last executing test programs: 1m45.812275106s ago: executing program 32 (id=275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 1m36.828728878s ago: executing program 5 (id=545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1c3) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 1m36.723891838s ago: executing program 5 (id=546): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m36.660375424s ago: executing program 5 (id=547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) 1m36.569627513s ago: executing program 5 (id=554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 1m36.529864516s ago: executing program 5 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m36.48365579s ago: executing program 5 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 1m21.010729314s ago: executing program 33 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 1m14.951026275s ago: executing program 6 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 1m14.915436719s ago: executing program 6 (id=746): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) syz_usb_disconnect(0xffffffffffffffff) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m14.128958961s ago: executing program 6 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1m14.025403931s ago: executing program 6 (id=785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)={[{@grpid}]}, 0x3, 0x447, &(0x7f0000001700)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0x800a, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) 1m13.912078672s ago: executing program 6 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1m13.673845304s ago: executing program 6 (id=799): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 1m13.657708255s ago: executing program 34 (id=799): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 1m10.764232273s ago: executing program 1 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) 1m10.650853084s ago: executing program 1 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) 1m10.579980541s ago: executing program 1 (id=864): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x0) 1m10.538212384s ago: executing program 1 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 1m10.47489618s ago: executing program 1 (id=868): quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30020, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x16101, 0x10000, 0x8, 0x1, 0x1, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) 1m10.133363671s ago: executing program 1 (id=877): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0xed5baa385a4620ba) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce31", 0x2}], 0x1}}], 0x1, 0x20040001) 1m10.133098171s ago: executing program 35 (id=877): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0xed5baa385a4620ba) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce31", 0x2}], 0x1}}], 0x1, 0x20040001) 39.152560412s ago: executing program 8 (id=2020): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 39.098378197s ago: executing program 8 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 39.008637796s ago: executing program 8 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write2(0x11, 0x0, 0x0) 39.008322896s ago: executing program 8 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x72) 39.007953796s ago: executing program 8 (id=2030): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x9) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xa, 0x40000}, 0x20) 38.817831974s ago: executing program 8 (id=2039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x8091, &(0x7f0000000240)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc22"], 0x1, 0x1213, &(0x7f00000002c0)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 38.770576688s ago: executing program 36 (id=2039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x8091, &(0x7f0000000240)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc22"], 0x1, 0x1213, &(0x7f00000002c0)="$eJzs3U+LG2UcB/Af+8fdbN111VptLz7oRS/B9uDJQxfZBWlAqY34B4Upm9aQmIRMDol4qAiePHj3HYhHb4L4BvY9eBAvS0H04kEciekfu2YxqU2i7edzyQ++z8w888wQmDA/cvjS5x80rpRiKa5/EbEWK534rSiKSLEUyzFyLZ7/ZO+XUkRc2KlUdi+mtLdz6eyLKaWtp79956Ovnvmud+KNr7e+WYuD7fcOfzr3w8Gpg9OHv196v56nep5a7V7K0uV2u5ddbtbSfj1vlFN6rVnL8lqqt/Ja9478SrPd6QxS1trf3Oh0a3mestYgNWqD1GunXneQsqtZvZXK5XLa3AiOOD/N4OqXvw4vdhTFajwURVEUpdiIE/FwbMZWPBLb8Wg8Fo/HyXgiTsWT8VScjqI4eXV20wcAAAAAAAAAAAAAAAAAAIAH0TH9/ys38zH9/z9Gsdg5AwAAAAAAAAAAAAAAAAAAwP3mbv7/v9D/DwAAAAAAAAAAAAAAAAAAAPfUZP3/6/r/AQAAAAAAAAAAAAAAAAAAYIZef+vtCzuVyu7FlNYjrl/rV/vV0eco33ulsvtC+tP27a1+7very7fys6M83ZmvxcaN/NzYfD2ee3aUD7OXX60cyc/E/uxPHwAAAB4I5XTL2Of7cvm4fFT95feBI8/vK3FmZW6nwV3KBx82smaz1v0/FZuTDV6awdFv3tKTblWKaQ6xHG9++tm7i17e6Yrz/zSmFJPtcO3G0v4tGq75v57qx6tj9jyHYnWqG+A/VCzwS4m5uX3Rjx3y/VwnBAAAAAAAAAAAwETGvv03DO7h64SLPkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bgWAAAAABAmL91Gh0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwVQAAAP//HwKFiQ==") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 18.011852062s ago: executing program 9 (id=2569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_disconnect(r1) 17.238214063s ago: executing program 9 (id=2604): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 17.16062907s ago: executing program 9 (id=2607): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0x40002013}) 17.044434271s ago: executing program 9 (id=2611): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ad}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") socket(0x10, 0xa, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 16.358252194s ago: executing program 9 (id=2627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="87741d", 0x3, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.063964202s ago: executing program 9 (id=2635): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 16.046011573s ago: executing program 37 (id=2635): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 2.294870807s ago: executing program 0 (id=3099): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.224016384s ago: executing program 0 (id=3101): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.222791874s ago: executing program 0 (id=3104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a32"], 0x2d4}}, 0x4048010) 2.203776766s ago: executing program 0 (id=3106): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x79, [0x4, 0x1ff], 0xf7}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.607919691s ago: executing program 4 (id=3140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.128819325s ago: executing program 4 (id=3155): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x82) unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0f0f29bd7000fadbdf25190000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) 1.105695538s ago: executing program 2 (id=3157): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000a80)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe800000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.105091838s ago: executing program 4 (id=3158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@usrjquota}, {@grpquota}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x33, 0x38, 0x33, 0x39, 0x0, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, 0xffffffffffffffff, 0x0) 1.093061569s ago: executing program 2 (id=3160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.034419194s ago: executing program 4 (id=3161): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="bc", 0x1, 0x4844, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="ffea", 0x2}], 0x1}}], 0x2, 0x20004800) close(r0) 1.033683675s ago: executing program 4 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.033254704s ago: executing program 4 (id=3166): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 1.011568707s ago: executing program 2 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) 860.231461ms ago: executing program 7 (id=3173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x3b, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x37ffffe, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x4ee2, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x62, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae4a1, 0x2, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 859.829071ms ago: executing program 7 (id=3174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 836.459353ms ago: executing program 7 (id=3175): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 815.893305ms ago: executing program 2 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 768.376559ms ago: executing program 7 (id=3177): syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') fchdir(r0) close(0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 768.076459ms ago: executing program 2 (id=3178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$eJzs3c1rXFUbAPDnTj6b9m3zwgtv66bBhRZKJ22NrYJgxIUIFgq6tg2TaYiZZEpmUpqQhUUEQQQtLgTduPaj7tyKrv0b3IhIS9W0WHEhI3c+kkkmH5M2H23z+8FNzpl775zz3DNz7rlzDzMB7FkD6Z9MxJGI+DCJOFR/PImIrmqqM2K4tt29hflcuiRRqbz+e1Ld5u7CfC6a9kntr2cOR8T370Ycz7SWW5qdmxgpFLoa+cHy5OXB0uzcifHJkbH8WH7qzKmhodNnnz17Zuti/fPHuQO3Pnrl6a+H/37n/zc++CGJ4ThQX9ccx1YZiIH6MelKD+EyL291Ybss2WB95w7Vg81J35od9fY5EoeiQ0sBwGMvPf9XAIA9JnH+B4A9pvE5wN2F+Vxjaf58YN+ufCqxc26/FBG9tfgb9zdrazrr9+x6q/dB++4m0RmLtys3vN/VroGI+OzbN79Ml9im+5AAq3n7WkRc7B9o7f+TljkLm3WyjW0GVuT1f7BzvkvHP8+tNv7LLI5/YnH8k3YLtfkhPau8d+/HQER3c771/Z+5ueqOL25B4fXx3wu1uW1poE3jv8VJa/0d9dx/0szRiBgv5NO+7WBEHIuunkvjhfypdco4duefO2utax7//XH9rS/S8tP/S1tkbnb2LN9ndKQ88iAxN7t9LeKJzqW5ffda+v/e6lh3sf2jsTbifPMT3VrxxEeXkq8+/96na5Wfxp/G21ha499elc8jnorV429I1p2fOJg2/8na39XL+ObnT/rWKr+5/dMlLb9xLbCG7vuPtlXa/n3rx9+fLM3XzE+XtrL0duJf/fXfnbxRTTcOxtWRcnn6VER38lrr46eX9m3kG9un8dciXRl/Zt3Xf3oleLHNGDtv/fZVxJMH7y/+RVt1yblMGv/optp/84kb9yY61iq/vfYfqqaO1R9pp/9rt4IPcuwAAAAAAAAAAAAAAAAAAAAAAAAAoF2ZiDgQSSa7mM5kstnab3j/L/oyhWKpfPxScWZqNKq/ld0fXZnGV10equWTxvef9jflT6/IPxMR/42Ij3v2VfPZXLEwutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jV+/z/1a89u1w4A2Da9G25xJ78sW6lUKttYHwBg+218/gcAHjfrnP/37WQ9AICd4/ofAPYe538A2Huc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhm58+dS5fKXwvzuTQ/emV2ZqJ45cRovjSRnZzJZXPF6cvZsWJxrJDP5oqTGz1foVi8PBRTM1cHy/lSebA0O3dhsjgzVb4wPjkylr+Q79qRqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc0qzcxMjhUJ++rFIvB8RD0E1tiORxENRjV1J/HLip8PrbXN9g5fx8EMRxSOW2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8G8AAAD//21CJgc=") r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) 767.885019ms ago: executing program 7 (id=3179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x801}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 757.21709ms ago: executing program 7 (id=3180): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000001740)='\x00', 0x1, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 753.97129ms ago: executing program 2 (id=3181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 247.880657ms ago: executing program 3 (id=3188): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x24000000) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r1, 0x3, {0x2, 0xf0, 0x3}, 0xff}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c005}, 0x0) 234.161298ms ago: executing program 3 (id=3189): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 144.273727ms ago: executing program 3 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 143.964877ms ago: executing program 3 (id=3191): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) truncate(&(0x7f0000000900)='./file1\x00', 0x4000000000001121) 143.626017ms ago: executing program 3 (id=3200): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000e7ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2c, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) 112.51207ms ago: executing program 0 (id=3192): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) 111.81445ms ago: executing program 3 (id=3203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, r2, 0x0) 0s ago: executing program 0 (id=3193): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socketpair(0x17, 0x3, 0x4, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): rom eth0 [ 84.688746][ T6000] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 84.697868][ T6000] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 84.706722][ T6000] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 84.721879][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.728978][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.736278][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.743331][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.780725][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.797932][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.806284][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.820982][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.833361][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.840482][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.850947][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.858096][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.867031][ T6077] capability: warning: `syz.4.900' uses deprecated v2 capabilities in a way that may be insecure [ 84.931772][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.035475][ T6101] SELinux: ebitmap start bit (268435456) is beyond the end of the