last executing test programs: 58.13939218s ago: executing program 0 (id=312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000300)="689dadb0a67952bad4c689c7ae517c112fe9559609cd8af4b40f52e2729223ceb005bafd5ff1bfa3cf255f785bb687442724570c8dccda", 0x37}], 0x1, 0x5405, 0x0, 0x14) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x4, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6008080}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r3, r4}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) 57.873988046s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r4, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="9800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 56.930823818s ago: executing program 0 (id=327): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x2000000, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) syz_emit_ethernet(0x0, 0x0, 0x0) 56.620513368s ago: executing program 0 (id=330): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0xa, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x5}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x4, 0x8001, 0x100}, {0x4, 0x7}, {0x2, 0x4, 0x1}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "52065a"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3}}]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000f80)=""/135, 0x96, 0x87, 0x1, 0x1}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700), 0x0, 0x2000c044) syz_emit_ethernet(0x36, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x12000000, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 56.527930318s ago: executing program 0 (id=331): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x385000, 0x0) r1 = open$dir(0x0, 0x195802, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='{\x00', 0x0, r1) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 56.076049662s ago: executing program 0 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000800000/0x800000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00 ~\x00\x00'], 0x14}}, 0x4000054) syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 56.075648282s ago: executing program 32 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000800000/0x800000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00 ~\x00\x00'], 0x14}}, 0x4000054) syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.567310402s ago: executing program 5 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x30, r1, 0x209, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4c017) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 3.280634899s ago: executing program 3 (id=842): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nolazytime}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x0, 0x4}], 0x2, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c00198007", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005"], 0x174}}, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.487380367s ago: executing program 1 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r0}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x7, 'Cr\a\x00\x00\x00\x00'}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0xc8000, &(0x7f0000000340), 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)) keyctl$search(0xa, r4, &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x20, 0x700, 0xfffffe01, 0x2, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x10, 0x21, 0x0, 0x8, [0x200, 0x10000, 0x7]}, @lsrr={0x83, 0x13, 0xfb, [@private=0xa010102, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp={0x44, 0x4, 0xfd, 0x0, 0x9}, @cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x5, 0x2}, {0x0, 0xb, "b0b5b6532208325cab"}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0xd, "4b491cc630427d2a853301"}, {0x1, 0x2}]}]}}}}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0xc}, 0x18) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 2.486165047s ago: executing program 3 (id=845): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) chown(0x0, 0x0, 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r0, 0x2}, {r0, 0x201}], 0x2, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="9b0f"], 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0xc, 0x40000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0x20000000, r0, 0x2d, {0x7, 0xa44}, 0x80}, 0x1) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') 2.470784739s ago: executing program 2 (id=846): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xe]}, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x13c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x44}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_connmark={0xbc, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x6f, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0xfd, 0xffffffffffffffff, 0x5, 0x6, 0x8000000000000001, 0x81, 0x9}, &(0x7f0000000080)={0x8, 0x80, 0x1, 0x5, 0x8000000000000001, 0x2, 0x1b50, 0xf}, &(0x7f00000000c0)={0x4, 0x7, 0x3, 0x5, 0x7, 0x6, 0x8, 0x7}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000340)={[0x3]}, 0x8}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r1], 0x50) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x5}, 0x90) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 2.466621549s ago: executing program 5 (id=847): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB="f5e53fe460eb803758c8630cf655bb41e66027184747c84ea94c910d91e02eadd40a5f77cac3f5290442b4ac3425f16892a8df57d4b3f922b765dc5ad9121f931c43ee2f16d518c3c3bd0406c6f0211fae5d7f264ef5e6d14b0e59520bf695a82dd9f86f5f159521f17c9a00763cc21a727711be387c2688ee5fa10bc3989e6caf5353d8ef12e729bc5789014e5324203e132c72d77f49176b63022a613b958909d123fc62783843abfebfad77621b0c90919d54ae593ab72445e63d377edbc56f2c3bdf6be22ac9c271e84213f3a040e19f69b0114328116448d799434c827d0948f40f0281298d25b4205bff"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1213, &(0x7f0000005300)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./file1\x00', 0x408000, 0x0) flock(0xffffffffffffffff, 0xf) setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000580)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xff00}}, 0x10) truncate(&(0x7f00000000c0)='./file1\x00', 0x6) 2.372090449s ago: executing program 1 (id=848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x0, 0x288}, 0x0, &(0x7f00000006c0)) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r3, 0x25, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 2.032009211s ago: executing program 3 (id=851): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_sctp(0x2, 0x800000000000001, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f0000000040)=""/3, 0x40f00, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1) 1.616043032s ago: executing program 5 (id=852): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) poll(0x0, 0x0, 0xfa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setresgid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) pipe2(&(0x7f0000000040), 0x80000) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(r2, &(0x7f0000000300)="2cd889f035a53e", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000040)}}, 0x40) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r5, 