last executing test programs: 5m6.275774548s ago: executing program 1 (id=364): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 5m6.145566074s ago: executing program 1 (id=367): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) 5m6.096532586s ago: executing program 1 (id=369): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 5m6.048242688s ago: executing program 1 (id=371): capset(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 5m5.745119741s ago: executing program 1 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r0, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000240)}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c981, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m5.387399087s ago: executing program 1 (id=383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 5m5.354682318s ago: executing program 32 (id=383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m15.0222811s ago: executing program 3 (id=4738): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) 2m11.910812274s ago: executing program 4 (id=4791): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 2m11.823998248s ago: executing program 4 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) 2m11.817696968s ago: executing program 4 (id=4793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 2m11.753793321s ago: executing program 4 (id=4794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m11.554584529s ago: executing program 3 (id=4796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m11.509623052s ago: executing program 3 (id=4797): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2m11.346714438s ago: executing program 3 (id=4799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 2m11.332959179s ago: executing program 4 (id=4801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m11.240034833s ago: executing program 3 (id=4802): r0 = syz_io_uring_setup(0x6fb2, &(0x7f0000000580)={0x0, 0xd235, 0x10101, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/45, 0x2d}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x8002d3e, 0x2936, 0x28, 0x0, 0x0) 2m10.83933599s ago: executing program 3 (id=4805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 2m10.821352751s ago: executing program 33 (id=4805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 2m8.475885932s ago: executing program 4 (id=4808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2m8.474958762s ago: executing program 34 (id=4808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2.190669955s ago: executing program 7 (id=7608): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.84302672s ago: executing program 7 (id=7613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) 1.84147078s ago: executing program 0 (id=7625): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x43, 0x0, 0x0) unshare(0x22020600) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1.540181584s ago: executing program 7 (id=7616): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mq_open(0x0, 0x0, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) get_robust_list(r3, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) 1.539427924s ago: executing program 0 (id=7628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) sendto$inet6(r0, &(0x7f0000000340)="008100ec7f4c", 0x6, 0x4008014, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10007}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.493501625s ago: executing program 7 (id=7618): unshare(0x62040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.492250355s ago: executing program 0 (id=7630): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1.309515383s ago: executing program 7 (id=7619): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000002, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 1.191709168s ago: executing program 0 (id=7622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) 1.114519122s ago: executing program 2 (id=7626): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.058269984s ago: executing program 2 (id=7627): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.036352315s ago: executing program 2 (id=7629): socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 933.55435ms ago: executing program 0 (id=7634): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x40000000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 664.224791ms ago: executing program 2 (id=7645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 606.819504ms ago: executing program 2 (id=7636): creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x2d) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0xefb5890127192d5f) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x78b, &(0x7f0000002240)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 529.837177ms ago: executing program 5 (id=7639): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0), 0x12, 0x51a, &(0x7f0000001200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500010000000300000002"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) 494.001369ms ago: executing program 6 (id=7640): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0) r3 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 492.694589ms ago: executing program 2 (id=7641): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 457.07308ms ago: executing program 6 (id=7642): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 437.719211ms ago: executing program 7 (id=7643): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 406.789112ms ago: executing program 6 (id=7644): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) close(r0) 405.770142ms ago: executing program 5 (id=7655): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 374.464054ms ago: executing program 6 (id=7646): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\xfe\x1d\xda\x96\x8d\x02\xd6\x00\x00\x00\x00\x00\x00\x00\x80\xe9\xb8\x1d\xfe\x86\xb3\x1cr2+\xb5\xb1\x95') 352.007214ms ago: executing program 5 (id=7647): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcefffff0000000004"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 320.466086ms ago: executing program 5 (id=7648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x0, 0x200}}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) 227.91139ms ago: executing program 5 (id=7649): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) 227.47821ms ago: executing program 6 (id=7650): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x4, 0x6, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, 0x0, 0x0) 3.625189ms ago: executing program 6 (id=7651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 2.31881ms ago: executing program 0 (id=7662): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 5 (id=7663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x2b5}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x20) kernel console output (not intermixed with test programs): esystem 00000000-0000-0000-0000-000000000000. [ 284.739777][T19106] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 284.772129][ T29] audit: type=1326 audit(1764920440.299:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 284.803234][ T29] audit: type=1326 audit(1764920440.299:13422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 284.828296][ T29] audit: type=1326 audit(1764920440.299:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 284.841639][T19118] loop0: detected capacity change from 0 to 164 [ 284.853600][ T29] audit: type=1326 audit(1764920440.299:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 284.898956][T19110] loop5: detected capacity change from 0 to 2048 [ 284.906011][T19118] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 284.925523][T19110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.941333][T19118] bridge_slave_1: left allmulticast mode [ 284.947180][T19118] bridge_slave_1: left promiscuous mode [ 284.953164][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.977959][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.993426][T19129] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 284.995026][T19118] bridge_slave_0: left promiscuous mode [ 285.006659][T19129] Symlink component flag not implemented [ 285.007867][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.013759][T19129] Symlink component flag not implemented [ 285.027016][T19129] Symlink component flag not implemented (7) [ 285.033066][T19129] Symlink component flag not implemented (116) [ 285.855181][T19200] tipc: Enabling of bearer rejected, failed to enable media [ 285.929697][T19206] syz_tun: entered allmulticast mode [ 285.936338][T19205] syz_tun: left allmulticast mode [ 286.011495][T19216] netlink: 'syz.6.6133': attribute type 10 has an invalid length. [ 286.019710][T19216] batadv0: entered allmulticast mode [ 286.026955][T19216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.035202][T19216] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 286.046133][T19216] netlink: 'syz.6.6133': attribute type 10 has an invalid length. [ 286.054066][T19216] batadv0: entered promiscuous mode [ 286.064802][T19216] bond0: (slave batadv0): Releasing backup interface [ 286.089592][T19216] bridge0: port 3(batadv0) entered blocking state [ 286.096124][T19216] bridge0: port 3(batadv0) entered disabled state [ 286.229800][ T8762] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 286.240339][ T8762] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 286.945514][T19286] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 286.952158][T19286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.961920][T19286] vhci_hcd vhci_hcd.0: Device attached [ 287.077672][T19290] netlink: 'syz.6.6162': attribute type 3 has an invalid length. [ 287.248460][ T8112] usb 2-1: SetAddress Request (2) to port 0 [ 287.265081][ T8112] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 287.751186][T19335] loop5: detected capacity change from 0 to 2048 [ 287.775900][T19287] vhci_hcd: connection reset by peer [ 287.781793][T19335] loop5: p1 < > p4 [ 287.786234][ T8813] vhci_hcd: stop threads [ 287.790557][ T8813] vhci_hcd: release socket [ 287.794063][T19335] loop5: p4 size 8388608 extends beyond EOD, [ 287.794988][ T8813] vhci_hcd: disconnect device [ 287.794992][T19335] truncated [ 287.859467][T19347] loop5: detected capacity change from 0 to 512 [ 287.881713][T19349] __nla_validate_parse: 8 callbacks suppressed [ 287.881730][T19349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6190'. [ 287.899689][T19347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.919283][T19347] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.952702][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.043743][T19362] netlink: 'syz.2.6195': attribute type 11 has an invalid length. [ 288.113541][T19371] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 288.128187][T19371] 8021q: adding VLAN 0 to HW filter on device bond10 [ 288.137981][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 288.152700][T19371] bond10 (unregistering): Released all slaves [ 288.254483][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6202'. [ 288.264923][T19379] team0: Port device team_slave_1 removed [ 288.304260][T19385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19385 comm=syz.0.6205 [ 288.433643][T19395] loop0: detected capacity change from 0 to 512 [ 288.449559][T19395] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.503681][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6208'. [ 288.516434][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 288.516452][ T29] audit: type=1326 audit(1764920444.049:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.547152][T19395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 288.555216][T19395] EXT4-fs (loop0): orphan cleanup on readonly fs [ 288.561697][ T29] audit: type=1326 audit(1764920444.049:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.585413][ T29] audit: type=1326 audit(1764920444.079:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.609101][ T29] audit: type=1326 audit(1764920444.079:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.610059][T19395] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.6206: Allocating blocks 41-42 which overlap fs metadata [ 288.632802][ T29] audit: type=1326 audit(1764920444.079:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.632907][ T29] audit: type=1326 audit(1764920444.079:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.632940][ T29] audit: type=1326 audit(1764920444.089:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.633097][ T29] audit: type=1326 audit(1764920444.089:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.633130][ T29] audit: type=1326 audit(1764920444.089:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.633213][ T29] audit: type=1326 audit(1764920444.089:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19405 comm="syz.5.