bitmap (1472) [ 85.044979][ T6101] SELinux: failed to load policy [ 85.050632][ T6000] veth0_vlan: entered promiscuous mode [ 85.058939][ T6000] veth1_vlan: entered promiscuous mode [ 85.076828][ T6000] veth0_macvtap: entered promiscuous mode [ 85.084430][ T6000] veth1_macvtap: entered promiscuous mode [ 85.090586][ T6105] serio: Serial port ptm0 [ 85.097961][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.109859][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.120840][ T381] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129907][ T381] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.140532][ T381] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150163][ T381] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.327269][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.909'. [ 85.336236][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.909'. [ 85.560376][ T6140] netlink: 96 bytes leftover after parsing attributes in process `syz.2.919'. [ 85.685930][ T6162] loop8: detected capacity change from 0 to 256 [ 85.712818][ T6162] FAT-fs (loop8): bogus number of FAT sectors [ 85.718987][ T6162] FAT-fs (loop8): Can't find a valid FAT filesystem [ 85.815288][ T6174] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 85.868415][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.880298][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.935'. [ 85.892904][ T6174] bond1: (slave batadv1): making interface the new active one [ 85.908047][ T6174] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 85.942210][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 85.943987][ T6184] loop3: detected capacity change from 0 to 512 [ 85.970631][ T6184] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.994047][ T6182] bond1 (unregistering): (slave batadv1): Releasing active interface [ 86.015144][ T6182] bond1 (unregistering): Released all slaves [ 86.043671][ T6184] EXT4-fs (loop3): 1 truncate cleaned up [ 86.056129][ T6184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.235506][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.265071][ T6212] netlink: 64 bytes leftover after parsing attributes in process `syz.7.949'. [ 86.443555][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.959'. [ 86.681697][ T6273] program syz.8.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.835400][ T6280] capability: warning: `syz.8.980' uses 32-bit capabilities (legacy support in use) [ 87.034447][ T6288] serio: Serial port ptm0 [ 87.045216][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 87.131851][ T6302] loop3: detected capacity change from 0 to 256 [ 87.316215][ T6311] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 87.404275][ T6313] Invalid argument reading file caps for ./file0 [ 87.557179][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 87.557193][ T29] audit: type=1326 audit(1767049138.625:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.640739][ T6329] xt_hashlimit: max too large, truncated to 1048576 [ 87.652137][ T6331] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 87.667396][ T6305] Set syz1 is full, maxelem 65536 reached [ 87.673965][ T29] audit: type=1326 audit(1767049138.665:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.697362][ T29] audit: type=1326 audit(1767049138.675:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.720724][ T29] audit: type=1326 audit(1767049138.685:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.744188][ T29] audit: type=1326 audit(1767049138.695:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.767543][ T29] audit: type=1326 audit(1767049138.705:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.790906][ T29] audit: type=1326 audit(1767049138.725:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.814283][ T29] audit: type=1326 audit(1767049138.735:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.840711][ T29] audit: type=1326 audit(1767049138.745:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.864196][ T29] audit: type=1326 audit(1767049138.765:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f725846f749 code=0x7ffc0000 [ 87.912438][ T6337] loop2: detected capacity change from 0 to 512 [ 87.919632][ T6337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.935064][ T6337] EXT4-fs (loop2): 1 truncate cleaned up [ 87.954772][ T6337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.026933][ T6352] program syz.3.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.081409][ T6358] bond0: Caught tx_queue_len zero misconfig [ 88.101500][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.240651][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.366983][ T6404] netlink: 'syz.4.1036': attribute type 13 has an invalid length. [ 88.653497][ T6415] loop4: detected capacity change from 0 to 256 [ 88.667039][ T6415] FAT-fs (loop4): bogus number of FAT sectors [ 88.673231][ T6415] FAT-fs (loop4): Can't find a valid FAT filesystem [ 88.985127][ T6441] lo: Caught tx_queue_len zero misconfig [ 89.100639][ T6445] syzkaller0: entered promiscuous mode [ 89.106334][ T6445] syzkaller0: entered allmulticast mode [ 89.185710][ T6451] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 89.202830][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.210138][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.246056][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.253182][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.260525][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.267614][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.297118][ T6451] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.317040][ T6457] __nla_validate_parse: 3 callbacks suppressed [ 89.317082][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1060'. [ 89.335119][ T6451] syz.4.1057 (6451) used greatest stack depth: 10176 bytes left [ 89.344680][ T825] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.354678][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1060'. [ 89.364286][ T825] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.382211][ T825] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.402837][ T825] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.467949][ T6459] loop7: detected capacity change from 0 to 8192 [ 89.513016][ T6459] loop7: p1 p2 p3 p4 [ 89.519780][ T6459] loop7: p3 start 331777 is beyond EOD, truncated [ 89.526377][ T6459] loop7: p4 size 262144 extends beyond EOD, truncated [ 89.584765][ T6476] rdma_op ffff8881254f4980 conn xmit_rdma 0000000000000000 [ 89.621814][ T6474] syzkaller0: entered promiscuous mode [ 89.627357][ T6474] syzkaller0: entered allmulticast mode [ 89.637654][ T6478] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1069'. [ 89.674848][ T6482] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 89.697731][ T6482] team0: Failed to send options change via netlink (err -105) [ 89.705375][ T6482] team0: Port device dummy0 added [ 89.714568][ T6484] loop7: detected capacity change from 0 to 512 [ 89.718475][ T6482] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 89.729347][ T6482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.739456][ T6484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.752428][ T6484] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.753164][ T6482] team0: Failed to send options change via netlink (err -105) [ 89.764148][ T6484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.787389][ T6482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.807200][ T6482] team0: Port device dummy0 removed [ 89.820268][ T6482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.856954][ T6490] loop8: detected capacity change from 0 to 512 [ 89.870896][ T6490] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.1075: Parent and EA inode have the same ino 15 [ 89.884430][ T6490] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.1075: Parent and EA inode have the same ino 15 [ 89.898677][ T6490] EXT4-fs (loop8): 1 orphan inode deleted [ 89.905145][ T6490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.933310][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.964610][ T6503] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.084553][ T6529] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.114850][ T6497] syz.7.1077 (6497) used greatest stack depth: 10128 bytes left [ 90.133403][ T6535] loop7: detected capacity change from 0 to 512 [ 90.144076][ T6535] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1091: Parent and EA inode have the same ino 15 [ 90.157017][ T6535] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1091: Parent and EA inode have the same ino 15 [ 90.169930][ T6535] EXT4-fs (loop7): 1 orphan inode deleted [ 90.176300][ T6535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.203343][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.223927][ T6543] netlink: 'syz.8.1096': attribute type 12 has an invalid length. [ 90.265919][ T6548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6548 comm=syz.7.1097 [ 90.294070][ T6548] netlink: 'syz.7.1097': attribute type 1 has an invalid length. [ 90.302821][ T3760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.303073][ T3579] Bluetooth: hci0: command 0x1003 tx timeout [ 90.354046][ T6548] bond1: (slave bridge1): making interface the new active one [ 90.374444][ T6548] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 90.441382][ T6562] loop7: detected capacity change from 0 to 8192 [ 90.449348][ T6562] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.475462][ T6565] vhci_hcd vhci_hcd.2: invalid port number 96 [ 90.481638][ T6565] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7 [ 90.585958][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6587 comm=syz.4.1115 [ 90.599518][ T6587] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 90.631376][ T6587] bond1: (slave bridge1): making interface the new active one [ 90.640034][ T6587] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 90.784230][ T6607] netlink: 'syz.4.1125': attribute type 2 has an invalid length. [ 90.884692][ T6621] loop8: detected capacity change from 0 to 512 [ 90.904217][ T6627] Falling back ldisc for ttyS3. [ 90.917803][ T6621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.947018][ T6621] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.996871][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.020609][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 91.033071][ T6646] IPVS: Error connecting to the multicast addr [ 91.054207][ T6643] syz.7.1141 (6643) used greatest stack depth: 9984 bytes left [ 91.074290][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1147'. [ 91.167148][ T6664] loop2: detected capacity change from 0 to 1024 [ 91.185614][ T6664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.210260][ T6664] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.227060][ T6664] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1150: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.275226][ T6664] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 91.287578][ T6664] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.287578][ T6664] [ 91.340389][ T6675] loop8: detected capacity change from 0 to 512 [ 91.360280][ T6675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.377534][ T6680] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.1150: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.401970][ T6684] ALSA: seq fatal error: cannot create timer (-22) [ 91.410556][ T6675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 91.429405][ T6664] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.1150: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.443890][ T6664] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.1150: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.458245][ T6664] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.1150: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.459172][ T6675] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.490932][ T6675] EXT4-fs error (device loop8): __ext4_remount:6789: comm syz.8.1154: Abort forced by user [ 91.491226][ T6680] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1150: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 91.520278][ T6680] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 91.531834][ T6675] EXT4-fs (loop8): Remounting filesystem read-only [ 91.538398][ T6675] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000d40000. [ 91.560245][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.591336][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.633061][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1159'. [ 91.651005][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1159'. [ 91.983690][ T6722] loop3: detected capacity change from 0 to 512 [ 92.020955][ T6722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.037450][ T6728] Falling back ldisc for ttyS3. [ 92.046115][ T6722] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.066341][ T6722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.144721][ T6734] lo: Caught tx_queue_len zero misconfig [ 92.150758][ T6736] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.522027][ T6785] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 92.522027][ T6785] program syz.3.1199 not setting count and/or reply_len