0x11}, 0x10) 1.614812492s ago: executing program 2 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) write$cgroup_devices(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0xa) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) close(r0) 1.584166596s ago: executing program 2 (id=854): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x9, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0xf}, {0x2, 0x0, 0xf8, 0x200}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x42, 0xabe, 0x8, 0x4000000a, 0xffffff80}) socket$netlink(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1.545323669s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mq_unlink(0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3026}, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x0, r2, 0x31, {0x5, 0x10001}, 0x6}, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2831], 0xb0f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='mm_page_free\x00', r7, 0x0, 0xe17}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.544894049s ago: executing program 4 (id=856): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_sctp(0x2, 0x800000000000001, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f0000000040)=""/3, 0x40f00, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 1.272104586s ago: executing program 5 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x30, r1, 0x209, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4c017) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 1.2277156s ago: executing program 3 (id=858): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0xe, 0x4) r0 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000280)={'veth1_to_bond\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0xffe4}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x9, 0x9, 0x752, 0x80000001, 0x7, 0x0, 0xfffff000, 0x7f, 0x3, 0x0, 0x66, 0x800000, 0xffff0000, 0x4a9, 0x5, 0x52, 0x3, 0x0, 0x7fffffff, 0x3, 0x2, 0x3, 0x40008, 0x9, 0xf, 0xffffffff, 0x4, 0x34c8, 0x46bf3e5b, 0x7, 0x9, 0x4, 0x3, 0x5, 0x1000, 0xffffff81, 0x9, 0xb08b, 0x2, 0x10001, 0x4, 0xa46, 0x6, 0x0, 0x6, 0x4, 0x80000000, 0x9, 0x6, 0x7, 0x6, 0x7, 0x7, 0xfffffffb, 0x7, 0xfffffff9, 0x8, 0x6388, 0x39, 0x6b, 0xc, 0x400, 0x4, 0x5, 0xa, 0x0, 0x8, 0xffff2f54, 0x98f, 0x7, 0xc, 0x400, 0x3, 0x200, 0x4, 0x80000001, 0x3, 0x9, 0x9, 0x10, 0x100, 0xd, 0x1c7, 0x6, 0x1, 0x896, 0x7, 0x8, 0x5, 0x2, 0x0, 0xffffffff, 0x6, 0x3, 0xde2c, 0x7, 0x7, 0xffffffff, 0xfffffffe, 0xf, 0x9, 0x10000, 0x3, 0x8, 0x8, 0xc, 0x1, 0x10, 0x1, 0x9, 0x4, 0x3, 0x2, 0x6, 0x3, 0x1, 0x6, 0x3c8000, 0x2, 0x8, 0x40, 0x7, 0x5, 0x8, 0x40, 0x6c686e22, 0x10, 0x7, 0x7b9, 0x5, 0xa62, 0x0, 0x2, 0xff, 0x4, 0x6, 0x3, 0x4, 0x8, 0xfffff001, 0xff, 0x2, 0x5, 0x6, 0xb20f, 0x6, 0x20000, 0x9, 0x873, 0x3, 0x3ff, 0x49, 0x101, 0xd8, 0x5, 0x7, 0x5, 0x8, 0x100, 0x3, 0x2, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x9, 0x34d597e2, 0x2, 0xc, 0x0, 0x3, 0x4, 0x6, 0x4, 0x4, 0x1b2289a5, 0x6, 0xf, 0x3, 0x3, 0x8007, 0x6, 0x80, 0xd, 0x0, 0x3, 0x3, 0xbb09, 0x0, 0x1, 0x8fd, 0xf, 0x3, 0x79b, 0x8, 0xe, 0xfffffff7, 0x9, 0x3, 0x1, 0x6, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x5, 0x80000001, 0x2, 0x6, 0x5, 0x8, 0xfff, 0x0, 0x8, 0x1000, 0xc0000000, 0x0, 0xa, 0x2, 0x9, 0x1, 0xb, 0x3, 0x6, 0x5, 0x10000, 0x8001, 0x0, 0x2, 0x2, 0xfffffffa, 0x1, 0x5458, 0x9, 0x7ff, 0x82, 0xd1c4, 0xfffffff7, 0x2df2c74c, 0xd, 0x9, 0x1ff, 0x7, 0xf96a, 0x7fffffff, 0x9, 0x81, 0x1, 0x101, 0x401, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x6, 0x5, 0x4f96, 0x9, 0x9, 0x10000, 0x6, 0x67d, 0xf, 0x2, 0x9, 0xc, 0xff3e, 0x9, 0x10001, 0x9, 0x1, 0x6, 0xbdf5, 0x4, 0xe, 0xd, 0x0, 0x2, 0xa0, 0x800, 0xe6a, 0x1, 0x10000, 0x22, 0x389, 0x8, 0xaa, 0x4, 0xfffffff7, 0xb, 0x6, 0x800, 0x81, 0x100, 0x4, 0x5, 0x228, 0x0, 0x8, 0x8, 0x9, 0x40, 0x401, 0xe, 0x9, 0x3d096cd7, 0x6, 0x5, 0x9, 0xbb77, 0x8, 0xff, 0x5, 0xfffffffa, 0x5, 0xcbe5, 0x411, 0x2, 0x0, 0xc481, 0x80000000, 0x3, 0x8001, 0x1, 0x8, 0x4467, 0x78, 0x7, 0x4, 0x400, 0x8, 0x4, 0x0, 0x3, 0x9, 0x5, 0x4, 0x1, 0x3a0, 0x74061c33, 0x0, 0x9, 0x5, 0x9, 0x0, 0x8, 0x7fff, 0x2, 0x40, 0x9184, 0xfffff001, 0x41a, 0x1a, 0x81, 0x1, 0x80, 0x81, 0x10, 0xc, 0xe87, 0xfd9, 0x0, 0x9, 0x2, 0x0, 0x4, 0x4, 0x9, 0x6, 0x81, 0x2, 0x400, 0x80000000, 0x7, 0x0, 0x3, 0xe2f6, 0x8, 0x5, 0x9, 0xfffffffe, 0xffffffff, 0x10000, 0xf, 0x3, 0x7bad, 0xfffffff7, 0x9f3c, 0xa364, 0x9, 0x4, 0x9, 0x4, 0x3, 0x101, 0x0, 0x7f, 0x1, 0x1, 0x3, 0x4, 0x5, 0xf8b0, 0x1000, 0x0, 0x10, 0x7, 0x7, 0x717, 0x5, 0xa, 0x4, 0x5, 0x400, 0x4, 0x80000001, 0xffff, 0x31, 0x8, 0x7, 0x100, 0x20000000, 0x3, 0x1, 0x5, 0x282c, 0x6, 0xc00c, 0x6, 0x3, 0x1ff, 0x9, 0x7, 0x200, 0x5, 0x4, 0x4, 0x0, 0x1, 0x0, 0xff, 0x2, 0x7, 0x200, 0x101, 0x8, 0x3, 0x6, 0x1e4, 0x3, 0x8, 0x3, 0x0, 0x200, 0x7, 0x5, 0x7, 0x19c0, 0x7, 0xff, 0x4c1, 0xb, 0xb, 0x101, 0x7fffffff, 0x7, 0x7, 0x2, 0x5, 0x3, 0x0, 0x1, 0x3, 0x3, 0x5, 0x8, 0x77, 0x0, 0x80, 0x7, 0x8502, 0x0, 0x77, 0x6, 0x1, 0x5, 0xffff6018, 0x400, 0x200, 0x9, 0xabd0, 0x3, 0x5, 0x5f82, 0xbc12, 0xffff, 0xe, 0x6, 0xfff, 0x2, 0x0, 0x8b, 0x10000, 0x0, 0xe, 0x8, 0x6, 0xfc]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x3, 0x4, 0x0, 0x8000, {0x8, 0x1, 0x0, 0x4, 0x3, 0x121a}, {0x6, 0x1, 0x3, 0x5e25, 0x40, 0x9}, 0x0, 0x2, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.202634143s ago: executing program 2 (id=859): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0xfc, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x1, 0x5e06001f, 0x2, 0x7f]}, &(0x7f0000000000)=0x78) 1.119580031s ago: executing program 1 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x8, 0x1, 0x7ff, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000200008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfbe, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0xa}, 0x10, 0x65db, r6, 0x9, &(0x7f0000000ac0)=[r3, r0, r0, r0, r0], &(0x7f0000000b40)=[{0x2, 0x5, 0x2, 0xe}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xd, 0x7}, {0x1, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x3, 0x9}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r4, r7, 0x27, 0x10, 0x0, @void, @value=r6, @void, @void, r5}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000100)={0x7, 0x1, 0xe, 0x2}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x1f4, 0x11, 0x2, 0x801, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4}, [@generic="80af2240d07ee4c3ed01b2f2c679cef9870069f2ea9ec81529ae8eaedf697099bf3aa8b225fef118131c8c4951d8629413ae86b37a5c7ff8f0f7274a7c213f", @generic="fa65e7f696c796553ccb107394f0f58498815525fa9ec075422244fdce47ab403f346e98269a6f80e877725d8a610c4f0ef99b6887ec475cd65e46bb603fea08dc4eacaae64cd9e3f762510c22bbab5ba813aa3746c945377d8051c3a60f3592cb3830a2dfb2181bfbd5d10291a5ef1deb55574a54be8d78d4c82660c515db331fe9c299c9d0f8fbab038427ec30", @generic="76e5f58b9202fc34909621e9e729ee4de278d49f9d7cfd93a343564126b457d339cd3d4b1dcebe3c2428c90d501f59dec6308f600dc9176c07c5d82753c2c5c4eeb5108a4b087ca36807dac0200f11345a510f141257", @generic="1b7027a447a40b5e693447b5139ce0d9da37ec5c88e0bbfaa2a2de2f50a74e61997a97a48e0a7805197ee03874f8e80aee97f1d46a7098457a4154d13e805e15b33753401e300183a9bf75d3a447935afc3eff3fc7060890a5d2000000b6e1fe3af9a7b4ba22aa381a26047fa64251f707912a394ab122c8fbf689b3564dfe3bdcfeb0e84864ca6c965e86d7bc55a61c39bb12", @generic="ba864edeabc8894cb679d1e8370fe1535d9fe15e4eecd323d7936f4f2210a41819eaf755ed11d2e0b6"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x11dd722846665d7f}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x80}, 