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 288.794705][T19395] EXT4-fs (loop0): Remounting filesystem read-only [ 288.802892][T19395] EXT4-fs (loop0): 1 truncate cleaned up [ 288.816732][T19395] EXT4-fs (loop0): pa ffff888106d64310: logic 1, phys. 41, len 23 [ 288.843831][T19395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.866635][T19395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.915947][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6216'. [ 289.022796][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6219'. [ 289.031841][T19433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6219'. [ 289.328569][T19466] loop5: detected capacity change from 0 to 512 [ 289.352937][T19466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.366634][T19466] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.385881][T19466] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 289.404518][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.449148][T19477] netlink: 'syz.6.6238': attribute type 21 has an invalid length. [ 289.461958][T19477] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6238'. [ 289.694291][T19497] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 289.769891][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6248'. [ 289.996118][T19529] netlink: 'syz.2.6256': attribute type 1 has an invalid length. [ 290.013694][T19529] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.023436][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6256'. [ 290.048148][T19529] bond10 (unregistering): Released all slaves [ 290.166621][T19535] macsec1: entered promiscuous mode [ 290.172007][T19535] bridge0: entered promiscuous mode [ 290.194092][T19535] bridge0: port 3(macsec1) entered blocking state [ 290.202032][T19535] bridge0: port 3(macsec1) entered disabled state [ 290.209836][T19535] macsec1: entered allmulticast mode [ 290.215175][T19535] bridge0: entered allmulticast mode [ 290.222788][T19535] macsec1: left allmulticast mode [ 290.227857][T19535] bridge0: left allmulticast mode [ 290.239234][T19535] bridge0: left promiscuous mode [ 290.269981][T19542] veth2: entered promiscuous mode [ 290.275085][T19542] veth2: entered allmulticast mode [ 290.418850][T19554] loop7: detected capacity change from 0 to 512 [ 290.435326][T19554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 290.467652][T19554] EXT4-fs (loop7): 1 truncate cleaned up [ 290.476154][T19554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.748985][T19565] vlan2: entered allmulticast mode [ 290.767363][T19565] dummy0: entered allmulticast mode [ 291.001447][T19580] netlink: 'syz.0.6277': attribute type 4 has an invalid length. [ 291.047939][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.058487][T19586] netlink: 'syz.0.6277': attribute type 4 has an invalid length. [ 291.655338][T19639] hsr_slave_0: left promiscuous mode [ 291.673833][T19639] hsr_slave_1: left promiscuous mode [ 291.710078][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.730694][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.822607][T19656] loop7: detected capacity change from 0 to 512 [ 291.830922][T19656] EXT4-fs (loop7): orphan cleanup on readonly fs [ 291.838009][T19656] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6307: bg 0: block 248: padding at end of block bitmap is not set [ 291.853122][T19656] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.6307: Failed to acquire dquot type 1 [ 291.865674][T19656] EXT4-fs (loop7): 1 truncate cleaned up [ 291.872361][T19656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.896825][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.313579][T19692] loop6: detected capacity change from 0 to 512 [ 292.319960][ T8112] usb 2-1: device descriptor read/8, error -110 [ 292.329020][T19692] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.6322: iget: bad i_size value: 38620345925642 [ 292.342347][T19692] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6322: couldn't read orphan inode 15 (err -117) [ 292.355449][T19692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.385783][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.407390][T19698] loop7: detected capacity change from 0 to 7 [ 292.429304][ T8112] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 292.457068][ T8112] usb 2-1: enqueue for inactive port 0 [ 292.490250][ T8112] usb 2-1: enqueue for inactive port 0 [ 292.505191][ T8112] usb 2-1: enqueue for inactive port 0 [ 292.556015][T19710] netlink: 'syz.5.6329': attribute type 4 has an invalid length. [ 292.602346][T19718] loop5: detected capacity change from 0 to 128 [ 292.649616][T19721] tipc: Failed to remove unknown binding: 66,1,1/0:3859426889/3859426891 [ 292.658808][T19721] tipc: Failed to remove unknown binding: 66,1,1/0:3859426889/3859426891 [ 292.667288][T19721] tipc: Failed to remove unknown binding: 66,1,1/0:3859426889/3859426891 [ 292.912286][T19749] loop5: detected capacity change from 0 to 512 [ 292.921886][T19749] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.6343: error while reading EA inode 32 err=-116 [ 292.934675][T19749] EXT4-fs (loop5): Remounting filesystem read-only [ 292.946079][T19749] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 292.958119][T19749] EXT4-fs (loop5): 1 orphan inode deleted [ 292.964702][T19749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.988864][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.153469][T19776] loop7: detected capacity change from 0 to 1024 [ 293.160448][T19776] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.167409][T19776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.176071][T19776] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.199514][T19776] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.6355: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 293.219905][T19776] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6355: couldn't read orphan inode 11 (err -117) [ 293.233847][T19776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.272310][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.321657][T19785] loop7: detected capacity change from 0 to 128 [ 293.338709][T19785] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.362244][T19785] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 293.466991][T19793] __nla_validate_parse: 6 callbacks suppressed [ 293.467011][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6361'. [ 293.490001][T19785] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.7.6358: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 293.548728][ T8112] usb usb2-port1: attempt power cycle [ 293.616795][T15872] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.709825][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6364'. [ 293.733401][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6364'. [ 293.796304][T19805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6366'. [ 293.960203][T19815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6370'. [ 293.997621][T19815] gtp0: entered promiscuous mode [ 294.087019][T19823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6373'. [ 294.129896][T19823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6373'. [ 294.304957][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6376'. [ 294.522087][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6384'. [ 294.741215][T19874] loop0: detected capacity change from 0 to 1764 [ 294.789701][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 294.789716][ T29] audit: type=1326 audit(1764920450.319:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.821054][ T29] audit: type=1326 audit(1764920450.319:13706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.857096][ T29] audit: type=1326 audit(1764920450.369:13707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.882258][ T29] audit: type=1326 audit(1764920450.369:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.905862][ T29] audit: type=1326 audit(1764920450.369:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.931099][ T29] audit: type=1326 audit(1764920450.369:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.954757][ T29] audit: type=1326 audit(1764920450.369:13711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 294.980046][ T29] audit: type=1326 audit(1764920450.369:13712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 295.003652][ T29] audit: type=1326 audit(1764920450.369:13713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 295.030747][ T29] audit: type=1326 audit(1764920450.559:13714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.7.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 295.181437][T19885] tipc: Started in network mode [ 295.186443][T19885] tipc: Node identity e6aacd20b303, cluster identity 4711 [ 295.193761][T19885] tipc: Enabled bearer , priority 0 [ 295.207685][T19885] tipc: Disabling bearer [ 295.239204][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6397'. [ 295.277417][T19896] pim6reg1: entered promiscuous mode [ 295.282877][T19896] pim6reg1: entered allmulticast mode [ 295.424956][T19915] loop5: detected capacity change from 0 to 128 [ 295.434187][T19915] EXT4-fs: Ignoring removed nobh option [ 295.444926][T19915] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.6407: iget: checksum invalid [ 295.456709][T19915] EXT4-fs (loop5): get root inode failed [ 295.462408][T19915] EXT4-fs (loop5): mount failed [ 295.478680][ T8112] usb usb2-port1: unable to enumerate USB device [ 295.704667][T19942] syzkaller0: entered promiscuous mode [ 295.710245][T19942] syzkaller0: entered allmulticast mode [ 295.828542][ T8112] page_pool_release_retry() stalled pool shutdown: id 76, 50 inflight 182 sec [ 296.191924][T19959] loop6: detected capacity change from 0 to 512 [ 296.224732][T19959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.256886][T19959] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.444801][T19959] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 296.456339][T19966] IPv6: sit2: Disabled Multicast RS [ 296.476250][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.555730][T19976] loop7: detected capacity change from 0 to 512 [ 296.615748][T19976] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 296.637712][T19976] EXT4-fs (loop7): orphan cleanup on readonly fs [ 296.644327][T19976] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 296.668494][T19976] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 296.675810][T19976] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6429: bg 0: block 40: padding at end of block bitmap is not set [ 296.693880][T19976] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 296.703064][T19976] EXT4-fs (loop7): 1 truncate cleaned up [ 296.713282][T19976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.770192][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.832628][T19990] netlink: 'syz.2.6445': attribute type 5 has an invalid length. [ 296.930305][T20005] loop7: detected capacity change from 0 to 1024 [ 296.941112][T20005] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.953401][T20005] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.983448][T20005] JBD2: no valid journal superblock found [ 296.990614][T20005] EXT4-fs (loop7): Could not load journal inode [ 297.011898][T20005] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 297.296390][T20030] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 297.406684][T20032] syzkaller0: entered promiscuous mode [ 297.412287][T20032] syzkaller0: entered allmulticast mode [ 297.562842][T20047] netlink: zone id is out of range [ 297.568137][T20047] netlink: zone id is out of range [ 297.573390][T20047] netlink: zone id is out of range [ 297.578653][T20047] netlink: zone id is out of range [ 297.583759][T20047] netlink: zone id is out of range [ 297.590688][T20047] netlink: del zone limit has 8 unknown bytes [ 297.623621][T20050] loop6: detected capacity change from 0 to 1024 [ 297.631010][T20050] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 297.641955][T20050] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 297.653442][T20050] JBD2: no valid journal superblock found [ 297.659204][T20050] EXT4-fs (loop6): Could not load journal inode [ 297.669674][T20050] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 297.991198][T20077] loop0: detected capacity change from 0 to 512 [ 298.002411][T20079] loop5: detected capacity change from 0 to 164 [ 298.011074][T20079] ISOFS: unable to read i-node block [ 298.016403][T20079] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 298.043281][T20077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.056711][T20077] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.083566][T20077] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 298.121342][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.165727][T20088] loop5: detected capacity change from 0 to 1024 [ 298.199830][T20088] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 298.210803][T20088] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 298.258050][T20088] JBD2: no valid journal superblock found [ 298.263926][T20088] EXT4-fs (loop5): Could not load journal inode [ 298.314224][T20088] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 298.624947][T20119] loop6: detected capacity change from 0 to 164 [ 