properly [ 92.602829][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 92.602843][ T29] audit: type=1326 audit(1767049143.645:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.632671][ T29] audit: type=1326 audit(1767049143.645:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.656271][ T29] audit: type=1326 audit(1767049143.645:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.679789][ T29] audit: type=1326 audit(1767049143.645:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.703319][ T29] audit: type=1326 audit(1767049143.645:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.726833][ T29] audit: type=1326 audit(1767049143.645:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.750329][ T29] audit: type=1326 audit(1767049143.645:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.773856][ T29] audit: type=1326 audit(1767049143.645:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.797353][ T29] audit: type=1326 audit(1767049143.645:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.820786][ T29] audit: type=1326 audit(1767049143.645:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 92.917291][ T6807] pim6reg1: entered allmulticast mode [ 92.952802][ T6809] netlink: 'syz.7.1210': attribute type 13 has an invalid length. [ 92.961631][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 93.030299][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.037548][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.085537][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.095857][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.111230][ T6832] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 93.125045][ T6833] loop3: detected capacity change from 0 to 512 [ 93.133810][ T6833] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1221: error while reading EA inode 32 err=-116 [ 93.146555][ T6833] EXT4-fs (loop3): Remounting filesystem read-only [ 93.153456][ T6833] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 93.163890][ T6833] EXT4-fs (loop3): 1 orphan inode deleted [ 93.170121][ T6833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.196330][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.238190][ T6832] team0: Failed to send options change via netlink (err -105) [ 93.245771][ T6832] team0: Port device dummy0 added [ 93.287687][ T6836] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.331434][ T6836] team0: Failed to send options change via netlink (err -105) [ 93.339327][ T6836] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.348284][ T6836] team0: Port device dummy0 removed [ 93.362766][ T6836] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.371806][ T5761] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.388924][ T5761] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.400973][ T6862] netlink: 19 bytes leftover after parsing attributes in process `syz.8.1232'. [ 93.419370][ T5761] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.429198][ T5761] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.530064][ T6878] SELinux: Context Ü is not valid (left unmapped). [ 93.617065][ T6890] wg2: entered promiscuous mode [ 93.621975][ T6890] wg2: entered allmulticast mode [ 93.710746][ T6901] validate_nla: 1 callbacks suppressed [ 93.710765][ T6901] netlink: 'syz.8.1250': attribute type 10 has an invalid length. [ 93.736624][ T6901] team0: Failed to send options change via netlink (err -105) [ 93.744260][ T6901] team0: Port device dummy0 added [ 93.755526][ T6901] netlink: 'syz.8.1250': attribute type 10 has an invalid length. [ 93.768916][ T6901] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.769240][ T6906] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 93.788531][ T6901] team0: Failed to send options change via netlink (err -105) [ 93.801080][ T6901] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.814848][ T6901] team0: Port device dummy0 removed [ 93.821775][ T6909] rdma_op ffff88811fe8b180 conn xmit_rdma 0000000000000000 [ 93.826673][ T6901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.856600][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 93.982379][ T6930] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 94.168241][ T6954] loop8: detected capacity change from 0 to 512 [ 94.194931][ T6954] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1276: error while reading EA inode 32 err=-116 [ 94.226297][ T6954] EXT4-fs (loop8): Remounting filesystem read-only [ 94.239711][ T6954] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 94.250257][ T6954] EXT4-fs (loop8): 1 orphan inode deleted [ 94.256586][ T6954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.304293][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.499983][ T6992] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 94.520808][ T6992] __nla_validate_parse: 1 callbacks suppressed [ 94.520896][ T6992] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1291'. [ 94.541018][ T6992] hsr_slave_0: left promiscuous mode [ 94.548071][ T6992] hsr_slave_1: left promiscuous mode [ 94.709540][ T7006] loop8: detected capacity change from 0 to 1024 [ 94.720858][ T7006] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.731822][ T7006] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 94.742723][ T7006] EXT4-fs (loop8): invalid journal inode [ 94.749100][ T7006] EXT4-fs (loop8): can't get journal size [ 94.766188][ T7006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.832123][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.058385][ T7020] netlink: 'syz.7.1303': attribute type 10 has an invalid length. [ 95.067685][ T7020] team0: Failed to send options change via netlink (err -105) [ 95.075254][ T7020] team0: Port device dummy0 added [ 95.081844][ T7020] netlink: 'syz.7.1303': attribute type 10 has an invalid length. [ 95.092271][ T7020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.105413][ T7020] team0: Failed to send options change via netlink (err -105) [ 95.113206][ T7020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.122115][ T7020] team0: Port device dummy0 removed [ 95.129403][ T7020] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.141538][ T7024] loop8: detected capacity change from 0 to 764 [ 95.162546][ T7026] 0ªî{X¹¦: left allmulticast mode [ 95.184282][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 95.184341][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 95.202277][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 95.203445][ T7024] rock: directory entry would overflow storage [ 95.217557][ T7024] rock: sig=0x4f50, size=4, remaining=3 [ 95.223135][ T7024] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.282812][ T7026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.301908][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1313'. [ 95.310981][ T7042] syzkaller1: entered promiscuous mode [ 95.316635][ T7042] syzkaller1: entered allmulticast mode [ 95.327071][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1313'. [ 95.373922][ T7047] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 95.381724][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1317'. [ 95.466432][ T7057] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 95.480703][ T7057] team0: Failed to send options change via netlink (err -105) [ 95.488298][ T7057] team0: Port device dummy0 added [ 95.496348][ T7057] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 95.504967][ T7057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.515966][ T7057] team0: Failed to send options change via netlink (err -105) [ 95.523635][ T7057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.532575][ T7057] team0: Port device dummy0 removed [ 95.539942][ T7057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.997126][ T7110] netlink: 'syz.8.1344': attribute type 9 has an invalid length. [ 96.004989][ T7110] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.1344'. [ 96.074166][ T7119] loop8: detected capacity change from 0 to 128 [ 96.081039][ T7119] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.093135][ T7119] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.108229][ T5787] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.309430][ T7142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.410447][ T7148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7148 comm=syz.4.1362 [ 96.423024][ T7148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7148 comm=syz.4.1362 [ 96.741646][ T7188] loop7: detected capacity change from 0 to 1024 [ 96.753294][ T7188] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.765537][ T7188] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.793053][ T7188] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.1380: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 96.812282][ T7188] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1380: couldn't read orphan inode 11 (err -117) [ 96.883572][ T7188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.899277][ T7188] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1380: Invalid block bitmap block 0 in block_group 0 [ 96.919879][ T7188] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1380: Failed to acquire dquot type 0 [ 97.006542][ T7188] syz.7.1380 (7188) used greatest stack depth: 9720 bytes left [ 97.036181][ T401] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 97.068436][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.223331][ T7228] loop7: detected capacity change from 0 to 1024 [ 97.230335][ T7228] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.241361][ T7228] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.253857][ T7228] JBD2: no valid journal superblock found [ 97.259635][ T7228] EXT4-fs (loop7): Could not load journal inode [ 97.270631][ T7228] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 97.341679][ T7231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.390429][ T7244] netlink: 360 bytes leftover after parsing attributes in process `syz.7.1405'. [ 97.401635][ T7246] loop4: detected capacity change from 0 to 128 [ 97.471003][ T7259] bio_check_eod: 74 callbacks suppressed [ 97.471020][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.471020][ T7259] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 97.495841][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.495841][ T7259] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 97.509640][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.509640][ T7259] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 97.523824][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.523824][ T7259] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 97.537431][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.537431][ T7259] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 97.551505][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.551505][ T7259] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 97.565561][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.565561][ T7259] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 97.579246][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.579246][ T7259] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 97.593541][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.593541][ T7259] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 97.612494][ T7259] syz.4.1404: attempt to access beyond end of device [ 97.612494][ T7259] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 97.628302][ T7265] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1412'. [ 97.671103][ T7271] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 97.679400][ T7271] netlink: 'syz.3.1416': attribute type 4 has an invalid length. [ 97.736567][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 97.736580][ T29] audit: type=1326 audit(1767049148.805:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.768051][ T29] audit: type=1326 audit(1767049148.835:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.791506][ T29] audit: type=1326 audit(1767049148.835:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.815045][ T29] audit: type=1326 audit(1767049148.835:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.840225][ T29] audit: type=1326 audit(1767049148.835:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.863668][ T29] audit: type=1326 audit(1767049148.885:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.887074][ T29] audit: type=1326 audit(1767049148.905:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.910674][ T29] audit: type=1326 audit(1767049148.905:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.934056][ T29] audit: type=1326 audit(1767049148.905:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 97.957527][ T29] audit: type=1326 audit(1767049148.905:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 98.070964][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.078219][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.165647][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.178194][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.348824][ T5804] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.357797][ T5804] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.386211][ T5804] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.395313][ T5804] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.448609][ T5804] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.457722][ T5804] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.488871][ T5804] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.497942][ T5804] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.543522][ T7335] loop4: detected capacity change from 0 to 2048 [ 98.589060][ T7339] loop2: detected capacity change from 0 to 2048 [ 98.599945][ T7335] loop4: p2 p3 p7 [ 98.613491][ T7339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.620353][ T7339] EXT4-fs: Ignoring removed nobh option [ 98.655109][ T7339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.671606][ T7339] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1447: corrupted in-inode xattr: invalid ea_ino [ 98.685327][ T7339] EXT4-fs (loop2): Remounting filesystem read-only [ 98.718021][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.748147][ T7360] validate_nla: 1 callbacks suppressed [ 98.748160][ T7360] netlink: 'syz.3.1456': attribute type 13 has an invalid length. [ 98.880299][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.887706][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.948035][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.961079][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.042383][ T5761] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.063050][ T5761] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.077644][ T5761] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.087049][ T5761] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.245292][ T7421] IPv6: Can't replace route, no match found [ 99.282947][ T7425] bridge0: port 3(batadv2) entered blocking state [ 99.289528][ T7425] bridge0: port 3(batadv2) entered disabled state [ 99.306103][ T7425] batadv2: entered allmulticast mode [ 99.316256][ T7425] batadv2: entered promiscuous mode [ 99.542146][ T7448] ipip0: entered promiscuous mode [ 99.577207][ T7448] syz.8.1497 (7448) used greatest stack depth: 9480 bytes left [ 99.595303][ T7452] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 99.605319][ T7450] IPVS: stopping backup sync thread 7452 ... [ 99.782904][ T5790] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 99.792218][ T5790] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 100.120347][ T7495] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 100.411320][ T7528] vlan2: entered allmulticast mode [ 100.416632][ T7528] dummy0: entered allmulticast mode [ 100.489902][ T7533] __nla_validate_parse: 4 callbacks suppressed [ 100.489918][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 100.838345][ T7565] SELinux: failed to load policy [ 100.886801][ T7577] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 100.905169][ T7582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1557'. [ 100.959274][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.969508][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.138122][ T7614] netlink: 'syz.2.1573': attribute type 12 has an invalid length. [ 101.335834][ T7632] pim6reg: entered allmulticast mode [ 101.366591][ T7632] pim6reg: left allmulticast mode [ 101.980267][ T7675] loop8: detected capacity change from 0 to 128 [ 101.987248][ T7675] EXT4-fs: Ignoring removed nobh option [ 102.003479][ T7675] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.043201][ T7675] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.076049][ T6000] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.153966][ T7694] veth0: entered promiscuous mode [ 102.161807][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1609'. [ 102.299257][ T7704] loop8: detected capacity change from 0 to 128 [ 102.316798][ T7704] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.342900][ T7704] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.383485][ T6000] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.569450][ T7728] SELinux: failed to load policy [ 102.920201][ T7746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.146634][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 103.146649][ T29] audit: type=1400 audit(1767049154.215:3346): avc: denied { bind } for pid=7751 comm="syz.8.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.229407][ T7758] tipc: Started in network mode [ 103.234419][ T7758] tipc: Node identity 2d3675ed16c27fff002e, cluster identity 4711 [ 103.290802][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1640'. [ 103.321309][ T29] audit: type=1326 audit(1767049154.385:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.377126][ T29] audit: type=1326 audit(1767049154.415:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.400655][ T29] audit: type=1326 audit(1767049154.415:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.424191][ T29] audit: type=1326 audit(1767049154.415:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.447664][ T29] audit: type=1326 audit(1767049154.415:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.471081][ T29] audit: type=1326 audit(1767049154.415:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.494541][ T29] audit: type=1326 audit(1767049154.415:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.517838][ T29] audit: type=1326 audit(1767049154.415:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.541273][ T29] audit: type=1326 audit(1767049154.415:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 103.582810][ T7779] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 103.590601][ T7779] netlink: 'syz.2.1644': attribute type 4 has an invalid length. [ 103.598360][ T7779] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1644'. [ 103.723236][ T7791] loop8: detected capacity change from 0 to 128 [ 104.229225][ T7806] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.261969][ T7815] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1660'. [ 104.297743][ T7819] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1662'. [ 104.306947][ T7819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1662'. [ 104.343044][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 104.451682][ T7847] ref_ctr_offset mismatch. inode: 0x6c0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 104.490255][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1678'. [ 104.502283][ T7855] loop8: detected capacity change from 0 to 128 [ 104.512259][ T7855] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.533204][ T7855] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.721070][ T6000] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.854839][ T7883] loop8: detected capacity change from 0 to 512 [ 104.880418][ T7883] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1690: error while reading EA inode 32 err=-116 [ 104.893676][ T7883] EXT4-fs (loop8): Remounting filesystem read-only [ 104.904400][ T7883] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 104.925635][ T7883] EXT4-fs (loop8): 1 orphan inode deleted [ 104.939201][ T7883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.980199][ T6000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.049480][ T7894] netlink: 'syz.2.1694': attribute type 7 has an invalid length. [ 105.118244][ T7902] netlink: 'syz.7.1698': attribute type 12 has an invalid length. [ 105.171201][ T7910] rdma_op ffff88811e424d80 conn xmit_rdma 0000000000000000 [ 105.211454][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.220401][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.587892][ T7980] geneve2: entered promiscuous mode [ 105.593299][ T7980] geneve2: entered allmulticast mode [ 105.740809][ T7997] __nla_validate_parse: 9 callbacks suppressed [ 105.740825][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 105.756067][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 105.789827][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 105.798796][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 105.886934][ T8012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=8012 comm=syz.3.1748 [ 106.284832][ T8032] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1756'. [ 106.294437][ T8032] netlink: zone id is out of range [ 106.299633][ T8032] netlink: zone id is out of range [ 106.315204][ T8032] netlink: zone id is out of range [ 106.326986][ T8032] netlink: zone id is out of range [ 106.337191][ T8032] netlink: zone id is out of range [ 106.355650][ T8032] netlink: set zone limit has 8 unknown bytes [ 106.392444][ T8041] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.087963][ T8108] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.1792'. [ 107.162963][ T8108] netlink: zone id is out of range [ 107.168136][ T8108] netlink: zone id is out of range [ 107.236561][ T8111] netlink: 'syz.8.1793': attribute type 10 has an invalid length. [ 107.416552][ T8123] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1799'. [ 107.435378][ T8123] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1799'. [ 107.683936][ T8160] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1813'. [ 107.702952][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1817'. [ 107.721969][ T8169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.729607][ T8169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.800715][ T8169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.808201][ T8169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.240427][ T29] kauditd_printk_skb: 901 callbacks suppressed [ 108.240445][ T29] audit: type=1326 audit(108.215:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.290035][ T8228] netlink: 'syz.7.1844': attribute type 1 has an invalid length. [ 108.325673][ T8232] geneve2: entered promiscuous mode [ 108.330941][ T8232] geneve2: entered allmulticast mode [ 108.343751][ T29] audit: type=1326 audit(108.215:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.366674][ T29] audit: type=1326 audit(108.215:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.389557][ T29] audit: type=1326 audit(108.215:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.412348][ T29] audit: type=1326 audit(108.215:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.435181][ T29] audit: type=1326 audit(108.215:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.458267][ T29] audit: type=1326 audit(108.215:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.481125][ T29] audit: type=1326 audit(108.215:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.503996][ T29] audit: type=1326 audit(108.215:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.526785][ T29] audit: type=1326 audit(108.215:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 108.609305][ T8241] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.691883][ T8259] netlink: 'syz.8.1857': attribute type 1 has an invalid length. [ 108.713543][ T8259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.749136][ T8271] geneve2: entered promiscuous mode [ 108.754501][ T8271] geneve2: entered allmulticast mode [ 109.423987][ T8296] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.884346][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 109.892159][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 109.908460][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 109.926390][ T3396] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 110.013892][ T8372] tipc: New replicast peer: 255.255.255.255 [ 110.019964][ T8372] tipc: Enabled bearer , priority 10 [ 110.441324][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.448849][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.456527][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.464049][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.764397][ T8421] __nla_validate_parse: 8 callbacks suppressed [ 110.764413][ T8421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1929'. [ 111.034491][ T3396] tipc: Node number set to 1004145170 [ 111.192068][ T8457] netlink: 'syz.8.1943': attribute type 12 has an invalid length. [ 111.689607][ T8500] netlink: 'syz.4.1963': attribute type 13 has an invalid length. [ 111.738555][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.775322][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.805907][ T8500] net_ratelimit: 4 callbacks suppressed [ 111.805918][ T8500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.884909][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 112.026810][ T8517] pim6reg1: entered allmulticast mode [ 112.147461][ T8530] hub 6-0:1.0: USB hub found [ 112.152281][ T8530] hub 6-0:1.0: 8 ports detected [ 112.396144][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1983'. [ 112.521188][ T8549] bridge0: port 3(macvtap1) entered blocking state [ 112.527806][ T8549] bridge0: port 3(macvtap1) entered disabled state [ 112.534819][ T8549] macvtap1: entered allmulticast mode [ 112.540220][ T8549] bridge0: entered allmulticast mode [ 112.546284][ T8549] macvtap1: left allmulticast mode [ 112.551456][ T8549] bridge0: left allmulticast mode [ 112.916850][ T8574] vlan3: entered allmulticast mode [ 112.934037][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 112.943147][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 112.952104][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 112.964912][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 112.974010][ T8576] netlink: 'syz.2.1999': attribute type 6 has an invalid