm="syz.6.9958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3baa5eec9 code=0x7ffc0000 [ 587.649699][ T330] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.9969'. [ 589.136016][ T377] __nla_validate_parse: 1 callbacks suppressed [ 589.136033][ T377] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.9975'. [ 589.268915][ T384] loop5: detected capacity change from 0 to 128 [ 589.507172][ T390] tipc: Enabling of bearer rejected, failed to enable media [ 589.516226][ T390] syzkaller0: entered promiscuous mode [ 589.521727][ T390] syzkaller0: entered allmulticast mode [ 589.546893][ T388] loop6: detected capacity change from 0 to 256 [ 589.553744][ T388] FAT-fs (loop6): bogus number of FAT sectors [ 589.559886][ T388] FAT-fs (loop6): Can't find a valid FAT filesystem [ 589.569505][ T388] netlink: 'syz.6.9986': attribute type 10 has an invalid length. [ 589.591503][ T388] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 589.647027][ T397] bridge0: port 3(ipvlan3) entered blocking state [ 589.653520][ T397] bridge0: port 3(ipvlan3) entered disabled state [ 589.660113][ T397] ipvlan3: entered allmulticast mode [ 589.665402][ T397] bridge0: entered allmulticast mode [ 589.671673][ T397] ipvlan3: left allmulticast mode [ 589.676696][ T397] bridge0: left allmulticast mode [ 589.887660][T16988] bio_check_eod: 1571 callbacks suppressed [ 589.887676][T16988] kworker/u8:12: attempt to access beyond end of device [ 589.887676][T16988] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 589.909904][ T401] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9989'. [ 589.964320][T16988] kworker/u8:12: attempt to access beyond end of device [ 589.964320][T16988] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 589.977848][T16988] kworker/u8:12: attempt to access beyond end of device [ 589.977848][T16988] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 589.991273][T16988] kworker/u8:12: attempt to access beyond end of device [ 589.991273][T16988] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 590.016827][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.016827][T16988] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 590.031213][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.031213][T16988] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 590.051929][ T409] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.9993'. [ 590.060072][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.060072][T16988] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 590.075014][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.083905][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.083905][T16988] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 590.088802][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.098040][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.098040][T16988] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 590.121530][T16988] kworker/u8:12: attempt to access beyond end of device [ 590.121530][T16988] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 590.135187][ T413] netlink: 'syz.6.9995': attribute type 10 has an invalid length. [ 590.156622][ T413] bond0: (slave dummy0): Releasing backup interface [ 590.166512][ T413] team0: Port device dummy0 added [ 590.174954][ T413] netlink: 'syz.6.9995': attribute type 10 has an invalid length. [ 590.195367][ T413] team0: Port device dummy0 removed [ 590.208576][ T413] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 590.439897][ T435] bridge3: entered promiscuous mode [ 590.445146][ T435] bridge3: entered allmulticast mode [ 591.138932][ T456] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 591.215659][ T459] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.10007'. [ 591.230430][ T456] vhci_hcd: invalid port number 96 [ 591.235589][ T456] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 591.305674][ T464] xt_CT: No such helper "netbios-ns" [ 591.445990][ T476] netlink: 7 bytes leftover after parsing attributes in process `syz.5.10014'. [ 591.591727][ T480] bridge0: port 3(ipvlan3) entered blocking state [ 591.598258][ T480] bridge0: port 3(ipvlan3) entered disabled state [ 591.604853][ T480] ipvlan3: entered allmulticast mode [ 591.610170][ T480] bridge0: entered allmulticast mode [ 591.616486][ T480] ipvlan3: left allmulticast mode [ 591.621560][ T480] bridge0: left allmulticast mode [ 591.983662][ T487] loop6: detected capacity change from 0 to 128 [ 592.084938][ T492] netlink: 'syz.4.10018': attribute type 10 has an invalid length. [ 592.115008][ T498] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.10019'. [ 592.159649][ T500] netlink: 'syz.4.10020': attribute type 25 has an invalid length. [ 592.296602][ T507] xt_CT: No such helper "netbios-ns" [ 592.340105][ T513] syzkaller0: entered promiscuous mode [ 592.345624][ T513] syzkaller0: entered allmulticast mode [ 592.355751][ T515] loop5: detected capacity change from 0 to 512 [ 592.370026][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 592.370080][ T29] audit: type=1326 audit(1760604695.450:42044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.399742][ T29] audit: type=1326 audit(1760604695.450:42045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.438480][ T29] audit: type=1326 audit(1760604695.450:42046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.461929][ T29] audit: type=1326 audit(1760604695.450:42047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.485695][ T29] audit: type=1326 audit(1760604695.450:42048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.509445][ T29] audit: type=1326 audit(1760604695.510:42049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.533012][ T29] audit: type=1326 audit(1760604695.510:42050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.556608][ T29] audit: type=1326 audit(1760604695.510:42051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.580137][ T29] audit: type=1326 audit(1760604695.510:42052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.603710][ T29] audit: type=1326 audit(1760604695.510:42053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34701eec9 code=0x7ffc0000 [ 592.627388][ T524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 592.630144][ T515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.649961][ T515] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.689248][ T522] vhci_hcd: invalid port number 96 [ 592.694393][ T522] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 592.756579][ C0] ================================================================== [ 592.764728][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 592.771986][ C0] [ 592.774333][ C0] read-write to 0xffff88810145d518 of 8 bytes by interrupt on cpu 1: [ 592.782415][ C0] can_rcv_filter+0x242/0x4f0 [ 592.787132][ C0] can_receive+0x163/0x1c0 [ 592.791583][ C0] can_rcv+0xed/0x190 [ 592.795587][ C0] __netif_receive_skb+0x120/0x270 [ 592.800732][ C0] process_backlog+0x229/0x420 [ 592.805501][ C0] __napi_poll+0x66/0x310 [ 592.809869][ C0] net_rx_action+0x423/0x8c0 [ 592.814469][ C0] handle_softirqs+0xba/0x290 [ 592.819168][ C0] do_softirq+0x5d/0x90 [ 592.823342][ C0] __local_bh_enable_ip+0x70/0x80 [ 592.828388][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 592.833358][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 592.839014][ C0] process_scheduled_works+0x4ce/0x9d0 [ 592.844509][ C0] worker_thread+0x582/0x770 [ 592.849115][ C0] kthread+0x489/0x510 [ 592.853225][ C0] ret_from_fork+0x122/0x1b0 [ 592.857837][ C0] ret_from_fork_asm+0x1a/0x30 [ 592.862628][ C0] [ 592.864958][ C0] read-write to 0xffff88810145d518 of 8 bytes by interrupt on cpu 0: [ 592.873044][ C0] can_rcv_filter+0x242/0x4f0 [ 592.877757][ C0] can_receive+0x163/0x1c0 [ 592.882294][ C0] can_rcv+0xed/0x190 [ 592.886298][ C0] __netif_receive_skb+0x120/0x270 [ 592.891445][ C0] process_backlog+0x229/0x420 [ 592.896223][ C0] __napi_poll+0x66/0x310 [ 592.900579][ C0] net_rx_action+0x423/0x8c0 [ 592.905186][ C0] handle_softirqs+0xba/0x290 [ 592.909877][ C0] run_ksoftirqd+0x1c/0x30 [ 592.914323][ C0] smpboot_thread_fn+0x32b/0x530 [ 592.919276][ C0] kthread+0x489/0x510 [ 592.923363][ C0] ret_from_fork+0x122/0x1b0 [ 592.927963][ C0] ret_from_fork_asm+0x1a/0x30 [ 592.932754][ C0] [ 592.935079][ C0] value changed: 0x0000000000000ccc -> 0x0000000000000ccd [ 592.942190][ C0] [ 592.944511][ C0] Reported by Kernel Concurrency Sanitizer on: [ 592.950671][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 592.960320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.970420][ C0] ================================================================== [ 593.032393][T26160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.780395][ C1] vcan0: j1939_tp_rxtimer: 0xffff888108ab8400: rx timeout, send abort [ 593.788646][ C1] vcan0: j1939_tp_rxtimer: 0xffff888108ab9a00: rx timeout, send abort [ 593.796831][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888108ab8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 593.811108][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888108ab9a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 594.012360][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a373c00: rx timeout, send abort [ 594.020606][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a372600: rx timeout, send abort [ 594.028888][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a373c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 594.043205][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a372600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.