298.634232][T20119] ISOFS: unable to read i-node block [ 298.645958][T20119] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 298.723696][T20125] siw: device registration error -23 [ 298.844743][T20131] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 298.844935][T20137] syzkaller1: entered promiscuous mode [ 298.859903][T20137] syzkaller1: entered allmulticast mode [ 298.875532][T20140] __nla_validate_parse: 5 callbacks suppressed [ 298.875546][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'. [ 298.890755][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'. [ 298.940822][T20145] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6499'. [ 298.961255][ T8112] page_pool_release_retry() stalled pool shutdown: id 79, 50 inflight 182 sec [ 299.067342][T20158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6517'. [ 299.076506][T20158] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6517'. [ 299.092605][T20158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6517'. [ 299.104742][T20158] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6517'. [ 299.113897][T20158] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6517'. [ 299.166309][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6509'. [ 299.209040][T20166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6509'. [ 299.291857][T20180] IPv6: sit2: Disabled Multicast RS [ 299.357983][T20190] loop0: detected capacity change from 0 to 512 [ 299.366932][T20191] loop6: detected capacity change from 0 to 1024 [ 299.373821][T20191] EXT4-fs: Ignoring removed orlov option [ 299.387952][T20190] SELinux: security_context_str_to_sid (sy) failed with errno=-22 [ 299.412654][T20191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.473671][T20198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.490404][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.516911][T20198] macsec1: entered allmulticast mode [ 299.522478][T20198] bond4: entered allmulticast mode [ 299.528690][T20198] bond4: left allmulticast mode [ 299.535792][T20204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20204 comm=syz.6.6521 [ 299.596322][T20212] loop7: detected capacity change from 0 to 1024 [ 299.603858][T20212] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.614814][T20212] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 299.626689][T20212] JBD2: no valid journal superblock found [ 299.632522][T20212] EXT4-fs (loop7): Could not load journal inode [ 299.655823][T20212] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 299.804569][T20229] loop6: detected capacity change from 0 to 512 [ 299.833850][T20229] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 299.867702][T20229] EXT4-fs (loop6): orphan cleanup on readonly fs [ 299.882732][T20229] __quota_error: 279 callbacks suppressed [ 299.882804][T20229] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 299.944649][T20229] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 299.987111][T20243] vlan2: entered allmulticast mode [ 299.997134][T20243] dummy0: entered allmulticast mode [ 300.002788][T20229] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 300.018930][T20229] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6532: bg 0: block 40: padding at end of block bitmap is not set [ 300.040646][T20242] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.059775][T20229] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 300.073546][T20229] EXT4-fs (loop6): 1 truncate cleaned up [ 300.085251][T20229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.120049][T20242] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.141197][T20244] IPv6: sit1: Disabled Multicast RS [ 300.148220][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.180781][T20242] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.210758][ T8802] Bluetooth: hci0: Frame reassembly failed (-84) [ 300.235875][T20242] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.364309][ T8757] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.385934][ T8792] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.422702][ T8757] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.438573][ T8757] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.454128][T20261] loop6: detected capacity change from 0 to 1024 [ 300.467806][T20261] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.480237][T20261] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.498002][T20261] JBD2: no valid journal superblock found [ 300.503853][T20261] EXT4-fs (loop6): Could not load journal inode [ 300.529845][T20261] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 300.625750][T20266] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 300.685510][T20272] random: crng reseeded on system resumption [ 300.697648][T20272] Restarting kernel threads ... [ 300.702880][T20272] Done restarting kernel threads. [ 300.871655][T20292] loop0: detected capacity change from 0 to 512 [ 300.910246][T20292] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 300.918258][T20292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 300.930189][T20292] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 300.940630][T20292] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 300.955536][T20292] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 300.969720][T20292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6557: bg 0: block 40: padding at end of block bitmap is not set [ 300.984323][T20292] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 300.993436][T20292] EXT4-fs (loop0): 1 truncate cleaned up [ 301.000488][T20292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.048742][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.020204][T20307] IPv6: sit1: Disabled Multicast RS [ 302.228486][ T3780] Bluetooth: hci0: command 0x1003 tx timeout [ 302.228572][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.360236][T20328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.947444][T20354] EXT4-fs: Ignoring removed orlov option [ 302.960900][T20354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.987526][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.016066][T20361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.033196][T20361] macsec0: entered allmulticast mode [ 303.038580][T20361] bond3: entered allmulticast mode [ 303.044552][T20361] bond3: left allmulticast mode [ 303.866541][T20408] set_capacity_and_notify: 2 callbacks suppressed [ 303.866561][T20408] loop7: detected capacity change from 0 to 1024 [ 303.880875][T20408] EXT4-fs: Ignoring removed orlov option [ 303.891761][T20408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.920927][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.956185][T20418] __nla_validate_parse: 12 callbacks suppressed [ 303.956205][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6595'. [ 304.000853][T20418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.030670][T20422] macsec1: entered allmulticast mode [ 304.036019][T20422] bond4: entered allmulticast mode [ 304.042482][T20422] bond4: left allmulticast mode [ 304.974167][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6611'. [ 304.974270][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6608'. [ 304.992267][T20449] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6608'. [ 305.001834][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6608'. [ 305.033294][T20449] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6608'. [ 305.043235][T20449] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6608'. [ 305.148089][T20467] loop6: detected capacity change from 0 to 1024 [ 305.155033][T20467] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.187247][T20467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.236601][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.285365][T20469] loop0: detected capacity change from 0 to 512 [ 305.368849][ T29] audit: type=1326 audit(1764920460.869:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.384869][T20477] loop6: detected capacity change from 0 to 2048 [ 305.392563][ T29] audit: type=1326 audit(1764920460.869:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392657][ T29] audit: type=1326 audit(1764920460.869:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392724][ T29] audit: type=1326 audit(1764920460.869:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392758][ T29] audit: type=1326 audit(1764920460.869:13997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392871][ T29] audit: type=1326 audit(1764920460.869:13998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392902][ T29] audit: type=1326 audit(1764920460.869:13999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.392984][ T29] audit: type=1326 audit(1764920460.869:14000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.393060][ T29] audit: type=1326 audit(1764920460.869:14001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.393094][ T29] audit: type=1326 audit(1764920460.869:14002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.6.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 305.573063][T20464] Set syz1 is full, maxelem 65536 reached [ 305.649831][T20469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.662580][T20469] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.694960][T20477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.794741][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.827348][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.918416][T20501] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6629'. [ 305.927432][T20501] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6629'. [ 305.939811][T20501] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6629'. [ 306.061179][T20512] random: crng reseeded on system resumption [ 306.074298][T20512] Restarting kernel threads ... [ 306.079643][T20512] Done restarting kernel threads. [ 306.214013][T20518] loop7: detected capacity change from 0 to 1024 [ 306.388811][T20518] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.419704][T20518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.487204][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.072468][T20562] bridge0: port 3(gretap0) entered blocking state [ 307.079890][T20562] bridge0: port 3(gretap0) entered disabled state [ 307.108113][T20562] gretap0: entered allmulticast mode [ 307.121023][T20562] gretap0: entered promiscuous mode [ 307.127428][T20564] gretap0: left allmulticast mode [ 307.132646][T20564] gretap0: left promiscuous mode [ 307.137726][T20564] bridge0: port 3(gretap0) entered disabled state [ 307.575365][T20586] loop7: detected capacity change from 0 to 512 [ 307.601933][T20586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.614868][T20586] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.726950][T20592] loop0: detected capacity change from 0 to 2048 [ 307.740222][T20592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.779129][T20596] loop6: detected capacity change from 0 to 164 [ 307.796831][T20596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 307.838965][T20596] bridge0: port 3(batadv0) entered disabled state [ 307.846296][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.889776][T20597] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 307.898653][T20597] Symlink component flag not implemented [ 307.904313][T20597] Symlink component flag not implemented [ 307.914773][T20597] Symlink component flag not implemented (7) [ 307.920873][T20597] Symlink component flag not implemented (116) [ 308.095269][T20579] Set syz1 is full, maxelem 65536 reached [ 308.162691][T20596] bridge_slave_1: left allmulticast mode [ 308.168514][T20596] bridge_slave_1: left promiscuous mode [ 308.174255][T20596] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.195791][T20596] bridge_slave_0: left allmulticast mode [ 308.201530][T20596] bridge_slave_0: left promiscuous mode [ 308.207217][T20596] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.216611][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.283693][T20608] macsec1: entered promiscuous mode [ 308.289008][T20608] bridge0: entered promiscuous mode [ 308.294898][T20608] bridge0: port 3(macsec1) entered blocking state [ 308.303112][T20608] bridge0: port 3(macsec1) entered disabled state [ 308.318602][T20608] macsec1: entered allmulticast mode [ 308.323975][T20608] bridge0: entered allmulticast mode [ 308.342518][T20608] macsec1: left allmulticast mode [ 308.347602][T20608] bridge0: left allmulticast mode [ 308.398923][T20608] bridge0: left promiscuous mode [ 308.816729][T20639] bridge_slave_1: left allmulticast mode [ 308.822485][T20639] bridge_slave_1: left promiscuous mode [ 308.828304][T20639] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.829575][T20637] netlink: 'syz.0.6683': attribute type 10 has an invalid length. [ 308.858514][T20639] bridge_slave_0: left allmulticast mode [ 308.864232][T20639] bridge_slave_0: left promiscuous mode [ 308.871366][T20639] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.889490][T20643] netlink: 'syz.0.6683': attribute type 10 has an invalid length. [ 