length. [ 113.576297][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 113.576312][ T29] audit: type=1326 audit(113.555:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.625756][ T29] audit: type=1326 audit(113.585:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.648667][ T29] audit: type=1326 audit(113.585:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.671710][ T29] audit: type=1326 audit(113.585:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.694538][ T29] audit: type=1326 audit(113.585:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.717455][ T29] audit: type=1326 audit(113.585:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 113.740238][ T29] audit: type=1326 audit(113.585:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc500ff783 code=0x7ffc0000 [ 113.762923][ T29] audit: type=1326 audit(113.585:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc500fe1ff code=0x7ffc0000 [ 113.785554][ T29] audit: type=1326 audit(113.585:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc500ff7d7 code=0x7ffc0000 [ 113.790842][ T8622] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2019'. [ 113.808256][ T29] audit: type=1326 audit(113.585:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc500fdf90 code=0x7ffc0000 [ 113.915512][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2026'. [ 113.925567][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2026'. [ 114.187424][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.197924][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.259203][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.269606][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.325720][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.336113][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.407593][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.418052][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.450127][ T8669] chnl_net:caif_netlink_parms(): no params data found [ 114.485183][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.492333][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.499515][ T8669] bridge_slave_0: entered allmulticast mode [ 114.505951][ T8669] bridge_slave_0: entered promiscuous mode [ 114.514968][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.522062][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.529195][ T8669] bridge_slave_1: entered allmulticast mode [ 114.536110][ T8669] bridge_slave_1: entered promiscuous mode [ 114.559806][ T8669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.570745][ T8669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.591686][ T37] bridge_slave_1: left allmulticast mode [ 114.597424][ T37] bridge_slave_1: left promiscuous mode [ 114.603209][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.611043][ T37] bridge_slave_0: left allmulticast mode [ 114.616693][ T37] bridge_slave_0: left promiscuous mode [ 114.622348][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.704879][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.714738][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.732546][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 114.751107][ T37] bond0 (unregistering): Released all slaves [ 114.770801][ T37] bond1 (unregistering): Released all slaves [ 114.786481][ T8669] team0: Port device team_slave_0 added [ 114.797884][ T8669] team0: Port device team_slave_1 added [ 114.826733][ T37] hsr_slave_0: left promiscuous mode [ 114.832634][ T37] hsr_slave_1: left promiscuous mode [ 114.845495][ T37] veth1_macvtap: left promiscuous mode [ 114.851001][ T37] veth0_macvtap: left promiscuous mode [ 114.863254][ T37] veth1_vlan: left promiscuous mode [ 114.865597][ T8700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=8700 comm=syz.2.2049 [ 114.868921][ T37] veth0_vlan: left promiscuous mode [ 115.002340][ T37] team0 (unregistering): Port device team_slave_1 removed [ 115.014621][ T37] team0 (unregistering): Port device team_slave_0 removed [ 115.054760][ T8700] netlink: 'syz.2.2049': attribute type 5 has an invalid length. [ 115.063097][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.070069][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.096078][ T8669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.108944][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.115918][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.141944][ T8669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.189948][ T8669] hsr_slave_0: entered promiscuous mode [ 115.203056][ T8669] hsr_slave_1: entered promiscuous mode [ 115.208991][ T8669] debugfs: 'hsr0' already exists in 'hsr' [ 115.214802][ T8669] Cannot create hsr debugfs directory [ 115.378992][ T8669] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 115.398790][ T8669] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 115.410642][ T8669] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 115.419885][ T8669] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 115.466644][ T8669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.478083][ T8669] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.524734][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.531922][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.564409][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.571590][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.733965][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.958475][ T8778] bridge0: port 4(batadv0) entered blocking state [ 115.965684][ T8778] bridge0: port 4(batadv0) entered disabled state [ 115.972803][ T8778] batadv0: entered allmulticast mode [ 115.978745][ T8778] batadv0: entered promiscuous mode [ 116.018570][ T8669] veth0_vlan: entered promiscuous mode [ 116.037131][ T8669] veth1_vlan: entered promiscuous mode [ 116.073581][ T8669] veth0_macvtap: entered promiscuous mode [ 116.093805][ T8669] veth1_macvtap: entered promiscuous mode [ 116.133213][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.144354][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.174248][ T5771] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.183313][ T5771] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.199705][ T5771] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.228969][ T5771] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.371401][ T8815] __nla_validate_parse: 1 callbacks suppressed [ 116.371417][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2088'. [ 116.443550][ T8823] netlink: 'syz.7.2091': attribute type 6 has an invalid length. [ 116.472797][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 116.482154][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 116.527117][ T8822] loop9: detected capacity change from 0 to 8192 [ 116.543033][ T8822] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 116.549605][ T8822] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.557929][ T8822] vhci_hcd vhci_hcd.0: Device attached [ 116.594079][ T8822] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 116.603041][ T8822] FAT-fs (loop9): Filesystem has been set read-only [ 116.636293][ T8822] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 1046) [ 116.663377][ T8826] vhci_hcd: connection closed [ 116.663738][ T5797] vhci_hcd vhci_hcd.9: stop threads [ 116.673820][ T5797] vhci_hcd vhci_hcd.9: release socket [ 116.679286][ T5797] vhci_hcd vhci_hcd.9: disconnect device [ 116.936574][ T8847] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2101'. [ 116.974119][ T8847] bond0: (slave dummy0): Releasing backup interface [ 117.152750][ T8858] netlink: 'syz.7.2104': attribute type 1 has an invalid length. [ 117.234562][ T8860] netlink: 'syz.9.2106': attribute type 4 has an invalid length. [ 118.301471][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 118.315930][ T8924] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 119.501221][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 119.501257][ T29] audit: type=1400 audit(119.475:4554): avc: denied { create } for pid=9023 comm="syz.9.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.592194][ T9028] team0: Device gtp0 is of different type [ 119.704007][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2182'. [ 119.805466][ T3423] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 119.813197][ T3423] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 119.869839][ T3423] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 119.903017][ T3423] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.288598][ T29] audit: type=1326 audit(120.265:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.326568][ T29] audit: type=1326 audit(120.265:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.349473][ T29] audit: type=1326 audit(120.305:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.372321][ T29] audit: type=1326 audit(120.305:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.395154][ T29] audit: type=1326 audit(120.305:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.428695][ T29] audit: type=1326 audit(120.305:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.451576][ T29] audit: type=1326 audit(120.355:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.498284][ T29] audit: type=1326 audit(120.475:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 120.521377][ T29] audit: type=1326 audit(120.505:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.2.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7085b5f749 code=0x7ffc0000 [ 121.047050][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2225'. [ 121.056054][ T9143] netem: unknown loss type 0 [ 121.060675][ T9143] netem: change failed [ 122.137285][ T9161] team0: Device gtp0 is of different type [ 122.701999][ T9173] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 123.156230][ T9210] loop9: detected capacity change from 0 to 512 [ 123.183884][ T9210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.233080][ T9210] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.2255: corrupted inode contents [ 123.264190][ T9210] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.2255: mark_inode_dirty error [ 123.275935][ T9210] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.2255: corrupted inode contents [ 123.294928][ T9210] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.2255: mark_inode_dirty error [ 123.379277][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.318455][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 124.327606][ T9241] netem: change failed [ 124.348069][ T9243] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 124.487621][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2278'. [ 124.496766][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2278'. [ 124.505782][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2278'. [ 124.517153][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2278'. [ 124.526180][ T9266] netlink: 'syz.7.2278': attribute type 6 has an invalid length. [ 124.584856][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 124.584924][ T29] audit: type=1326 audit(124.565:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2abc2265e7 code=0x7ffc0000 [ 124.658777][ T29] audit: type=1326 audit(124.605:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2abc1cb829 code=0x7ffc0000 [ 124.682372][ T29] audit: type=1326 audit(124.605:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2abc2265e7 code=0x7ffc0000 [ 124.705909][ T29] audit: type=1326 audit(124.605:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2abc1cb829 code=0x7ffc0000 [ 124.728625][ T29] audit: type=1326 audit(124.605:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 124.752243][ T29] audit: type=1326 audit(124.605:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 124.775902][ T29] audit: type=1326 audit(124.605:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 124.798642][ T29] audit: type=1326 audit(124.605:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 124.822204][ T29] audit: type=1326 audit(124.605:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 124.845774][ T29] audit: type=1326 audit(124.605:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.4.