308.899099][T20641] loop6: detected capacity change from 0 to 512 [ 308.912791][T20641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.925928][T20641] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.362222][T20635] Set syz1 is full, maxelem 65536 reached [ 309.404172][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.876852][T20685] netlink: 'syz.2.6699': attribute type 3 has an invalid length. [ 310.628471][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 310.791115][T20699] loop5: detected capacity change from 0 to 512 [ 310.922635][T20699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.012813][T20699] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.105169][T20698] Set syz1 is full, maxelem 65536 reached [ 311.161543][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.210392][T20721] __nla_validate_parse: 13 callbacks suppressed [ 311.210412][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6712'. [ 311.465987][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6721'. [ 311.830654][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 311.830672][ T29] audit: type=1326 audit(1764920467.359:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.862155][ T29] audit: type=1326 audit(1764920467.359:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.886252][ T29] audit: type=1326 audit(1764920467.359:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.911497][ T29] audit: type=1326 audit(1764920467.359:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.935204][ T29] audit: type=1326 audit(1764920467.359:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.960233][ T29] audit: type=1326 audit(1764920467.359:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 311.983863][ T29] audit: type=1326 audit(1764920467.359:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 312.008852][ T29] audit: type=1326 audit(1764920467.359:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 312.034000][ T29] audit: type=1326 audit(1764920467.419:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 312.059200][ T29] audit: type=1326 audit(1764920467.419:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 312.109336][T20763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6733'. [ 312.116010][T20761] xt_hashlimit: max too large, truncated to 1048576 [ 312.120057][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6733'. [ 312.136317][T20763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6733'. [ 312.145447][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6733'. [ 312.265813][T20775] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6739'. [ 312.611048][T20811] netlink: 'syz.6.6754': attribute type 10 has an invalid length. [ 312.620741][T20811] team0: Failed to send options change via netlink (err -105) [ 312.628254][T20811] team0: Port device dummy0 added [ 312.636064][T20811] netlink: 'syz.6.6754': attribute type 10 has an invalid length. [ 312.644719][T20811] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 312.674639][T20811] team0: Failed to send options change via netlink (err -105) [ 312.683468][T20811] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 312.694106][T20811] team0: Port device dummy0 removed [ 312.701272][T20811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 312.770162][T20815] loop6: detected capacity change from 0 to 8192 [ 312.780459][T20815] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.909414][T20824] bridge0: entered promiscuous mode [ 312.914762][T20824] macsec0: entered promiscuous mode [ 312.920670][T20824] bridge0: port 1(macsec0) entered blocking state [ 312.927214][T20824] bridge0: port 1(macsec0) entered disabled state [ 312.934283][T20824] macsec0: entered allmulticast mode [ 312.939686][T20824] bridge0: entered allmulticast mode [ 312.945329][T20826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20826 comm=syz.2.6759 [ 312.960798][T20824] macsec0: left allmulticast mode [ 312.965954][T20824] bridge0: left allmulticast mode [ 312.991838][T20824] bridge0: left promiscuous mode [ 313.037966][T20832] tipc: Enabling of bearer rejected, failed to enable media [ 313.464290][T20863] syzkaller0: entered allmulticast mode [ 313.476542][T20863] syzkaller0: entered promiscuous mode [ 313.493836][T20863] syzkaller0 (unregistering): left allmulticast mode [ 313.502080][T20863] syzkaller0 (unregistering): left promiscuous mode [ 313.520383][T20861] loop0: detected capacity change from 0 to 8192 [ 313.567105][T15877] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 313.575017][T15877] FAT-fs (loop0): Filesystem has been set read-only [ 313.699282][T20878] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 313.954330][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6787'. [ 313.964312][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6787'. [ 313.973634][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6787'. [ 314.145425][T20898] netlink: 'syz.6.6792': attribute type 1 has an invalid length. [ 314.153419][T20898] netlink: 'syz.6.6792': attribute type 4 has an invalid length. [ 314.161524][T20898] netlink: 'syz.6.6792': attribute type 1 has an invalid length. [ 314.169287][T20898] netlink: 'syz.6.6792': attribute type 4 has an invalid length. [ 314.660519][T20918] loop0: detected capacity change from 0 to 1024 [ 314.668578][T20918] EXT4-fs: Ignoring removed oldalloc option [ 314.674565][T20918] EXT4-fs: Ignoring removed bh option [ 314.696459][T20918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.732637][T20925] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 314.935777][T20926] loop5: detected capacity change from 0 to 8192 [ 315.002494][T20936] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6808' sets config #1 [ 315.295124][T20959] loop6: detected capacity change from 0 to 128 [ 315.303907][T20959] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ[^ ðìùr5_ןþQ¿Š–KiSšcèž(géÕÀõï'WÝ‚JáÜEµr+ð_N¼' [ 315.386741][T20962] loop5: detected capacity change from 0 to 512 [ 315.412301][T20962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.530217][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.532418][T20962] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.621759][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.813106][T20997] loop6: detected capacity change from 0 to 764 [ 315.830060][T20997] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 315.846292][T20997] Symlink component flag not implemented [ 315.858626][T20997] Symlink component flag not implemented (7) [ 316.129521][T21021] loop6: detected capacity change from 0 to 512 [ 316.168492][T21021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.179642][T21016] Set syz1 is full, maxelem 65536 reached [ 316.181458][T21021] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.233645][T21033] loop0: detected capacity change from 0 to 1024 [ 316.240584][T21033] EXT4-fs: Ignoring removed bh option [ 316.246090][T21033] EXT4-fs: inline encryption not supported [ 316.252630][T21033] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.275088][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.285394][T21033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 316.304512][T21033] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.6848: lblock 2 mapped to illegal pblock 2 (length 1) [ 316.324954][T21033] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.6848: lblock 0 mapped to illegal pblock 48 (length 1) [ 316.340490][T21033] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.6848: Failed to acquire dquot type 0 [ 316.355956][T21033] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 316.365705][T21033] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.6848: mark_inode_dirty error [ 316.377719][T21033] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 316.389743][T21033] EXT4-fs (loop0): 1 orphan inode deleted [ 316.390386][T21044] netlink: '+}[@': attribute type 10 has an invalid length. [ 316.396072][T21033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.417948][ T2235] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 316.439942][T21044] team0 (unregistering): Port device team_slave_0 removed [ 316.460752][ T2235] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 316.527607][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.540353][T15877] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 316.562037][T15877] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 316.582201][T15877] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 316.596415][T21057] __nla_validate_parse: 8 callbacks suppressed [ 316.596492][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6862'. [ 316.640153][T21055] loop5: detected capacity change from 0 to 2048 [ 316.673002][T21055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.708367][T21055] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.799107][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.855439][T21073] syzkaller0: entered allmulticast mode [ 316.896998][T21073] syzkaller0: entered promiscuous mode [ 316.935790][T21073] syzkaller0 (unregistering): left allmulticast mode [ 316.942685][T21073] syzkaller0 (unregistering): left promiscuous mode [ 317.158960][T21071] Set syz1 is full, maxelem 65536 reached [ 317.205150][T21082] netlink: 'syz.0.6869': attribute type 1 has an invalid length. [ 317.222409][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 317.222426][ T29] audit: type=1326 audit(1764920472.749:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.256040][ T29] audit: type=1326 audit(1764920472.779:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.279726][ T29] audit: type=1326 audit(1764920472.779:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.303433][ T29] audit: type=1326 audit(1764920472.779:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.327134][ T29] audit: type=1326 audit(1764920472.779:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.350853][ T29] audit: type=1326 audit(1764920472.779:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.374547][ T29] audit: type=1326 audit(1764920472.779:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.398280][ T29] audit: type=1326 audit(1764920472.779:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.421758][ T29] audit: type=1326 audit(1764920472.779:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.445359][ T29] audit: type=1326 audit(1764920472.779:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21084 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 317.469176][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'. [ 317.499224][T21080] bridge0: port 3(macsec1) entered blocking state [ 317.506283][T21080] bridge0: port 3(macsec1) entered disabled state [ 317.530731][T21091] netlink: 'syz.7.6872': attribute type 1 has an invalid length. [ 317.532921][T21080] macsec1: entered allmulticast mode [ 317.544931][T21080] bridge0: entered allmulticast mode [ 317.568866][T21080] macsec1: left allmulticast mode [ 317.574725][T21080] bridge0: left allmulticast mode [ 317.580827][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6872'. [ 317.619793][T21082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.632760][T21086] bond4 (unregistering): Released all slaves [ 317.648007][T21091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.665761][T21094] bond5 (unregistering): Released all slaves [ 317.884734][T21113] syzkaller0: entered allmulticast mode [ 317.905323][T21113] syzkaller0: entered promiscuous mode [ 317.932181][T21113] syzkaller0 (unregistering): left allmulticast mode [ 317.939036][T21113] syzkaller0 (unregistering): left promiscuous mode [ 318.090124][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6887'. [ 318.348276][T21151] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.396742][T21154] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.435527][T21158] loop6: detected capacity change from 0 to 512 [ 318.459813][T21158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.479721][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6904'. [ 318.479916][T21166] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.508670][T21158] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.580461][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.643522][T21174] loop7: detected capacity change from 0 to 8192 [ 318.660934][T21182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.696436][T15872] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 318.705030][T15872] FAT-fs (loop7): Filesystem has been set read-only [ 318.875346][T21194] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ[^ ðìùr5_ןþQ¿Š–KiSšcèž(géÕÀõï'WÝ‚JáÜEµr+ð_N¼' [ 318.931233][T21200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.962415][T21200] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.997224][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.024209][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6921'. [ 319.047543][T21212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 319.919945][T21243] set_capacity_and_notify: 2 callbacks suppressed [ 319.919961][T21243] loop7: detected capacity change from 0 to 2048 [ 320.013560][T21243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.029193][T21243] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.089875][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.171437][T21254] hub 9-0:1.0: USB hub found [ 320.183147][T21254] hub 9-0:1.0: 8 ports detected [ 320.548797][T21273] loop7: detected capacity change from 0 to 512 [ 320.568509][T21273] EXT4-fs: Ignoring removed bh option [ 320.610905][T21273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.624082][T21273] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.635149][T21273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.685993][T21267] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6948'. [ 321.096593][T21303] netlink: '+}[@': attribute type 10 has an invalid length. [ 321.107102][T21303] team0 (unregistering): Port device team_slave_0 removed [ 321.116726][T21303] team0 (unregistering): Port device team_slave_1 removed [ 321.659785][T21316] loop6: detected capacity change from 0 to 128 [ 321.672671][T21316] syz.6.6965: attempt to access beyond end of device [ 321.672671][T21316] loop6: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 321.740602][T21322] syz.6.6965: attempt to access beyond end of device [ 321.740602][T21322] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 321.766021][T21322] syz.6.6965: attempt to access beyond end of device [ 321.766021][T21322] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 321.784403][T21322] syz.6.6965: attempt to access beyond end of device [ 321.784403][T21322] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 321.808194][T21322] syz.6.6965: attempt to access beyond end of device [ 321.808194][T21322] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 321.835167][T21322] syz.6.6965: attempt to access beyond end of device [ 321.835167][T21322] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 321.838857][T21326] loop5: detected capacity change from 0 to 512 [ 321.863495][T21322] syz.6.6965: attempt to access beyond end of device [ 321.863495][T21322] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 321.877066][T21326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.893153][ T1407] kworker/u8:7: attempt to access beyond end of device [ 321.893153][ T1407] loop6: rw=1, sector=166, nr_sectors = 1 limit=128 [ 321.906592][ T1407] Buffer I/O error on dev loop6, logical block 166, lost async page write [ 321.919507][T21326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.933027][T21313] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6964'. [ 321.956301][T21326] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.076632][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6971'. [ 322.107185][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.112549][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6971'. [ 322.127641][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6973'. [ 322.144670][T21338] team0: entered promiscuous mode [ 322.149918][T21338] team0: entered allmulticast mode [ 322.165428][T21342] netlink: 'syz.5.6975': attribute type 1 has an invalid length. [ 322.169991][T21338] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.247630][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6979'. [ 322.260035][T21349] bond5: entered promiscuous mode [ 322.265126][T21349] bond5: entered allmulticast mode [ 322.271164][T21349] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.342905][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6982'. [ 322.361464][T21355] bridge0: port 3(macsec1) entered blocking state [ 322.369015][T21355] bridge0: port 3(macsec1) entered disabled state [ 322.382019][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 322.382035][ T29] audit: type=1326 audit(1764920477.909:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.411831][ T29] audit: type=1326 audit(1764920477.909:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.435519][ T29] audit: type=1326 audit(1764920477.909:14681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.445216][T21360] hub 9-0:1.0: USB hub found [ 322.462197][T21355] macsec1: entered allmulticast mode [ 322.466928][T21360] hub 9-0:1.0: 8 ports detected [ 322.471249][T21355] bridge0: entered allmulticast mode [ 322.486099][ T29] audit: type=1326 audit(1764920477.949:14682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc3fe3df90 code=0x7ffc0000 [ 322.509795][ T29] audit: type=1326 audit(1764920477.949:14683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.533439][ T29] audit: type=1326 audit(1764920477.949:14684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.557132][ T29] audit: type=1326 audit(1764920477.969:14685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.580640][ T29] audit: type=1326 audit(1764920477.969:14686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.604410][ T29] audit: type=1326 audit(1764920477.969:14687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.627986][ T29] audit: type=1326 audit(1764920477.969:14688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21359 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc3fe3f749 code=0x7ffc0000 [ 322.652814][T21355] macsec1: left allmulticast mode [ 322.659314][T21355] bridge0: left allmulticast mode [ 322.752099][T21342] veth5: entered promiscuous mode [ 322.757395][T21342] veth5: entered allmulticast mode [ 322.763796][T21342] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 322.856451][T21371] loop6: detected capacity change from 0 to 512 [ 322.868448][T21371] EXT4-fs: Ignoring removed bh option [ 322.882043][T21371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.925036][T21371] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.984281][T21371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.020665][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6991'. [ 323.150682][T21390] loop0: detected capacity change from 0 to 2048 [ 323.190497][T21390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.203215][T21390] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.235691][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.271175][T21388] loop6: detected capacity change from 0 to 1024 [ 323.299922][T21388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 323.312697][T21388] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.464874][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 323.507525][T21416] ªªªªªª: renamed from wg2 [ 323.514808][T21414] netlink: 600 bytes leftover after parsing attributes in process `syz.6.7003'. [ 323.554073][T21418] loop0: detected capacity change from 0 to 2048 [ 323.572294][T21418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.667091][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.024202][T21439] netlink: 'syz.5.7012': attribute type 4 has an invalid length. [ 324.024393][T21439] netlink: 'syz.5.7012': attribute type 4 has an invalid length. [ 324.026153][T21440] loop0: detected capacity change from 0 to 512 [ 324.046388][T21440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.071295][T21440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.071734][T21440] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.217968][T21448] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 324.226623][T21448] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 324.260350][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.281894][T21455] netlink: 'syz.6.7020': attribute type 2 has an invalid length. [ 324.426945][T21444] loop5: detected capacity change from 0 to 1024 [ 324.462890][T21444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 324.492285][T21444] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.517953][T21471] EXT4-fs: Ignoring removed bh option [ 324.570247][T21471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.583130][T21471] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.594822][T21471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.644997][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.994918][T21515] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 325.054122][T21523] set_capacity_and_notify: 3 callbacks suppressed [ 325.054141][T21523] loop7: detected capacity change from 0 to 128 [ 325.067710][T21523] EXT4-fs: Ignoring removed nobh option [ 325.081000][T21523] EXT4-fs error (device loop7): __ext4_fill_super:5553: inode #2: comm syz.7.7044: iget: checksum invalid [ 325.093620][T21523] EXT4-fs (loop7): get root inode failed [ 325.100096][T21523] EXT4-fs (loop7): mount failed [ 325.157027][T18025] hid_parser_main: 22 callbacks suppressed [ 325.157048][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x1 [ 325.171495][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.179031][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.187225][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.195478][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.202988][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.211103][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x4 [ 325.219434][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.226833][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.234271][T18025] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 325.243491][T18025] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz0] on syz0 [ 325.314008][T21547] loop5: detected capacity change from 0 to 512 [ 325.321901][T21547] EXT4-fs (loop5): orphan cleanup on readonly fs [ 325.329789][T21547] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7055: bg 0: block 248: padding at end of block bitmap is not set [ 325.344846][T21547] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7055: Failed to acquire dquot type 1 [ 325.359329][T21547] EXT4-fs (loop5): 1 truncate cleaned up [ 325.365861][T21547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.495820][T21562] vlan2: entered allmulticast mode [ 325.501654][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.680257][T21577] bridge0: entered promiscuous mode [ 325.689650][T21577] macsec0: entered promiscuous mode [ 325.705138][T21577] bridge0: port 1(macsec0) entered blocking state [ 325.711835][T21577] bridge0: port 1(macsec0) entered disabled state [ 325.732862][T21577] macsec0: entered allmulticast mode [ 325.738252][T21577] bridge0: entered allmulticast mode [ 325.756413][T21577] macsec0: left allmulticast mode [ 325.761492][T21577] bridge0: left allmulticast mode [ 325.778473][T21577] bridge0: left promiscuous mode [ 325.800489][T21580] team1: left promiscuous mode [ 325.805388][T21580] team1: left allmulticast mode [ 325.828306][T21580] ip6gre1: left allmulticast mode [ 325.850547][T21580] batman_adv: batadv0: Interface deactivated: vxlan0 [ 325.902417][T21580] bond5: left promiscuous mode [ 325.907256][T21580] veth5: left promiscuous mode [ 325.913043][T21580] bond5: left allmulticast mode [ 325.917986][T21580] veth5: left allmulticast mode [ 325.992036][ T8788] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.008636][ T8788] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.035187][ T8788] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.052867][ T8788] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.345552][T21604] loop5: detected capacity change from 0 to 512 [ 326.367883][T21604] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.432435][T21604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.456110][T21604] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.7090: lblock 23 mapped to illegal pblock 18 (length 1) [ 326.511069][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.583343][T21618] bridge0: entered promiscuous mode [ 326.588740][T21618] macsec0: entered promiscuous mode [ 326.594780][T21618] bridge0: port 1(macsec0) entered blocking state [ 326.601282][T21618] bridge0: port 1(macsec0) entered disabled state [ 326.608021][T21599] loop7: detected capacity change from 0 to 1024 [ 326.608115][T21618] macsec0: entered allmulticast mode [ 326.619751][T21618] bridge0: entered allmulticast mode [ 326.659234][T21618] macsec0: left allmulticast mode [ 326.664355][T21618] bridge0: left allmulticast mode [ 326.670763][T21599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 326.683981][T21618] bridge0: left promiscuous mode [ 327.058712][T21599] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.147422][T21625] __nla_validate_parse: 9 callbacks suppressed [ 327.147438][T21625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7085'. [ 327.222672][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.257941][T21629] ref_ctr_offset mismatch. inode: 0x8f9 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 327.295133][T21628] tipc: Started in network mode [ 327.300173][T21628] tipc: Node identity 76b9cf346ef7, cluster identity 4711 [ 327.307323][T21628] tipc: Enabled bearer , priority 0 [ 327.333921][T21628] tipc: Disabling bearer [ 327.384092][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7089'. [ 327.407123][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 327.407137][ T29] audit: type=1326 audit(1764920482.929:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.449104][T21640] team1: entered promiscuous mode [ 327.454175][T21640] team1: entered allmulticast mode [ 327.467406][ T29] audit: type=1326 audit(1764920482.949:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21632 comm="syz.7.