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2abc22f749 code=0x7ffc0000 [ 125.012885][ T9282] tipc: Enabling of bearer rejected, failed to enable media [ 125.450804][ T9300] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9300 comm=syz.9.2292 [ 125.463417][ T9300] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9300 comm=syz.9.2292 [ 125.518228][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 125.527320][ T9307] batadv0: left allmulticast mode [ 125.532368][ T9307] batadv0: left promiscuous mode [ 125.537508][ T9307] bridge0: port 4(batadv0) entered disabled state [ 125.559224][ T9307] batadv2: left allmulticast mode [ 125.564356][ T9307] batadv2: left promiscuous mode [ 125.569388][ T9307] bridge0: port 3(batadv2) entered disabled state [ 125.582527][ T9307] bridge_slave_1: left allmulticast mode [ 125.588281][ T9307] bridge_slave_1: left promiscuous mode [ 125.594007][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.605473][ T9307] bridge_slave_0: left promiscuous mode [ 125.611114][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.816765][ T9326] netlink: 'syz.9.2304': attribute type 2 has an invalid length. [ 125.824602][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2304'. [ 125.844393][ T9326] netlink: 'syz.9.2304': attribute type 2 has an invalid length. [ 125.852194][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2304'. [ 126.277485][ T9369] syz_tun: refused to change device tx_queue_len [ 126.395129][ T9381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.487210][ T9381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.551277][ T9381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.562502][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2336'. [ 126.601637][ T9381] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.651055][ T5805] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.661758][ T5805] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.673419][ T5805] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.684399][ T5805] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.763890][ T5805] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.778570][ T5805] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.804825][ T5805] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.825916][ T5805] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.031596][ T9451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.106022][ T9451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.146297][ T9451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.205833][ T9451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.260562][ T8978] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.272145][ T8978] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.284531][ T8978] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.295587][ T8978] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.662824][ T9482] macvtap0: refused to change device tx_queue_len [ 127.703294][ T9486] __nla_validate_parse: 5 callbacks suppressed [ 127.703320][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 127.718402][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 127.775125][ T9492] loop9: detected capacity change from 0 to 512 [ 127.789425][ T9492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.815827][ T9492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.984045][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.083894][ T9505] loop9: detected capacity change from 0 to 512 [ 128.113446][ T9505] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 128.135355][ T9505] EXT4-fs (loop9): 1 truncate cleaned up [ 128.142946][ T9505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.195600][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.803910][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 128.830280][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 128.921157][ T9550] loop9: detected capacity change from 0 to 8192 [ 128.976870][ T8669] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 128.985446][ T8669] FAT-fs (loop9): Filesystem has been set read-only [ 129.253867][ T9574] openvswitch: netlink: Missing key (keys=40, expected=80) [ 129.299512][ T9576] SELinux: failed to load policy [ 129.397083][ T9582] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2412'. [ 129.471006][ T9590] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 129.516988][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2418'. [ 129.536208][ T9594] bridge_slave_1: left allmulticast mode [ 129.541915][ T9594] bridge_slave_1: left promiscuous mode [ 129.547646][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.570299][ T9594] bridge_slave_0: left allmulticast mode [ 129.576096][ T9594] bridge_slave_0: left promiscuous mode [ 129.581754][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.631229][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 129.631244][ T29] audit: type=1326 audit(129.605:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.661106][ T29] audit: type=1326 audit(129.635:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.684217][ T29] audit: type=1326 audit(129.635:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.707122][ T29] audit: type=1326 audit(129.635:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.730941][ T29] audit: type=1326 audit(129.635:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.753840][ T29] audit: type=1326 audit(129.705:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.776750][ T29] audit: type=1326 audit(129.715:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.799718][ T29] audit: type=1326 audit(129.745:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.822502][ T29] audit: type=1326 audit(129.745:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.845305][ T29] audit: type=1326 audit(129.745:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 129.994544][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2423'. [ 130.188810][ T9630] loop9: detected capacity change from 0 to 1024 [ 130.203005][ T9630] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.215666][ T9630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.269776][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.327616][ T9642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2438'. [ 130.484336][ T9661] pim6reg: entered allmulticast mode [ 130.492167][ T9661] pim6reg: left allmulticast mode [ 130.545957][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 130.677620][ T9683] netlink: 'syz.4.2455': attribute type 298 has an invalid length. [ 130.791051][ T9701] team0: Device gtp0 is of different type [ 130.857744][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2470'. [ 130.866908][ T9712] netlink: 'syz.4.2470': attribute type 6 has an invalid length. [ 131.213118][ T9750] bond0: (slave dummy0): Releasing backup interface [ 131.244858][ T9750] bond0: (slave bond_slave_0): Releasing backup interface [ 131.261339][ T9750] bond0: (slave bond_slave_1): Releasing backup interface [ 131.275993][ T9750] team0: Port device team_slave_0 removed [ 131.297804][ T9750] team0: Port device team_slave_1 removed [ 131.307832][ T9750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.324525][ T9754] tipc: Started in network mode [ 131.329444][ T9754] tipc: Node identity ac14140f, cluster identity 4711 [ 131.336929][ T9754] tipc: New replicast peer: 255.255.255.255 [ 131.343243][ T9754] tipc: Enabled bearer , priority 10 [ 131.349705][ T9761] tipc: Disabling bearer [ 131.395320][ T9766] loop9: detected capacity change from 0 to 512 [ 131.418419][ T9766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.439255][ T9766] SELinux: Context @ is not valid (left unmapped). [ 131.471140][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.361660][ T9822] vlan3: entered allmulticast mode [ 132.628171][ T9845] loop9: detected capacity change from 0 to 512 [ 132.644379][ T9845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.653169][ T9845] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.671068][ T9851] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.671633][ T9845] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2524: Allocating blocks 41-42 which overlap fs metadata [ 132.680879][ T9851] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.706102][ T9845] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2524: Allocating blocks 41-42 which overlap fs metadata [ 132.720159][ T9845] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2524: Failed to acquire dquot type 1 [ 132.731923][ T9845] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 132.747120][ T9845] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2524: corrupted inode contents [ 132.759229][ T9845] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.2524: mark_inode_dirty error [ 132.770792][ T9845] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2524: corrupted inode contents [ 132.773513][ T9851] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.785186][ T9845] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.2524: mark_inode_dirty error [ 132.792569][ T9851] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.815580][ T9845] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2524: corrupted inode contents [ 132.827829][ T9845] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 132.836618][ T9845] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.2524: corrupted inode contents [ 132.848770][ T9845] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.2524: mark_inode_dirty error [ 132.860208][ T9845] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 132.861625][ T9851] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.871219][ T9845] EXT4-fs (loop9): 1 truncate cleaned up [ 132.880476][ T9851] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.886302][ T9845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.921397][ T8669] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.944384][ T9851] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.954211][ T9851] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.081840][ T5798] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.090284][ T5798] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.115974][ T5798] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.124238][ T5798] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.158636][ T5798] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.167010][ T5798] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.180794][ T9857] __nla_validate_parse: 9 callbacks suppressed [ 133.180807][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2528'. [ 133.196039][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2528'. [ 133.239290][ T5798] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.247591][ T5798] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.255934][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2528'. [ 133.264949][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2528'. [ 133.293489][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2529'. [ 133.732342][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2542'. [ 133.745630][ T9888] bond_slave_0: entered promiscuous mode [ 133.751402][ T9888] bond_slave_1: entered promiscuous mode [ 133.758074][ T9888] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 133.766981][ T9888] bond_slave_0: left promiscuous mode [ 133.772434][ T9888] bond_slave_1: left promiscuous mode [ 133.832656][ T9892] tipc: New replicast peer: 255.255.255.255 [ 133.839481][ T9892] tipc: Enabled bearer , priority 10 [ 133.848228][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'. [ 133.857362][ T9892] tipc: Disabling bearer [ 134.036550][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 134.208867][ T9890] Set syz1 is full, maxelem 65536 reached [ 134.356157][ T9917] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2556'. [ 134.500020][ T9934] loop9: detected capacity change from 0 to 512 [ 134.549223][ T9934] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.2563: invalid block [ 134.563715][ T9941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.579227][ T9934] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2563: invalid indirect mapped block 4294967295 (level 1) [ 134.601890][ T9934] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2563: invalid indirect mapped block 4294967295 (level 1) [ 134.636469][ T9934] EXT4-fs (loop9): 2 truncates cleaned up [ 134.646378][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 134.646417][ T29] audit: type=1326 audit(134.625:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.7.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 134.686209][ T9934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.732908][ T9934] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.748819][ T29] audit: type=1326 audit(134.655:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.7.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 134.797710][ T29] audit: type=1326 audit(134.775:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 134.828216][ T9946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.847667][ T29] audit: type=1326 audit(134.805:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 134.871319][ T29] audit: type=1326 audit(134.805:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 134.894156][ T29] audit: type=1326 audit(134.805:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 134.917718][ T29] audit: type=1400 audit(134.805:4831): avc: denied { mount } for pid=9948 comm="syz.9.2568" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 134.939727][ T29] audit: type=1326 audit(134.805:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 134.999123][ T29] audit: type=1326 audit(134.825:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 135.022028][ T29] audit: type=1326 audit(134.825:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.9.