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.491190][ T29] audit: type=1326 audit(1764920482.959:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.501720][T21640] 8021q: adding VLAN 0 to HW filter on device team1 [ 327.514908][ T29] audit: type=1326 audit(1764920482.959:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.514943][ T29] audit: type=1326 audit(1764920482.959:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.515049][ T29] audit: type=1326 audit(1764920482.959:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.515079][ T29] audit: type=1326 audit(1764920482.959:14823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.515151][ T29] audit: type=1326 audit(1764920482.969:14824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.515228][ T29] audit: type=1326 audit(1764920482.969:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.515259][ T29] audit: type=1326 audit(1764920482.969:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 327.792647][T21653] macsec1: entered promiscuous mode [ 327.797916][T21653] bridge0: entered promiscuous mode [ 327.812261][T21653] bridge0: port 3(macsec1) entered blocking state [ 327.818879][T21653] bridge0: port 3(macsec1) entered disabled state [ 327.839874][T21653] macsec1: entered allmulticast mode [ 327.845223][T21653] bridge0: entered allmulticast mode [ 327.868798][T21653] macsec1: left allmulticast mode [ 327.873905][T21653] bridge0: left allmulticast mode [ 327.889032][T21653] bridge0: left promiscuous mode [ 328.121831][T21665] batadv0: left promiscuous mode [ 328.126840][T21665] batadv0: left allmulticast mode [ 328.135276][T21665] veth2: left promiscuous mode [ 328.140226][T21665] veth2: left allmulticast mode [ 328.153210][T21665] team0: left promiscuous mode [ 328.158010][T21665] team0: left allmulticast mode [ 328.489821][T21683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7107'. [ 328.553986][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 328.573317][T21686] team1: entered promiscuous mode [ 328.573339][T21686] team1: entered allmulticast mode [ 328.573502][T21686] 8021q: adding VLAN 0 to HW filter on device team1 [ 329.082409][T21700] loop6: detected capacity change from 0 to 512 [ 329.100551][T21700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.128817][T21700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.146867][T21700] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.244746][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.263364][T21716] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7115'. [ 329.295553][T21716] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7115'. [ 329.314586][T21722] loop6: detected capacity change from 0 to 1024 [ 329.339987][T21722] EXT4-fs: Ignoring removed oldalloc option [ 329.346009][T21722] EXT4-fs: Ignoring removed bh option [ 329.347831][T21728] netlink: 'syz.7.7118': attribute type 10 has an invalid length. [ 329.372835][T21725] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 329.373199][T21728] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 329.404811][T21722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.462671][T21737] SELinux: failed to load policy [ 329.496721][T21737] loop0: detected capacity change from 0 to 512 [ 329.512127][T21744] wireguard0: entered promiscuous mode [ 329.517641][T21744] wireguard0: entered allmulticast mode [ 329.536623][T21737] EXT4-fs (loop0): 1 orphan inode deleted [ 329.537293][T21737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.555210][ T8788] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:38: Failed to release dquot type 1 [ 329.569026][T21737] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.622593][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.774137][T21758] loop0: detected capacity change from 0 to 512 [ 329.782015][T21758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.878365][T21758] EXT4-fs (loop0): 1 truncate cleaned up [ 329.879187][T21758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.389645][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.447588][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.764279][T21813] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7140'. [ 330.783678][T21813] hsr_slave_0: left promiscuous mode [ 330.791221][T21813] hsr_slave_1: left promiscuous mode [ 330.822948][T21821] loop6: detected capacity change from 0 to 512 [ 330.846663][T21821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.862281][T21821] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.891284][T21825] geneve2: entered promiscuous mode [ 330.896583][T21825] geneve2: entered allmulticast mode [ 330.912055][T21830] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7150'. [ 330.951379][T21832] loop7: detected capacity change from 0 to 512 [ 330.962455][T21832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.979412][T15876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.004130][T21832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.017894][T21832] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.061472][T21849] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7156'. [ 331.121684][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.420195][T21873] loop0: detected capacity change from 0 to 128 [ 331.468080][T21873] syz.0.7166: attempt to access beyond end of device [ 331.468080][T21873] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 331.509762][T21879] loop5: detected capacity change from 0 to 512 [ 331.539889][T21879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.560323][T21880] syz.0.7166: attempt to access beyond end of device [ 331.560323][T21880] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 331.575580][T21880] syz.0.7166: attempt to access beyond end of device [ 331.575580][T21880] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 331.591425][T21879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.604778][T21879] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.630738][T21880] syz.0.7166: attempt to access beyond end of device [ 331.630738][T21880] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 331.666542][T21880] syz.0.7166: attempt to access beyond end of device [ 331.666542][T21880] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 331.680480][T21880] syz.0.7166: attempt to access beyond end of device [ 331.680480][T21880] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 331.694041][T21880] syz.0.7166: attempt to access beyond end of device [ 331.694041][T21880] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 331.707625][T21880] syz.0.7166: attempt to access beyond end of device [ 331.707625][T21880] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 331.722111][T21880] syz.0.7166: attempt to access beyond end of device [ 331.722111][T21880] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 331.722798][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.744728][T21880] syz.0.7166: attempt to access beyond end of device [ 331.744728][T21880] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 331.765233][T21873] Buffer I/O error on dev loop0, logical block 161, async page read [ 331.773530][T21873] Buffer I/O error on dev loop0, logical block 162, async page read [ 331.781669][T21873] Buffer I/O error on dev loop0, logical block 163, async page read [ 331.789953][T21873] Buffer I/O error on dev loop0, logical block 164, async page read [ 331.798013][T21873] Buffer I/O error on dev loop0, logical block 165, async page read [ 331.806171][T21873] Buffer I/O error on dev loop0, logical block 166, async page read [ 331.837976][T21873] Buffer I/O error on dev loop0, logical block 167, async page read [ 331.855946][T21873] Buffer I/O error on dev loop0, logical block 168, async page read [ 331.879196][T21873] Buffer I/O error on dev loop0, logical block 161, async page read [ 331.887673][T21873] Buffer I/O error on dev loop0, logical block 162, async page read [ 331.970819][T21891] netlink: 'syz.0.7175': attribute type 10 has an invalid length. [ 332.072654][T21902] team1: entered promiscuous mode [ 332.077774][T21902] team1: entered allmulticast mode [ 332.083199][T21902] 8021q: adding VLAN 0 to HW filter on device team1 [ 332.112407][T21909] loop6: detected capacity change from 0 to 128 [ 332.121017][T21909] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.133554][T21909] ext4 filesystem being mounted at /450/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.164407][T21909] __nla_validate_parse: 5 callbacks suppressed [ 332.164421][T21909] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 332.179366][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.187932][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.203342][T21915] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 332.244366][T21909] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 332.260135][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.268670][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.296021][T21909] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 332.307891][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.316412][T21909] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.340633][T15876] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.534431][T21929] loop5: detected capacity change from 0 to 128 [ 333.155713][T21944] netlink: 'syz.2.7189': attribute type 10 has an invalid length. [ 333.180803][T21947] loop7: detected capacity change from 0 to 512 [ 333.234333][T21947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.254450][T21947] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.271484][T21958] tipc: New replicast peer: 255.255.255.83 [ 333.277383][T21958] tipc: Enabled bearer , priority 10 [ 333.314722][T21947] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 333.349455][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.381760][T21961] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7196'. [ 333.390914][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 333.390934][ T29] audit: type=1400 audit(1764920488.909:14931): avc: denied { read } for pid=21955 comm="syz.5.7193" path="socket:[73329]" dev="sockfs" ino=73329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.500855][ T29] audit: type=1400 audit(1764920489.029:14932): avc: denied { bind } for pid=21968 comm="syz.6.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.537691][T21972] random: crng reseeded on system resumption [ 333.572547][ T29] audit: type=1400 audit(1764920489.059:14933): avc: denied { read write } for pid=21966 comm="syz.0.7195" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 333.759383][T21981] loop0: detected capacity change from 0 to 2048 [ 333.802609][T21981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.837034][T21981] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.851670][T21989] loop7: detected capacity change from 0 to 128 [ 333.861321][T21989] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.886153][T21989] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.912486][ T29] audit: type=1326 audit(1764920489.439:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 333.969045][ T29] audit: type=1326 audit(1764920489.439:14935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 333.994388][ T29] audit: type=1326 audit(1764920489.469:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feda7a6f783 code=0x7ffc0000 [ 334.017926][ T29] audit: type=1326 audit(1764920489.469:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feda7a6f783 code=0x7ffc0000 [ 334.042756][ T29] audit: type=1326 audit(1764920489.469:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 334.066438][ T29] audit: type=1326 audit(1764920489.469:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 334.091478][ T29] audit: type=1326 audit(1764920489.479:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 334.126325][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.222324][T15872] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.250562][T22007] syz_tun: entered allmulticast mode [ 334.258155][ T8112] Process accounting resumed [ 334.261313][T22006] syz_tun: left allmulticast mode [ 334.388579][ T3429] tipc: Node number set to 2886997007 [ 334.542950][T22026] loop7: detected capacity change from 0 to 512 [ 334.543417][T22026] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 334.551676][T22026] EXT4-fs (loop7): 1 truncate cleaned up [ 334.552164][T22026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.784757][T22038] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.784941][T22038] ext4 filesystem being mounted at /436/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.872084][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.937296][T15877] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.024315][T22057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.039955][T22057] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.067038][T22057] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 