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe8dfe1f749 code=0x7ffc0000 [ 135.292514][ T9968] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 135.368823][ T9981] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2582'. [ 135.384970][ T9981] netlink: zone id is out of range [ 135.390130][ T9981] netlink: zone id is out of range [ 135.395647][ T9981] netlink: zone id is out of range [ 135.400951][ T9981] netlink: zone id is out of range [ 135.424238][ T9981] netlink: set zone limit has 8 unknown bytes [ 135.620753][T10009] tipc: Invalid UDP bearer configuration [ 135.620767][T10009] tipc: Enabling of bearer rejected, failed to enable media [ 135.704597][T10019] netlink: 'syz.7.2600': attribute type 1 has an invalid length. [ 135.734921][T10019] bond2: (slave geneve2): making interface the new active one [ 135.795019][T10019] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 135.803840][ T5777] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.812127][ T5777] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.843756][ T5777] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.882527][ T5777] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.979788][T10044] loop9: detected capacity change from 0 to 1024 [ 135.997024][T10044] EXT4-fs: inline encryption not supported [ 136.003001][T10044] EXT4-fs: Ignoring removed orlov option [ 136.008826][T10046] IPVS: Unknown mcast interface: ipvlan1 [ 136.019462][T10044] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 136.049525][T10044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 136.090463][T10044] System zones: 0-1, 3-12 [ 136.098163][T10053] rdma_op ffff88811b430980 conn xmit_rdma 0000000000000000 [ 136.111090][T10044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.233141][T10044] loop9: detected capacity change from 1024 to 0 [ 136.240029][T10067] EXT4-fs error (device loop9): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.9.2611: unable to read itable block [ 136.242200][T10066] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.276096][T10066] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 136.286500][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.286521][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.286704][T10067] EXT4-fs error (device loop9): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.9.2611: unable to read itable block [ 136.286752][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.286768][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.286779][T10067] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: IO failure [ 136.286853][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.286868][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.286885][T10067] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #18: comm syz.9.2611: mark_inode_dirty error [ 136.286913][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.286927][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.287021][T10067] EXT4-fs error (device loop9): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.9.2611: unable to read itable block [ 136.287048][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.287063][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.287132][T10067] EXT4-fs error (device loop9): ext4_get_max_inline_size:121: inode #18: comm syz.9.2611: can't get inode location 18 [ 136.287161][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.287176][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.287595][T10067] EXT4-fs error (device loop9): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.9.2611: unable to read itable block [ 136.448036][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.472037][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.478851][T10067] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: IO failure [ 136.488129][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.496580][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.503385][T10067] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #18: comm syz.9.2611: mark_inode_dirty error [ 136.514851][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.523141][T10067] EXT4-fs (loop9): I/O error while writing superblock [ 136.530130][T10067] EXT4-fs error (device loop9): ext4_wait_block_bitmap:584: comm syz.9.2611: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 136.607655][T10067] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 136.864924][T10098] 9p: Bad value for 'rfdno' [ 137.055339][ T5752] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.114283][ T5752] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.180544][ T5752] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.260388][ T5752] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.394876][T10104] chnl_net:caif_netlink_parms(): no params data found [ 137.428917][ T5752] bridge_slave_1: left allmulticast mode [ 137.434683][ T5752] bridge_slave_1: left promiscuous mode [ 137.440338][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.493405][ T5752] bridge_slave_0: left allmulticast mode [ 137.499147][ T5752] bridge_slave_0: left promiscuous mode [ 137.504927][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.652905][ T5752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.670198][ T5752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.688559][ T5752] bond0 (unregistering): Released all slaves [ 137.759170][ T5752] hsr_slave_0: left promiscuous mode [ 137.774967][ T5752] hsr_slave_1: left promiscuous mode [ 137.780645][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.788078][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.810440][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.818635][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.829536][ T5752] veth1_macvtap: left promiscuous mode [ 137.835144][ T5752] veth0_macvtap: left promiscuous mode [ 137.840746][ T5752] veth1_vlan: left promiscuous mode [ 137.846902][ T5752] veth0_vlan: left promiscuous mode [ 137.922190][ T5752] team0 (unregistering): Port device team_slave_1 removed [ 137.932541][ T5752] team0 (unregistering): Port device team_slave_0 removed [ 137.980100][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.987264][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.994784][T10104] bridge_slave_0: entered allmulticast mode [ 138.001583][T10104] bridge_slave_0: entered promiscuous mode [ 138.009591][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.016701][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.023965][T10104] bridge_slave_1: entered allmulticast mode [ 138.030419][T10104] bridge_slave_1: entered promiscuous mode [ 138.054132][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.064767][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.089177][T10104] team0: Port device team_slave_0 added [ 138.095773][T10104] team0: Port device team_slave_1 added [ 138.121504][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.128510][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.154522][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.178591][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.185647][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.211577][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.247972][T10104] hsr_slave_0: entered promiscuous mode [ 138.254268][T10104] hsr_slave_1: entered promiscuous mode [ 138.260068][T10104] debugfs: 'hsr0' already exists in 'hsr' [ 138.266676][T10104] Cannot create hsr debugfs directory [ 138.635132][T10104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.659056][T10104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.684512][T10104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.705330][T10104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.775849][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.801748][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.816070][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.823214][ T5753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.846115][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.853205][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.901281][T10104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.911722][T10104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.040478][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.197322][T10104] veth0_vlan: entered promiscuous mode [ 139.222073][T10104] veth1_vlan: entered promiscuous mode [ 139.256816][T10104] veth0_macvtap: entered promiscuous mode [ 139.271913][T10104] veth1_macvtap: entered promiscuous mode [ 139.282386][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.294085][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.318569][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.338538][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.361261][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.379824][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.410345][T10290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.422226][T10292] vlan3: entered allmulticast mode [ 139.447376][T10297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10297 comm=syz.0.2707 [ 139.519146][T10310] __nla_validate_parse: 6 callbacks suppressed [ 139.519163][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2714'. [ 139.565377][T10312] wg2: entered promiscuous mode [ 139.570287][T10312] wg2: entered allmulticast mode [ 139.653773][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2722'. [ 139.662878][T10330] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2722'. [ 139.673399][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2722'. [ 139.682454][T10330] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2722'. [ 139.691582][T10330] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2722'. [ 139.781957][T10346] gtp0: entered promiscuous mode [ 140.047104][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 140.047147][ T29] audit: type=1326 audit(140.025:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.078500][ T29] audit: type=1326 audit(140.025:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.101491][ T29] audit: type=1326 audit(140.025:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.124520][ T29] audit: type=1326 audit(140.025:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.147470][ T29] audit: type=1326 audit(140.025:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.170359][ T29] audit: type=1326 audit(140.025:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.193311][ T29] audit: type=1326 audit(140.025:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.216213][ T29] audit: type=1326 audit(140.025:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.239279][ T29] audit: type=1326 audit(140.025:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.262213][ T29] audit: type=1326 audit(140.025:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x7ffc0000 [ 140.481828][T10403] all: renamed from lo [ 140.511345][T10406] Invalid argument reading file caps for ./file0 [ 140.730028][T10429] team0: Device gtp0 is of different type [ 140.790170][T10437] loop0: detected capacity change from 0 to 512 [ 140.797318][T10437] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.814912][T10437] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.2771: inode has both inline data and extents flags [ 140.828543][T10437] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2771: couldn't read orphan inode 17 (err -117) [ 140.841543][T10437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.871598][T10104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.114761][T10474] syzkaller1: entered promiscuous mode [ 141.120286][T10474] syzkaller1: entered allmulticast mode [ 141.190979][T10476] veth0_to_team: entered promiscuous mode [ 141.753914][T10519] 9p: Bad value for 'wfdno' [ 141.923137][T10529] netlink: 'syz.7.2811': attribute type 1 has an invalid length. [ 141.930906][T10529] netlink: 'syz.7.2811': attribute type 2 has an invalid length. [ 141.939465][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2811'. [ 142.071677][T10552] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 142.079490][T10552] netlink: 'syz.2.2822': attribute type 4 has an invalid length. [ 142.087827][T10552] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2822'. [ 142.232541][T10561] netlink: 'syz.7.2825': attribute type 1 has an invalid length. [ 142.240955][T10561] netlink: 'syz.7.2825': attribute type 4 has an invalid length. [ 142.248708][T10561] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2825'. [ 142.565414][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'. [ 143.041002][T10625] loop0: detected capacity change from 0 to 128 [ 143.047919][T10625] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.060037][T10625] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.081676][ T5784] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.327940][T10636] netlink: 'syz.0.2859': attribute type 1 has an invalid length. [ 143.335759][T10636] netlink: 'syz.0.2859': attribute type 2 has an invalid length. [ 143.376870][T10642] block device autoloading is deprecated and will be removed. [ 143.465997][T10650] netlink: 'syz.0.2864': attribute type 30 has an invalid length. [ 143.526707][T10654] process '/newroot/599/file0' started with executable stack [ 143.633359][T10666] all: renamed from lo (while UP) [ 143.926572][T10681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10681 comm=syz.4.2877 [ 144.390294][T10714] netlink: 'syz.4.2892': attribute type 29 has an invalid length. [ 144.548571][T10732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10732 comm=syz.2.2891 [ 144.994620][T10745] team0: Device gtp0 is of different type [ 145.314697][T10755] __nla_validate_parse: 6 callbacks suppressed [ 145.314758][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 145.338678][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 145.348765][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 145.357865][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 145.440658][T10769] bridge_slave_0: left allmulticast mode [ 145.446417][T10769] bridge_slave_0: left promiscuous mode [ 145.452117][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.465195][T10769] bridge_slave_1: left allmulticast mode [ 145.470873][T10769] bridge_slave_1: left promiscuous mode [ 145.476562][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.486734][T10769] bond0: (slave bond_slave_0): Releasing backup interface [ 145.497375][T10769] bond0: (slave bond_slave_1): Releasing backup interface [ 145.525223][T10769] team0: Port device team_slave_0 removed [ 145.535040][T10769] team0: Port device team_slave_1 removed [ 145.541926][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.549476][T10769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.558598][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.566089][T10769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.578665][T10769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.688528][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 145.688544][ T29] audit: type=1326 audit(145.665:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.3.2912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ff774f749 code=0x0 [ 145.695376][T10788] IPv6: Can't replace route, no match found [ 145.975953][ T3708] IPVS: starting estimator thread 0... [ 146.024235][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 146.033173][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 146.050730][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 146.062826][T10825] IPVS: using max 2064 ests per chain, 103200 per kthread [ 146.125289][T10850] bond0: (slave dummy0): Releasing backup interface [ 146.132649][T10850] bridge_slave_0: left promiscuous mode [ 146.139397][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.148200][T10850] bridge_slave_1: left allmulticast mode [ 146.153885][T10850] bridge_slave_1: left promiscuous mode [ 146.159544][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.176639][T10850] bond0: (slave bond_slave_0): Releasing backup interface [ 146.192158][T10850] bond0: (slave bond_slave_1): Releasing backup interface [ 146.204174][T10850] team0: Port device team_slave_0 removed [ 146.210704][T10850] team0: Port device team_slave_1 removed [ 146.219042][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.233843][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.241431][T10850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.306523][T11001] ipvlan0: entered promiscuous mode [ 147.312009][T11001] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 147.509466][T11021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.596516][T11021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.666370][T11021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.737507][T11021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.812515][ T5766] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.833709][T11038] rdma_op ffff8881272f6180 conn xmit_rdma 0000000000000000 [ 147.861292][ T5766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.869862][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 147.889301][ T5766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.899562][ T5766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.916529][T11056] 9p: Bad value for 'rfdno' [ 147.978568][T11065] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2980'. [ 148.019297][T11065] hsr_slave_0: left promiscuous mode [ 148.033972][T11065] hsr_slave_1: left promiscuous mode [ 148.216792][T11081] rdma_op ffff8881272f6180 conn xmit_rdma 0000000000000000 [ 148.258568][T11095] bond0: (slave bond_slave_1): Releasing backup interface [ 148.267043][T11095] team0: Port device team_slave_0 removed [ 148.274715][T11095] team0: Port device team_slave_1 removed [ 148.280833][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.288584][T11095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.296274][T11095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.356663][ T29] audit: type=1326 audit(148.335:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 148.380482][ T29] audit: type=1326 audit(148.335:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 148.404167][ T29] audit: type=1326 audit(148.335:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 148.427130][ T29] audit: type=1326 audit(148.335:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc500ff783 code=0x7ffc0000 [ 148.450610][ T29] audit: type=1326 audit(148.335:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc500fe1ff code=0x7ffc0000 [ 148.473388][ T29] audit: type=1326 audit(148.335:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc500ff7d7 code=0x7ffc0000 [ 148.496821][ T29] audit: type=1326 audit(148.365:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc500fdf90 code=0x7ffc0000 [ 148.519786][ T29] audit: type=1326 audit(148.365:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc500fe3aa code=0x7ffc0000 [ 148.543404][ T29] audit: type=1326 audit(148.365:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11106 comm="syz.7.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 148.581641][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 148.597814][T11111] macvtap1: entered promiscuous mode [ 148.603935][T11111] erspan0: entered promiscuous mode [ 148.609301][T11111] macvtap1: entered allmulticast mode [ 148.614776][T11111] erspan0: entered allmulticast mode [ 148.621504][T11111] macvtap1: left promiscuous mode [ 148.626660][T11111] erspan0: left promiscuous mode [ 148.631706][T11111] macvtap1: left allmulticast mode [ 148.637523][T11111] erspan0: left allmulticast mode [ 149.000110][T11140] rdma_op ffff88811a43b180 conn xmit_rdma 0000000000000000 [ 149.584952][T11217] loop0: detected capacity change from 0 to 4096 [ 149.593697][T11217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.608670][T11217] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.637216][T10104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.818544][T11240] loop0: detected capacity change from 0 to 1024 [ 149.855776][T11240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.899892][T10104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.408041][T11299] loop0: detected capacity change from 0 to 8192 [ 150.537258][T11318] loop0: detected capacity change from 0 to 512 [ 150.559895][T11318] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.654879][T11331] wg2: entered promiscuous mode [ 150.659796][T11331] wg2: entered allmulticast mode [ 150.767107][T11351] __nla_validate_parse: 4 callbacks suppressed [ 150.767147][T11351] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3104'. [ 150.804906][ T5758] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.161580][T11396] netlink: 'syz.2.3125': attribute type 7 has an invalid length. [ 151.189195][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 151.198134][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3128'. [ 151.221663][ T5758] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.231490][ T5758] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.240000][ T5758] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.249187][ T5758] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.394192][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 151.394207][ T29] audit: type=1326 audit(151.375:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.433527][ T29] audit: type=1326 audit(151.375:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.456955][ T29] audit: type=1326 audit(151.415:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.479936][ T29] audit: type=1326 audit(151.415:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.502890][ T29] audit: type=1326 audit(151.415:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.528142][ T29] audit: type=1326 audit(151.435:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.551115][ T29] audit: type=1326 audit(151.435:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.573999][ T29] audit: type=1326 audit(151.435:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.613045][ T29] audit: type=1326 audit(151.505:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.635999][ T29] audit: type=1326 audit(151.505:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.7.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc500ff749 code=0x7ffc0000 [ 151.640270][ T24] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 151.997922][ T1038] kernel write not supported for file bpf-prog (pid: 1038 comm: kworker/1:2) [ 152.100181][T11501] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 152.317391][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3180'. [ 152.774128][T11537] vlan0: entered allmulticast mode [ 152.863063][ T3579] Bluetooth: hci0: command 0x1003 tx timeout [ 152.864279][ T3760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.901592][T11547] loop0: detected capacity change from 0 to 2048 [ 152.924946][T11547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.966329][T11547] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3192: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.983514][T11547] EXT4-fs (loop0): Remounting filesystem read-only [ 152.999107][T10104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.018739][T11551] loop0: detected capacity change from 0 to 512 [ 153.025657][T11551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.036875][T11551] EXT4-fs (loop0): 1 truncate cleaned up [ 153.043254][T11551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.410636][T11554] ================================================================== [ 153.418755][T11554] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 153.425919][T11554] [ 153.428257][T11554] write to 0xffff88811b021cfc of 4 bytes by task 11551 on cpu 1: [ 153.435997][T11554] xas_set_mark+0x12b/0x140 [ 153.440537][T11554] __folio_start_writeback+0x155/0x340 [ 153.446028][T11554] ext4_bio_write_folio+0x5ad/0x9f0 [ 153.451255][T11554] mpage_process_page_bufs+0x4a1/0x620 [ 153.456742][T11554] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 153.462586][T11554] ext4_do_writepages+0x9f6/0x27e0 [ 153.467743][T11554] ext4_writepages+0x179/0x300 [ 153.472540][T11554] do_writepages+0x1c6/0x310 [ 153.477178][T11554] file_write_and_wait_range+0x156/0x2c0 [ 153.482844][T11554] generic_buffers_fsync_noflush+0x45/0x130 [ 153.488759][T11554] ext4_sync_file+0x1ab/0x690 [ 153.493455][T11554] vfs_fsync_range+0x10d/0x130 [ 153.498250][T11554] ext4_buffered_write_iter+0x34f/0x3c0 [ 153.503834][T11554] ext4_file_write_iter+0x387/0xf60 [ 153.509064][T11554] iter_file_splice_write+0x66b/0xa20 [ 153.514454][T11554] direct_splice_actor+0x156/0x2a0 [ 153.519605][T11554] splice_direct_to_actor+0x312/0x680 [ 153.524999][T11554] do_splice_direct+0xda/0x150 [ 153.529781][T11554] do_sendfile+0x380/0x650 [ 153.534232][T11554] __x64_sys_sendfile64+0x105/0x150 [ 153.539497][T11554] x64_sys_call+0x2db1/0x3000 [ 153.544197][T11554] do_syscall_64+0xca/0x2b0 [ 153.548729][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.554663][T11554] [ 153.557006][T11554] read to 0xffff88811b021cfc of 4 bytes by task 11554 on cpu 0: [ 153.564651][T11554] xas_find_marked+0x5dc/0x620 [ 153.569465][T11554] find_get_entry+0x5d/0x380 [ 153.574077][T11554] filemap_get_folios_tag+0x92/0x210 [ 153.579392][T11554] mpage_prepare_extent_to_map+0x308/0xc20 [ 153.585226][T11554] ext4_do_writepages+0x9f6/0x27e0 [ 153.590370][T11554] ext4_writepages+0x179/0x300 [ 153.595164][T11554] do_writepages+0x1c6/0x310 [ 153.599801][T11554] file_write_and_wait_range+0x156/0x2c0 [ 153.605480][T11554] generic_buffers_fsync_noflush+0x45/0x130 [ 153.611465][T11554] ext4_sync_file+0x1ab/0x690 [ 153.616161][T11554] vfs_fsync_range+0x10d/0x130 [ 153.620967][T11554] ext4_buffered_write_iter+0x34f/0x3c0 [ 153.626550][T11554] ext4_file_write_iter+0x387/0xf60 [ 153.631782][T11554] iter_file_splice_write+0x66b/0xa20 [ 153.637173][T11554] direct_splice_actor+0x156/0x2a0 [ 153.642323][T11554] splice_direct_to_actor+0x312/0x680 [ 153.647717][T11554] do_splice_direct+0xda/0x150 [ 153.652504][T11554] do_sendfile+0x380/0x650 [ 153.656950][T11554] __x64_sys_sendfile64+0x105/0x150 [ 153.662175][T11554] x64_sys_call+0x2db1/0x3000 [ 153.666885][T11554] do_syscall_64+0xca/0x2b0 [ 153.671521][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.677425][T11554] [ 153.679753][T11554] value changed: 0x0a000021 -> 0x04000021 [ 153.685477][T11554] [ 153.687807][T11554] Reported by Kernel Concurrency Sanitizer on: [ 153.693987][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.0.3193 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.705377][T11554] Tainted: [W]=WARN [ 153.709220][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.719287][T11554] ================================================================== [ 153.921784][T11554] syz.0.3193 (11554) used greatest stack depth: 9064 bytes left [ 153.936815][T10104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.222740][ T1038] page_pool_release_retry() stalled pool shutdown: id 75, 1 inflight 60 sec