335.102723][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.128895][T22041] loop6: p1 p2 p3 < p5 p6 p7 > [ 335.134408][T22041] loop6: p2 size 16775168 extends beyond EOD, truncated [ 335.142691][T22041] loop6: p5 start 4294970168 is beyond EOD, truncated [ 335.346575][T22079] iso9660: Unknown parameter '€' [ 335.447240][T22091] netlink: 'syz.2.7245': attribute type 1 has an invalid length. [ 335.533337][T22095] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 335.544046][T22095] EXT4-fs (loop7): orphan cleanup on readonly fs [ 335.560226][T22095] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.613174][T22095] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 335.633620][T22095] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7247: bg 0: block 40: padding at end of block bitmap is not set [ 335.698679][T22095] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 335.721749][T22095] EXT4-fs (loop7): 1 truncate cleaned up [ 335.737455][T22095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.817308][T22117] ISOFS: unable to read i-node block [ 335.832814][T22117] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 335.900158][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.960828][T22128] bridge: RTM_NEWNEIGH with invalid ether address [ 336.071673][T22134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.112088][T22133] set_capacity_and_notify: 7 callbacks suppressed [ 336.112110][T22133] loop5: detected capacity change from 0 to 8192 [ 336.310359][T22142] loop0: detected capacity change from 0 to 512 [ 336.331383][T22142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.367258][T22142] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.410319][T22142] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 336.447631][T15877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.544294][T22148] xt_hashlimit: max too large, truncated to 1048576 [ 336.602053][T22146] team2: entered promiscuous mode [ 336.607136][T22146] team2: entered allmulticast mode [ 336.618097][T22152] netlink: 'syz.0.7270': attribute type 39 has an invalid length. [ 336.655501][T22156] loop5: detected capacity change from 0 to 1024 [ 336.662964][T22156] EXT4-fs: Ignoring removed bh option [ 336.669303][T22156] EXT4-fs: inline encryption not supported [ 336.676431][T22156] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.687994][T22156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 336.697353][T22156] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.7271: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.723317][T22156] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.7271: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.749875][T22156] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7271: Failed to acquire dquot type 0 [ 336.761853][T22156] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 336.772370][T22156] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.7271: mark_inode_dirty error [ 336.784599][T22156] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 336.794978][T22156] EXT4-fs (loop5): 1 orphan inode deleted [ 336.801393][T22156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.814002][ T8795] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.830076][ T8795] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:44: Failed to release dquot type 0 [ 336.842652][T22169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22169 comm=syz.6.7277 [ 336.886985][T22156] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.7271: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.937377][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.491505][T22198] bond2: left promiscuous mode [ 337.491607][T22198] bond2: left allmulticast mode [ 337.491744][T22198] veth2: left promiscuous mode [ 337.491762][T22198] veth2: left allmulticast mode [ 337.491950][T22198] team0: left promiscuous mode [ 337.491969][T22198] team0: left allmulticast mode [ 337.492648][T22198] ip6gre1: left promiscuous mode [ 337.492892][T22198] veth4: left promiscuous mode [ 337.492911][T22198] veth4: left allmulticast mode [ 337.493211][T22198] bond5: left promiscuous mode [ 337.493229][T22198] bridge4: left promiscuous mode [ 337.572488][T22198] team1: left promiscuous mode [ 337.572551][T22198] team1: left allmulticast mode [ 338.375786][T22228] __nla_validate_parse: 24 callbacks suppressed [ 338.375835][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7298'. [ 338.416524][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7299'. [ 338.426239][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7299'. [ 338.526433][T22235] syzkaller0: entered promiscuous mode [ 338.532018][T22235] syzkaller0: entered allmulticast mode [ 338.646726][T22246] rdma_op ffff888129476d80 conn xmit_rdma 0000000000000000 [ 338.665453][T22248] bridge0: entered promiscuous mode [ 338.671225][T22248] bridge0: left promiscuous mode [ 338.715564][T22250] loop7: detected capacity change from 0 to 512 [ 338.724332][T22250] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 338.736715][T22250] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 338.747567][T22250] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7308: Corrupt directory, running e2fsck is recommended [ 338.795737][T22250] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 338.806360][T22250] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.7308: corrupted in-inode xattr: invalid ea_ino [ 338.829440][T22250] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7308: couldn't read orphan inode 15 (err -117) [ 338.849343][T22250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.885848][T22250] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 338.897423][T22250] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 338.907535][T22250] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7308: Corrupt directory, running e2fsck is recommended [ 338.964617][T22250] binfmt_misc: register: failed to install interpreter file ./file0 [ 338.982424][T22250] netlink: 'syz.7.7308': attribute type 1 has an invalid length. [ 339.002477][T22250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.048732][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 339.048749][ T29] audit: type=1400 audit(1764920494.579:15072): avc: denied { ioctl } for pid=22255 comm="syz.5.7310" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 339.083503][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.366533][ T29] audit: type=1326 audit(1764920494.869:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.391639][ T29] audit: type=1326 audit(1764920494.869:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.415331][ T29] audit: type=1326 audit(1764920494.869:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.440352][ T29] audit: type=1326 audit(1764920494.869:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.464019][ T29] audit: type=1326 audit(1764920494.869:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.489000][ T29] audit: type=1326 audit(1764920494.869:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.513354][ T29] audit: type=1326 audit(1764920494.869:15079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.537697][ T29] audit: type=1326 audit(1764920494.869:15080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.562602][ T29] audit: type=1326 audit(1764920494.869:15081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22285 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c0ef749 code=0x7ffc0000 [ 339.582559][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7317'. [ 339.654932][T22295] vlan2: entered allmulticast mode [ 339.660213][T22295] macvtap0: entered allmulticast mode [ 339.704758][T22288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.880605][T22304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7327'. [ 340.051386][T22328] veth8: entered promiscuous mode [ 340.056629][T22328] veth8: entered allmulticast mode [ 340.476740][T22347] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7345'. [ 341.080745][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7354'. [ 341.087260][T22369] loop0: detected capacity change from 0 to 164 [ 341.098987][T22369] netlink: 'syz.0.7349': attribute type 29 has an invalid length. [ 341.112752][T22366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.126558][T22357] netlink: 'syz.0.7349': attribute type 29 has an invalid length. [ 341.177330][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7360'. [ 341.210824][T22382] loop5: detected capacity change from 0 to 128 [ 341.223697][T22382] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.240296][T22382] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.287201][T22388] gtp0: left promiscuous mode [ 341.330130][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7360'. [ 341.352253][T22388] team1: left promiscuous mode [ 341.357072][T22388] team1: left allmulticast mode [ 341.382703][T15878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.403114][T22388] veth8: left promiscuous mode [ 341.407938][T22388] veth8: left allmulticast mode [ 341.434628][T22401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7369'. [ 341.471224][T22401] bond10: entered promiscuous mode [ 341.484437][T22401] 8021q: adding VLAN 0 to HW filter on device bond10 [ 341.511814][T22401] bridge9: entered promiscuous mode [ 341.896613][T22440] bond10: left promiscuous mode [ 342.070141][T22457] loop7: detected capacity change from 0 to 512 [ 342.105315][T22457] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm ,&#^%: couldn't read orphan inode 26 (err -116) [ 342.145054][T22457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.168184][T22457] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.246513][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.259296][T22469] loop6: detected capacity change from 0 to 4096 [ 342.276860][T22469] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 342.538145][T22505] loop5: detected capacity change from 0 to 128 [ 342.679835][T22528] loop5: detected capacity change from 0 to 128 [ 342.707964][T22534] netlink: 'syz.2.7401': attribute type 83 has an invalid length. [ 343.534989][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7407'. [ 343.555736][T22637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.591405][T22637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.815203][T22647] loop6: detected capacity change from 0 to 1024 [ 343.830331][T22647] EXT4-fs: inline encryption not supported [ 343.845150][T22647] EXT4-fs: Ignoring removed nobh option [ 343.850925][T22647] EXT4-fs: Ignoring removed bh option [ 343.880547][T22647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.893527][T22635] loop7: detected capacity change from 0 to 1024 [ 343.913894][T22635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.115959][T22673] netlink: 'syz.0.7422': attribute type 1 has an invalid length. [ 344.135180][T22673] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 344.184717][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 344.184735][ T29] audit: type=1326 audit(1764920499.709:15232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22682 comm="syz.2.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 344.227093][ T29] audit: type=1326 audit(1764920499.719:15233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.7.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 344.250761][ T29] audit: type=1326 audit(1764920499.719:15234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.7.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 344.274497][ T29] audit: type=1326 audit(1764920499.719:15235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.7.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 344.298161][ T29] audit: type=1326 audit(1764920499.719:15236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.7.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 344.321955][ T29] audit: type=1326 audit(1764920499.739:15237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22682 comm="syz.2.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 344.345563][ T29] audit: type=1326 audit(1764920499.739:15238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.7.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4d99f749 code=0x7ffc0000 [ 344.369323][ T29] audit: type=1326 audit(1764920499.739:15239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22682 comm="syz.2.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda7a6f749 code=0x7ffc0000 [ 344.393001][ T29] audit: type=1326 audit(1764920499.739:15240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22682 comm="syz.2.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feda7a6e3aa code=0x7ffc0000 [ 344.416420][ T29] audit: type=1326 audit(1764920499.739:15241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22682 comm="syz.2.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feda7aa2005 code=0x7ffc0000 [ 344.532353][T22701] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7436'. [ 344.541538][T22701] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7436'. [ 344.651377][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7440'. [ 344.680004][T22713] loop7: detected capacity change from 0 to 1024 [ 344.686682][T22713] EXT4-fs: inline encryption not supported [ 344.941666][T22732] loop6: detected capacity change from 0 to 512 [ 344.949549][T22732] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.965819][T22732] EXT4-fs (loop6): 1 truncate cleaned up [ 345.250217][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.259319][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.268492][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.277629][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.286618][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.305314][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7454'. [ 345.528006][T22762] tipc: New replicast peer: 255.255.255.255 [ 345.534338][T22762] tipc: Enabled bearer , priority 10 [ 345.712468][T22784] loop6: detected capacity change from 0 to 512 [ 345.741272][T22784] EXT4-fs: Ignoring removed bh option [ 345.840621][T22796] EXT4-fs: Ignoring removed oldalloc option [ 345.846702][T22796] EXT4-fs: Ignoring removed bh option [ 346.582426][T22839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.591364][T22839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.657348][T18025] tipc: Node number set to 407818036 [ 347.404634][T22877] syzkaller0: entered allmulticast mode [ 347.421982][T22877] syzkaller0: entered promiscuous mode [ 347.445265][T22877] syzkaller0 (unregistering): left promiscuous mode [ 347.452048][T22877] syzkaller0 (unregistering): left allmulticast mode [ 347.689929][T22884] set_capacity_and_notify: 1 callbacks suppressed [ 347.689947][T22884] loop6: detected capacity change from 0 to 2048 [ 347.776421][T22888] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 347.813264][T22888] SELinux: failed to load policy [ 347.833662][T15876] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 347.899580][T15876] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 347.966346][T22895] bond0: (slave dummy0): Releasing backup interface [ 347.976480][T22897] netlink: zone id is out of range [ 347.981686][T22897] netlink: zone id is out of range [ 347.992208][T22895] bond0: (slave bond_slave_0): Releasing backup interface [ 348.006534][T22897] netlink: zone id is out of range [ 348.011769][T22897] netlink: zone id is out of range [ 348.017488][T22897] netlink: zone id is out of range [ 348.024137][T22895] bond0: (slave bond_slave_1): Releasing backup interface [ 348.032960][T22903] netlink: 'syz.6.7508': attribute type 10 has an invalid length. [ 348.037983][T22897] netlink: zone id is out of range [ 348.049214][T22895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.074334][T22897] netlink: zone id is out of range [ 348.081837][T22903] veth1_vlan: left promiscuous mode [ 348.089725][T22897] netlink: zone id is out of range [ 348.091442][T22903] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 348.113473][T22907] lo: entered allmulticast mode [ 348.131500][T22907] lo: entered promiscuous mode [ 348.136409][T22907] lo: left allmulticast mode [ 348.160869][T22911] bridge0: port 1(gretap0) entered blocking state [ 348.167385][T22911] bridge0: port 1(gretap0) entered disabled state [ 348.180138][T22911] gretap0: entered allmulticast mode [ 348.186221][T22911] gretap0: entered promiscuous mode [ 348.196785][T22911] gretap0: left allmulticast mode [ 348.201991][T22911] gretap0: left promiscuous mode [ 348.207057][T22911] bridge0: port 1(gretap0) entered disabled state [ 348.276709][T22927] veth6: entered promiscuous mode [ 348.281886][T22927] veth6: entered allmulticast mode [ 348.450758][T18025] kernel write not supported for file bpf-prog (pid: 18025 comm: kworker/1:16) [ 348.513013][T22959] netlink: 'syz.0.7539': attribute type 1 has an invalid length. [ 348.530784][T22959] bond4: entered promiscuous mode [ 348.535912][T22959] bond4: entered allmulticast mode [ 348.541712][T22959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.557423][T22959] bridge2: entered promiscuous mode [ 348.562868][T22959] bridge2: entered allmulticast mode [ 348.569194][T22959] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 348.578007][T22962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 348.669215][ T8795] Bluetooth: hci0: Frame reassembly failed (-84) [ 348.728180][T22982] wg2: entered promiscuous mode [ 348.733199][T22982] wg2: entered allmulticast mode [ 348.739267][T22985] __nla_validate_parse: 18 callbacks suppressed [ 348.739281][T22985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7548'. [ 349.118395][T22989] loop7: detected capacity change from 0 to 1024 [ 349.126049][T22989] EXT4-fs: Ignoring removed oldalloc option [ 349.132094][T22989] EXT4-fs: Ignoring removed bh option [ 349.174674][T23000] loop6: detected capacity change from 0 to 1024 [ 349.185452][T23000] EXT4-fs: Ignoring removed orlov option [ 349.200673][T23003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7553'. [ 349.255381][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 349.255400][ T29] audit: type=1400 audit(349.228:15483): avc: denied { create } for pid=23007 comm="syz.2.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.292814][ T29] audit: type=1400 audit(349.258:15484): avc: denied { setopt } for pid=23007 comm="syz.2.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.316869][ T29] audit: type=1400 audit(349.288:15485): avc: denied { create } for pid=23007 comm="syz.2.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 349.361371][T23011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7555'. [ 349.382139][ T29] audit: type=1400 audit(349.308:15486): avc: denied { ioctl } for pid=23007 comm="syz.2.7554" path="socket:[77960]" dev="sockfs" ino=77960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 349.408300][ T29] audit: type=1400 audit(349.318:15487): avc: denied { bind } for pid=23007 comm="syz.2.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.452973][T23013] veth10: entered promiscuous mode [ 349.458231][T23013] veth10: entered allmulticast mode [ 349.463957][ T29] audit: type=1400 audit(349.428:15488): avc: denied { bind } for pid=23014 comm="syz.2.7556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.485185][ T29] audit: type=1400 audit(349.438:15489): avc: denied { setopt } for pid=23014 comm="syz.2.7556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.631872][ T29] audit: type=1326 audit(349.608:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23017 comm="syz.5.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 349.658956][ T29] audit: type=1326 audit(349.628:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23017 comm="syz.5.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 349.683573][ T29] audit: type=1326 audit(349.628:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23017 comm="syz.5.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75b999f749 code=0x7ffc0000 [ 350.140515][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7564'. [ 350.142543][T23052] loop5: detected capacity change from 0 to 1024 [ 350.156645][T23052] EXT4-fs: Ignoring removed orlov option [ 350.206521][T23056] loop7: detected capacity change from 0 to 2048 [ 350.249992][T23056] loop7: p2 < > p4 [ 350.254658][T23056] loop7: p4 size 262144 extends beyond EOD, truncated [ 350.442259][T23061] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 350.453834][T23061] SELinux: failed to load policy [ 350.498623][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7568'. [ 350.595903][T23076] syzkaller0: entered promiscuous mode [ 350.601440][T23076] syzkaller0: entered allmulticast mode [ 350.681531][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7579'. [ 350.708383][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.945669][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7589'. [ 351.048777][T23112] syzkaller0: entered promiscuous mode [ 351.054299][T23112] syzkaller0: entered allmulticast mode [ 351.181472][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7593'. [ 351.239516][T23119] loop0: detected capacity change from 0 to 2048 [ 351.278212][T15877] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 351.293190][T15877] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 351.328315][T23123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 351.359876][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7596'. [ 351.446042][T23128] loop5: detected capacity change from 0 to 8192 [ 351.457024][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7598'. [ 351.511322][T23136] loop5: detected capacity change from 0 to 2048 [ 351.682616][T23143] random: crng reseeded on system resumption [ 352.246390][T23169] batman_adv: batadv0: Adding interface: dummy0 [ 352.253047][T23169] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.278495][T23169] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 352.413089][T23174] loop7: detected capacity change from 0 to 2048 [ 352.609082][T23174] EXT4-fs mount: 22 callbacks suppressed [ 352.609099][T23174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.682956][T15872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.783465][T23188] loop0: detected capacity change from 0 to 8192 [ 352.813084][T23191] random: crng reseeded on system resumption [ 353.108550][ T8112] page_pool_release_retry() stalled pool shutdown: id 224, 50 inflight 60 sec [ 353.206038][T23230] bond0: (slave bond_slave_0): Releasing backup interface [ 353.215672][T23230] bond0: (slave c@0Ù): Releasing backup interface [ 353.225504][T23230] net_ratelimit: 8 callbacks suppressed [ 353.225522][T23230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.253078][T23233] netlink: 'syz.6.7631': attribute type 1 has an invalid length. [ 353.261509][T23235] netlink: 'syz.2.7629': attribute type 10 has an invalid length. [ 353.587807][T23252] bridge: RTM_NEWNEIGH with invalid ether address [ 353.727033][T23260] loop5: detected capacity change from 0 to 512 [ 353.746592][T23260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 353.762487][T23260] __nla_validate_parse: 2 callbacks suppressed [ 353.762507][T23260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7639'. [ 353.807666][T15878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 353.835937][T23279] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 353.851708][T23279] team0: entered promiscuous mode [ 353.856836][T23279] team0: entered allmulticast mode [ 353.876358][T23283] loop6: detected capacity change from 0 to 128 [ 353.886574][T23283] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.922815][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7648'. [ 353.933559][T15876] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.945682][T23290] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 354.577921][T23303] ================================================================== [ 354.586043][T23303] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 354.592991][T23303] [ 354.595323][T23303] read-write to 0xffff88811ee554ec of 4 bytes by task 23299 on cpu 1: [ 354.603481][T23303] fifo_open+0x86/0x5d0 [ 354.607729][T23303] do_dentry_open+0x54b/0xa60 [ 354.612417][T23303] vfs_open+0x37/0x1e0 [ 354.616497][T23303] path_openat+0x1ddd/0x23b0 [ 354.621100][T23303] do_file_open_root+0x1d0/0x400 [ 354.626144][T23303] file_open_root+0xfd/0x130 [ 354.630743][T23303] do_handle_open+0x630/0x710 [ 354.635530][T23303] __x64_sys_open_by_handle_at+0x44/0x50 [ 354.641178][T23303] x64_sys_call+0x2b6a/0x3000 [ 354.645866][T23303] do_syscall_64+0xd8/0x2a0 [ 354.650391][T23303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.656292][T23303] [ 354.658624][T23303] read to 0xffff88811ee554ec of 4 bytes by task 23303 on cpu 0: [ 354.666258][T23303] wait_for_partner+0xb5/0x1c0 [ 354.671029][T23303] fifo_open+0x462/0x5d0 [ 354.675290][T23303] do_dentry_open+0x54b/0xa60 [ 354.679991][T23303] vfs_open+0x37/0x1e0 [ 354.684102][T23303] path_openat+0x1ddd/0x23b0 [ 354.688722][T23303] do_filp_open+0x109/0x230 [ 354.693255][T23303] do_sys_openat2+0xa6/0x150 [ 354.697888][T23303] __x64_sys_openat+0xf2/0x120 [ 354.702714][T23303] x64_sys_call+0x2b07/0x3000 [ 354.707410][T23303] do_syscall_64+0xd8/0x2a0 [ 354.711931][T23303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.717867][T23303] [ 354.720190][T23303] value changed: 0x00000001 -> 0x00000002 [ 354.725908][T23303] [ 354.728230][T23303] Reported by Kernel Concurrency Sanitizer on: [ 354.734385][T23303] CPU: 0 UID: 0 PID: 23303 Comm: syz.0.7662 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 354.745773][T23303] Tainted: [W]=WARN [ 354.749578][T23303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.759642][T23303] ================================================================== [ 356.228749][ T8112] page_pool_release_retry() stalled pool shutdown: id 76, 50 inflight 242 sec [ 359.348480][ T8112] page_pool_release_retry() stalled pool shutdown: id 79, 50 inflight 242 sec