0x18) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0xfe8e, 0x12) open(&(0x7f0000001ec0)='./file1/../file0\x00', 0x10d000, 0x142) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 994.056864ms ago: executing program 1 (id=861): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a90306000000000000003200000008004001", @ANYRES32=0x0], 0x1c}}, 0x4004050) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff0200"/38], 0x40}, 0x24004800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ab050060", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) gettid() r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@private1, 0x0, 0x4}]}]}, 0x13c}}, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'pim6reg1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.692497ms ago: executing program 1 (id=862): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x385000, 0x0) r1 = open$dir(0x0, 0x195802, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='{\x00', 0x0, r1) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) timer_settime(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 732.796059ms ago: executing program 3 (id=863): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fchdir(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 680.536884ms ago: executing program 4 (id=864): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c00018008001b000000000020000a80050008"], 0x98}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c001980080001"], 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 452.206956ms ago: executing program 4 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x189002, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) write$cgroup_devices(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0xa) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) close(r0) 409.550991ms ago: executing program 5 (id=866): set_mempolicy(0x4005, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 408.855421ms ago: executing program 4 (id=867): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c45", 0x1d}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) rename(0x0, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2014c08, &(0x7f0000000540)=ANY=[], 0xfe, 0x6bd, &(0x7f0000000cc0)="$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") bind$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0x2008884, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5, 0x175, &(0x7f0000000240)="$eJzs27GKE0EYB/BvTS5Gba62WrCxCmplqcgJ4oKipNBOOG08CJhmtQo+ia2P4sMIkiqgMKIbEo0bxMhmc8nv1+SDP0O+mSQzTGC/ppROR+NXo8fT6GdZdO9EHrMsjuNCdKIyCQBgn8xSii8ppXRxEpc+REqp7Y4AgKY5/wHg8Pz1/L/dUmMAQGPc/wHg8Dx99vzh3aI4eZLn/YjPk3JYDqvXKr//oDi5kf90vBw1LcthZ5HfrPL89/woLs/zW7V5L65fq/If2b1HxUp+JU7/6PaoiSUAAACAvTfIF2rv94PBuryqfvl/YOX+3o2r3a1NAwD4B+O3716/ODt7+ea8FL2I2IE2Nig+7UYbDRe9+Rdri2/6LaW0wfD3H6tO216xRorsvz+C2u2iv72dCWja8kffdicAAAAAAAAAAAAAAMA6zT6N1Gl7egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDrewAAAP//6LlMIA==") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x3c, r7, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 366.257985ms ago: executing program 3 (id=868): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_sctp(0x2, 0x800000000000001, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x9}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f0000000040)=""/3, 0x40f00, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1) 164.072184ms ago: executing program 2 (id=869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r5, r1, 0x0, 0x3ffff) sendfile(r5, r1, 0x0, 0x7ffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) 163.554574ms ago: executing program 4 (id=870): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_sctp(0x2, 0x800000000000001, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f0000000040)=""/3, 0x40f00, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1) 97.198001ms ago: executing program 1 (id=871): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x10800, 0x1d6) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fcntl$notify(r1, 0x402, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000200)=0x0) syz_open_procfs(r6, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 63.643914ms ago: executing program 4 (id=872): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0xff}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) sendfile(r4, r4, 0x0, 0x6) dup(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_io_uring_setup(0x1888, &(0x7f00000007c0)={0x0, 0x40fa, 0x100, 0xffffffff, 0x138}, &(0x7f0000000400), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0xab15, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r9, &(0x7f0000000200), &(0x7f0000000480)=0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x20000080) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 56.268135][ T29] audit: type=1326 audit(56.138:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 56.268154][ T29] audit: type=1326 audit(56.138:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 56.294856][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.294879][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.294961][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.305798][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.305855][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.305888][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 56.385178][ T4244] loop4: detected capacity change from 0 to 512 [ 56.437393][ T4246] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.454930][ T4248] IPv6: Can't replace route, no match found [ 56.496437][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.595616][ T4255] geneve2: entered promiscuous mode [ 56.595636][ T4255] geneve2: entered allmulticast mode [ 57.019212][ T4259] rdma_op ffff88811aa8a980 conn xmit_rdma 0000000000000000 [ 57.049837][ T4259] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.057191][ T4259] vhci_hcd: invalid port number 96 [ 57.062656][ T4259] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 57.114623][ T4252] loop2: detected capacity change from 0 to 128 [ 57.121587][ T4252] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.138596][ T4252] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.168469][ T4252] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 57.177050][ T4252] FAT-fs (loop2): Filesystem has been set read-only [ 57.232098][ T4270] loop2: detected capacity change from 0 to 128 [ 57.240542][ T4270] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.247906][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.263504][ T4270] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.274398][ T4271] __nla_validate_parse: 3 callbacks suppressed [ 57.274412][ T4271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 57.341375][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 57.433122][ T4277] SELinux: failed to load policy [ 57.441572][ T4287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.461293][ T4286] loop1: detected capacity change from 0 to 512 [ 57.469189][ T4290] netlink: 7 bytes leftover after parsing attributes in process `syz.2.224'. [ 57.486677][ T4290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.224'. [ 57.496308][ T4286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.539704][ T4286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.560122][ T4286] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.225: inode #15: comm syz.1.225: iget: illegal inode # [ 57.591628][ T4286] EXT4-fs (loop1): Remounting filesystem read-only [ 57.599384][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.612738][ T4287] loop0: detected capacity change from 0 to 512 [ 57.641091][ T4287] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 57.649930][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.658599][ T4287] System zones: 0-2, 18-18, 34-35 [ 57.675984][ T4287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.694533][ T4287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.752833][ T4314] bond1: (slave erspan0): Device is not bonding slave [ 57.760264][ T4314] bond1: option active_slave: invalid value (erspan0) [ 57.771961][ T4314] bond1 (unregistering): Released all slaves [ 57.800779][ T4318] netlink: 'syz.1.230': attribute type 39 has an invalid length. [ 57.802451][ T4316] macsec0: entered promiscuous mode [ 57.820513][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 57.829936][ T4316] veth1_macvtap: left promiscuous mode [ 57.838065][ T4316] macsec0 (unregistering): left promiscuous mode [ 57.941637][ T4321] : renamed from vlan0 (while UP) [ 57.954678][ T4321] loop2: detected capacity change from 0 to 1156 [ 58.408805][ T4332] netlink: 'syz.4.234': attribute type 6 has an invalid length. [ 58.511731][ T4334] geneve2: entered promiscuous mode [ 58.517044][ T4334] geneve2: entered allmulticast mode [ 58.923655][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.932609][ T4345] netlink: 108 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.959492][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.959543][ T4345] netlink: 108 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.959555][ T4345] netlink: 84 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.972585][ T4345] loop2: detected capacity change from 0 to 512 [ 59.010531][ T4345] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.238: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6, max 4(4), depth 0(0) [ 59.010769][ T4345] EXT4-fs (loop2): get root inode failed [ 59.010782][ T4345] EXT4-fs (loop2): mount failed [ 59.197985][ T4347] SELinux: failed to load policy [ 59.505333][ T4375] loop0: detected capacity change from 0 to 2048 [ 59.569945][ T3824] Alternate GPT is invalid, using primary GPT. [ 59.576645][ T3824] loop0: p2 p3 p7 [ 59.593047][ T4375] Alternate GPT is invalid, using primary GPT. [ 59.599414][ T4375] loop0: p2 p3 p7 [ 59.783672][ T4379] loop4: detected capacity change from 0 to 512 [ 59.809440][ T4379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.837540][ T4379] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.246: corrupted inode contents [ 59.854863][ T4379] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.246: mark_inode_dirty error [ 59.883520][ T4379] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.246: corrupted inode contents [ 59.895836][ T4379] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.246: mark_inode_dirty error [ 59.928457][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.955033][ T4384] loop4: detected capacity change from 0 to 512 [ 59.967931][ T4384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.979032][ T4384] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.985882][ T4384] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.247: inode #15: comm syz.4.247: iget: illegal inode # [ 59.999277][ T4384] EXT4-fs (loop4): Remounting filesystem read-only [ 60.006377][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 60.041230][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.043774][ T4350] syz.1.239 (4350) used greatest stack depth: 7096 bytes left [ 60.078534][ T4387] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 60.192831][ T4397] loop3: detected capacity change from 0 to 512 [ 60.293727][ T4397] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.448893][ T4397] tipc: Started in network mode [ 60.454163][ T4397] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 60.491285][ T4372] Set syz1 is full, maxelem 65536 reached [ 60.510834][ T4397] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 60.519091][ T4397] tipc: Enabled bearer , priority 10 [ 60.555103][ T4416] netlink: 'syz.1.254': attribute type 22 has an invalid length. [ 60.659374][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.659407][ T4416] netlink: 'syz.1.254': attribute type 22 has an invalid length. [ 60.670190][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.722433][ T4429] loop4: detected capacity change from 0 to 2048 [ 60.726111][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.743693][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.823806][ T4438] netlink: 'syz.0.259': attribute type 30 has an invalid length. [ 60.932877][ T4440] netlink: 'syz.3.262': attribute type 6 has an invalid length. [ 60.943477][ T4429] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.083766][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 61.083779][ T29] audit: type=1326 audit(61.058:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.134203][ T4429] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.146842][ T4429] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.146842][ T4429] [ 61.157335][ T4429] EXT4-fs (loop4): Total free blocks count 0 [ 61.163793][ T4429] EXT4-fs (loop4): Free/Dirty block details [ 61.169737][ T4429] EXT4-fs (loop4): free_blocks=2415919504 [ 61.176060][ T4429] EXT4-fs (loop4): dirty_blocks=16 [ 61.181213][ T4429] EXT4-fs (loop4): Block reservation details [ 61.187203][ T4429] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 61.191832][ T29] audit: type=1326 audit(61.088:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.216680][ T29] audit: type=1326 audit(61.088:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.240288][ T29] audit: type=1326 audit(61.088:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.263148][ T29] audit: type=1326 audit(61.088:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.287245][ T29] audit: type=1326 audit(61.088:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.310795][ T29] audit: type=1326 audit(61.088:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.333617][ T29] audit: type=1326 audit(61.088:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.356927][ T29] audit: type=1326 audit(61.088:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.380247][ T29] audit: type=1326 audit(61.088:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c7e7efc9 code=0x7ffc0000 [ 61.411747][ T4429] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 61.424850][ T4429] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.424850][ T4429] [ 61.438132][ T4429] xt_TPROXY: Can be used only with -p tcp or -p udp [ 61.445230][ T4450] loop2: detected capacity change from 0 to 512 [ 61.467268][ T4450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.478761][ T4429] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 61.479329][ T4450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 61.501390][ T4450] EXT4-fs (loop2): 1 truncate cleaned up [ 61.586730][ T3477] tipc: Node number set to 1 [ 61.603821][ T4458] loop7: detected capacity change from 0 to 7 [ 61.612376][ T4458] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.625528][ T4460] loop1: detected capacity change from 0 to 512 [ 61.634519][ T4460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.638283][ T4458] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.652843][ T4458] loop7: unable to read partition table [ 61.653941][ T4462] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.667352][ T4460] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.677775][ T4458] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 61.679523][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.697596][ T4460] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.268: inode #15: comm syz.1.268: iget: illegal inode # [ 61.712838][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.717898][ T4460] EXT4-fs (loop1): Remounting filesystem read-only [ 61.721600][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.735550][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.743697][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.752367][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.760337][ T3824] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.781248][ T4456] loop4: detected capacity change from 0 to 256 [ 61.809112][ T4456] vfat: Unknown parameter ')՝"' [ 61.935309][ T4470] netlink: 'syz.0.271': attribute type 6 has an invalid length. [ 62.028780][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.032166][ T4474] SELinux: failed to load policy [ 62.036358][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.082660][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.090128][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.226864][ T4490] loop0: detected capacity change from 0 to 512 [ 62.237382][ T4490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.253590][ T4490] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.267807][ T4490] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.277: inode #15: comm syz.0.277: iget: illegal inode # [ 62.277236][ T4494] serio: Serial port ptm0 [ 62.285726][ T4490] EXT4-fs (loop0): Remounting filesystem read-only [ 62.336192][ T4495] loop2: detected capacity change from 0 to 512 [ 62.464040][ T4506] loop3: detected capacity change from 0 to 2048 [ 62.481440][ T4506] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.496440][ T4506] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.510386][ T4506] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.510386][ T4506] [ 62.520190][ T4506] EXT4-fs (loop3): Total free blocks count 0 [ 62.526261][ T4506] EXT4-fs (loop3): Free/Dirty block details [ 62.532191][ T4506] EXT4-fs (loop3): free_blocks=2415919504 [ 62.538330][ T4506] EXT4-fs (loop3): dirty_blocks=16 [ 62.543421][ T4506] EXT4-fs (loop3): Block reservation details [ 62.549484][ T4506] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 62.558516][ T4506] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 62.571371][ T4506] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.571371][ T4506] [ 62.582350][ T4506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.590680][ T4506] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 62.631633][ T4511] lo speed is unknown, defaulting to 1000 [ 62.637506][ T4511] lo speed is unknown, defaulting to 1000 [ 62.643781][ T4511] lo speed is unknown, defaulting to 1000 [ 62.650815][ T4511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.659523][ T4511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 62.674043][ T4511] lo speed is unknown, defaulting to 1000 [ 62.681048][ T4511] lo speed is unknown, defaulting to 1000 [ 62.687298][ T4511] lo speed is unknown, defaulting to 1000 [ 62.694183][ T4511] lo speed is unknown, defaulting to 1000 [ 62.700722][ T4511] lo speed is unknown, defaulting to 1000 [ 62.762547][ T4522] lo speed is unknown, defaulting to 1000 [ 62.908497][ T4527] SELinux: failed to load policy [ 63.104432][ T4533] loop4: detected capacity change from 0 to 2048 [ 63.235600][ T4531] Set syz1 is full, maxelem 65536 reached [ 63.364057][ T4538] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.521039][ T4546] loop2: detected capacity change from 0 to 512 [ 63.547822][ T4546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.560006][ T4533] Alternate GPT is invalid, using primary GPT. [ 63.566404][ T4533] loop4: p2 p3 p7 [ 63.570478][ T4546] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.579134][ T4546] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.293: inode #15: comm syz.2.293: iget: illegal inode # [ 63.592185][ T4546] EXT4-fs (loop2): Remounting filesystem read-only [ 63.647435][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 63.661961][ T3824] udevd[3824]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 63.669533][ T4401] udevd[4401]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 63.683870][ T4550] rdma_op ffff888123f8d180 conn xmit_rdma 0000000000000000 [ 63.834518][ T4564] 9pnet_fd: Insufficient options for proto=fd [ 63.878909][ T4564] vhci_hcd: invalid port number 11 [ 63.883864][ T4565] lo speed is unknown, defaulting to 1000 [ 63.884152][ T4564] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 63.943703][ T4564] pim6reg: entered allmulticast mode [ 63.944372][ T4558] rdma_op ffff88812706a180 conn xmit_rdma 0000000000000000 [ 63.957300][ T4564] netlink: 'syz.1.299': attribute type 13 has an invalid length. [ 63.998267][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.005763][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.009113][ T4570] __nla_validate_parse: 10 callbacks suppressed [ 64.009128][ T4570] netlink: 84 bytes leftover after parsing attributes in process `syz.1.299'. [ 64.049414][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.061710][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.076755][ T4571] loop0: detected capacity change from 0 to 512 [ 64.089893][ T4571] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.300: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6, max 4(4), depth 0(0) [ 64.107987][ T4571] EXT4-fs (loop0): get root inode failed [ 64.113830][ T4571] EXT4-fs (loop0): mount failed [ 64.146759][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 64.155979][ T4569] netlink: 108 bytes leftover after parsing attributes in process `syz.0.300'. [ 64.165913][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 64.175265][ T4569] netlink: 108 bytes leftover after parsing attributes in process `syz.0.300'. [ 64.184354][ T4569] netlink: 84 bytes leftover after parsing attributes in process `syz.0.300'. [ 64.194849][ T4572] pim6reg: left allmulticast mode [ 64.206079][ T52] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.215269][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.236760][ T52] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.246007][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.255778][ T52] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.264824][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.274118][ T4571] lo speed is unknown, defaulting to 1000 [ 64.294019][ T52] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.303138][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.396014][ T4576] loop1: detected capacity change from 0 to 512 [ 64.407150][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.301: inode has both inline data and extents flags [ 64.420998][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.301: couldn't read orphan inode 15 (err -117) [ 64.590129][ T4589] netlink: 'syz.1.306': attribute type 6 has an invalid length. [ 64.739027][ T4601] rdma_op ffff888119d34180 conn xmit_rdma 0000000000000000 [ 64.750559][ T4591] lo speed is unknown, defaulting to 1000 [ 64.758694][ T4593] loop3: detected capacity change from 0 to 256 [ 64.779672][ T4593] vfat: Unknown parameter ')՝"' [ 64.938825][ T4610] netlink: 'syz.3.313': attribute type 6 has an invalid length. [ 64.958906][ T4607] loop0: detected capacity change from 0 to 2048 [ 65.001881][ T4607] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.025597][ T4607] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.038443][ T4607] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.038443][ T4607] [ 65.048866][ T4607] EXT4-fs (loop0): Total free blocks count 0 [ 65.054904][ T4607] EXT4-fs (loop0): Free/Dirty block details [ 65.060900][ T4607] EXT4-fs (loop0): free_blocks=2415919504 [ 65.066625][ T4607] EXT4-fs (loop0): dirty_blocks=16 [ 65.071867][ T4607] EXT4-fs (loop0): Block reservation details [ 65.078446][ T4607] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 65.086434][ T4617] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 65.098899][ T4617] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.098899][ T4617] [ 65.128931][ T4607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.230784][ T4623] lo speed is unknown, defaulting to 1000 [ 65.341329][ T4587] loop4: detected capacity change from 0 to 512 [ 65.349520][ T4587] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.304: invalid fast symlink length 39 [ 65.361684][ T4587] EXT4-fs (loop4): get root inode failed [ 65.367414][ T4587] EXT4-fs (loop4): mount failed [ 65.573196][ T4633] validate_nla: 1 callbacks suppressed [ 65.573211][ T4633] netlink: 'syz.1.318': attribute type 6 has an invalid length. [ 65.693915][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 65.836008][ T4641] rdma_op ffff88811ad75d80 conn xmit_rdma 0000000000000000 [ 65.884482][ T4638] lo speed is unknown, defaulting to 1000 [ 65.964024][ T4645] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 65.978274][ T4647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.048755][ T4654] loop4: detected capacity change from 0 to 512 [ 66.055671][ T4654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.077416][ T4654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.086810][ T4654] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.326: inode #15: comm syz.4.326: iget: illegal inode # [ 66.100431][ T4654] EXT4-fs (loop4): Remounting filesystem read-only [ 66.111398][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 66.111409][ T29] audit: type=1326 audit(66.088:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc132015e67 code=0x7ffc0000 [ 66.139821][ T29] audit: type=1326 audit(66.088:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc131fbb099 code=0x7ffc0000 [ 66.162113][ T29] audit: type=1326 audit(66.088:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 66.185645][ T29] audit: type=1326 audit(66.098:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc132015e67 code=0x7ffc0000 [ 66.207845][ T29] audit: type=1326 audit(66.098:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc131fbb099 code=0x7ffc0000 [ 66.229842][ T29] audit: type=1326 audit(66.098:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 66.252239][ T29] audit: type=1326 audit(66.118:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc132015e67 code=0x7ffc0000 [ 66.274400][ T29] audit: type=1326 audit(66.118:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc131fbb099 code=0x7ffc0000 [ 66.296621][ T29] audit: type=1326 audit(66.118:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 66.319006][ T29] audit: type=1326 audit(66.128:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc132015e67 code=0x7ffc0000 [ 66.431030][ T4669] loop0: detected capacity change from 0 to 512 [ 66.451556][ T4666] lo speed is unknown, defaulting to 1000 [ 66.458302][ T4664] infiniband syz2: set active [ 66.463033][ T4664] infiniband syz2: added bond0 [ 66.470401][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.485299][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.500740][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.504104][ T4664] RDS/IB: syz2: added [ 66.565290][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.579415][ T4664] smc: adding ib device syz2 with port count 1 [ 66.585878][ T4664] smc: ib device syz2 port 1 has no pnetid [ 66.597250][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.615336][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.629622][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.644099][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.660592][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.675903][ T3318] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.689596][ T4676] netlink: 'syz.2.332': attribute type 6 has an invalid length. [ 66.743751][ T4502] EXT4-fs unmount: 23 callbacks suppressed [ 66.743765][ T4502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.876000][ T4679] loop2: detected capacity change from 0 to 512 [ 66.888595][ T4681] : renamed from vlan0 [ 66.901347][ T4681] loop1: detected capacity change from 0 to 1156 [ 66.923657][ T4679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.938173][ T4679] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.334: Failed to acquire dquot type 0 [ 66.950189][ T4679] EXT4-fs (loop2): Remounting filesystem read-only [ 66.983988][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.117965][ T4704] lo speed is unknown, defaulting to 1000 [ 67.192583][ T4691] lo speed is unknown, defaulting to 1000 [ 67.371704][ T4708] lo speed is unknown, defaulting to 1000 [ 67.619254][ T4711] loop4: detected capacity change from 0 to 512 [ 67.639587][ T4711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.340: bg 0: block 248: padding at end of block bitmap is not set [ 67.660183][ T4711] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.340: Failed to acquire dquot type 1 [ 67.664182][ T4691] chnl_net:caif_netlink_parms(): no params data found [ 67.686235][ T4711] EXT4-fs (loop4): 1 truncate cleaned up [ 67.693453][ T4711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.725647][ T4711] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.340: Failed to acquire dquot type 1 [ 67.746620][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.753976][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.769161][ T4691] bridge_slave_0: entered allmulticast mode [ 67.775902][ T4691] bridge_slave_0: entered promiscuous mode [ 67.776220][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.791878][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 67.841535][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.848754][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.856335][ T4691] bridge_slave_1: entered allmulticast mode [ 67.863144][ T4691] bridge_slave_1: entered promiscuous mode [ 67.864423][ T4727] loop4: detected capacity change from 0 to 512 [ 67.887424][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.903056][ T4727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.923909][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.958420][ T4727] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.970350][ T4727] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.343: inode #15: comm syz.4.343: iget: illegal inode # [ 67.972453][ T4731] loop9: detected capacity change from 0 to 7 [ 67.991457][ T4727] EXT4-fs (loop4): Remounting filesystem read-only [ 68.003352][ T4731] buffer_io_error: 3 callbacks suppressed [ 68.003366][ T4731] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.005853][ T4727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.009534][ T4731] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.037063][ T4731] loop9: unable to read partition table [ 68.042910][ T4731] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 68.042910][ T4731] ) failed (rc=-5) [ 68.057623][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.065747][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.074641][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.082804][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.090882][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.108688][ T4691] team0: Port device team_slave_0 added [ 68.123170][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.140939][ T4691] team0: Port device team_slave_1 added [ 68.197033][ T4739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.346'. [ 68.206031][ T4739] netlink: 108 bytes leftover after parsing attributes in process `syz.4.346'. [ 68.251522][ T4739] loop4: detected capacity change from 0 to 512 [ 68.277264][ T4739] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.346: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6, max 4(4), depth 0(0) [ 68.297099][ T4750] 9pnet_fd: Insufficient options for proto=fd [ 68.304804][ T4739] EXT4-fs (loop4): get root inode failed [ 68.310554][ T4739] EXT4-fs (loop4): mount failed [ 68.316442][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.323474][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.350197][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.362012][ T4750] vhci_hcd: invalid port number 11 [ 68.367189][ T4750] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 68.376455][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.384044][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.410878][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.430141][ T4753] netlink: 'syz.3.350': attribute type 13 has an invalid length. [ 68.449669][ T4750] pim6reg: entered allmulticast mode [ 68.498653][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.505829][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.548948][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.562113][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.616957][ T3477] lo speed is unknown, defaulting to 1000 [ 68.623576][ T3477] syz0: Port: 1 Link DOWN [ 68.648913][ T4758] pim6reg: left allmulticast mode [ 68.655351][ T3532] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.675738][ T4691] hsr_slave_0: entered promiscuous mode [ 68.682543][ T4691] hsr_slave_1: entered promiscuous mode [ 68.688820][ T4691] debugfs: 'hsr0' already exists in 'hsr' [ 68.694657][ T4691] Cannot create hsr debugfs directory [ 68.700258][ T3532] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.718279][ T4739] lo speed is unknown, defaulting to 1000 [ 68.756425][ T4762] : renamed from vlan0 [ 68.762172][ T3532] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.771988][ T3532] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.787690][ T4746] lo speed is unknown, defaulting to 1000 [ 68.794569][ T4762] loop3: detected capacity change from 0 to 1156 [ 68.830059][ T4760] lo speed is unknown, defaulting to 1000 [ 68.971509][ T4691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.984022][ T4691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.996708][ T4691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.011406][ T4691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.083076][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.112839][ T4691] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.122945][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.130165][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.142531][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.149963][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.184773][ T4691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.195563][ T4691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.255627][ T4786] loop4: detected capacity change from 0 to 128 [ 69.290877][ T4786] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.298909][ T4786] FAT-fs (loop4): Filesystem has been set read-only [ 69.311311][ T4786] syz.4.356: attempt to access beyond end of device [ 69.311311][ T4786] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 69.330634][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.344848][ T4786] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.353589][ T4786] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.362274][ T4786] syz.4.356: attempt to access beyond end of device [ 69.362274][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.376208][ T4786] syz.4.356: attempt to access beyond end of device [ 69.376208][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.391367][ T4786] syz.4.356: attempt to access beyond end of device [ 69.391367][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.404901][ T4786] syz.4.356: attempt to access beyond end of device [ 69.404901][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.427330][ T4786] syz.4.356: attempt to access beyond end of device [ 69.427330][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.441275][ T4786] syz.4.356: attempt to access beyond end of device [ 69.441275][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.457540][ T4786] syz.4.356: attempt to access beyond end of device [ 69.457540][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.484382][ T4786] syz.4.356: attempt to access beyond end of device [ 69.484382][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.508499][ T4786] syz.4.356: attempt to access beyond end of device [ 69.508499][ T4786] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.752947][ T4691] veth0_vlan: entered promiscuous mode [ 69.762986][ T4691] veth1_vlan: entered promiscuous mode [ 69.971477][ T4813] loop1: detected capacity change from 0 to 512 [ 70.012006][ T4813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.033947][ T4691] veth0_macvtap: entered promiscuous mode [ 70.039981][ T4815] loop2: detected capacity change from 0 to 512 [ 70.071509][ T4815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.075092][ T4691] veth1_macvtap: entered promiscuous mode [ 70.118027][ T4813] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 70.138794][ T4815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.157324][ T4815] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.360: inode #15: comm syz.2.360: iget: illegal inode # [ 70.168379][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.187823][ T4813] EXT4-fs (loop1): 1 truncate cleaned up [ 70.198952][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.208719][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.222992][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.237629][ T4815] EXT4-fs (loop2): Remounting filesystem read-only [ 70.250333][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.267996][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.289138][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.348546][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.366237][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.781252][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.118090][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 71.118106][ T29] audit: type=1326 audit(71.098:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f75453b0d94 code=0x7ffc0000 [ 71.277733][ T29] audit: type=1326 audit(71.128:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75453adc2a code=0x7ffc0000 [ 71.293037][ T4848] lo speed is unknown, defaulting to 1000 [ 71.301004][ T29] audit: type=1326 audit(71.128:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.329346][ T29] audit: type=1326 audit(71.128:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.352147][ T29] audit: type=1326 audit(71.138:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.375617][ T29] audit: type=1326 audit(71.138:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.385692][ T4851] loop5: detected capacity change from 0 to 2048 [ 71.399101][ T29] audit: type=1326 audit(71.138:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.427391][ T29] audit: type=1326 audit(71.138:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.450558][ T29] audit: type=1326 audit(71.138:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.473344][ T29] audit: type=1326 audit(71.138:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 71.603111][ T4851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.740269][ T4862] xt_NFQUEUE: number of total queues is 0 [ 71.990166][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.147671][ T4865] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 72.174048][ T4867] lo speed is unknown, defaulting to 1000 [ 72.493750][ T4888] loop4: detected capacity change from 0 to 128 [ 72.639725][ T4886] __nla_validate_parse: 4 callbacks suppressed [ 72.639739][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 72.747419][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 73.394603][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'. [ 73.442568][ T4905] loop1: detected capacity change from 0 to 2048 [ 73.500924][ T4907] xt_limit: Overflow, try lower: 0/0 [ 73.544385][ T4907] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 73.570178][ T4401] Alternate GPT is invalid, using primary GPT. [ 73.576679][ T4401] loop1: p1 p2 p3 [ 73.580602][ T4401] loop1: partition table partially beyond EOD, truncated [ 73.599282][ T4907] tipc: Started in network mode [ 73.604346][ T4907] tipc: Node identity 4, cluster identity 4711 [ 73.610656][ T4907] tipc: Node number set to 4 [ 73.619571][ T4905] Alternate GPT is invalid, using primary GPT. [ 73.625851][ T4905] loop1: p1 p2 p3 [ 73.629725][ T4905] loop1: partition table partially beyond EOD, truncated [ 73.784511][ T4902] lo speed is unknown, defaulting to 1000 [ 73.850994][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 73.859966][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 74.004334][ T4917] loop2: detected capacity change from 0 to 128 [ 74.064773][ T4917] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.087484][ T4914] lo speed is unknown, defaulting to 1000 [ 74.149114][ T4917] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.463026][ T4928] lo speed is unknown, defaulting to 1000 [ 74.758779][ T4934] SELinux: Context is not valid (left unmapped). [ 74.770491][ T4938] loop5: detected capacity change from 0 to 512 [ 74.799838][ T4938] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.823253][ T4938] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.837888][ T4938] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.393: inode #15: comm syz.5.393: iget: illegal inode # [ 74.864777][ T4938] EXT4-fs (loop5): Remounting filesystem read-only [ 74.880725][ T4938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.063967][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.076791][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 75.122820][ T4940] lo speed is unknown, defaulting to 1000 [ 75.158186][ T4950] pim6reg: entered allmulticast mode [ 75.214083][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'. [ 75.597030][ T4962] lo speed is unknown, defaulting to 1000 [ 75.713746][ T4970] loop3: detected capacity change from 0 to 512 [ 75.729732][ T4970] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.752160][ T4970] EXT4-fs (loop3): mount failed [ 76.114969][ T4989] loop1: detected capacity change from 0 to 2048 [ 76.128754][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.142287][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 76.142300][ T29] audit: type=1400 audit(76.118:3939): avc: denied { add_name } for pid=4988 comm="syz.1.409" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.148374][ T4989] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 76.148719][ T29] audit: type=1400 audit(76.118:3940): avc: denied { create } for pid=4988 comm="syz.1.409" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.169469][ T4989] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 76.176967][ T29] audit: type=1400 audit(76.118:3941): avc: denied { write open } for pid=4988 comm="syz.1.409" path="/84/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.199050][ T4989] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 76.206422][ T4992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.228329][ T4989] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.228329][ T4989] [ 76.248411][ T29] audit: type=1400 audit(76.118:3942): avc: denied { read write } for pid=4988 comm="syz.1.409" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.257340][ T4989] EXT4-fs (loop1): Total free blocks count 0 [ 76.279707][ T29] audit: type=1400 audit(76.118:3943): avc: denied { open } for pid=4988 comm="syz.1.409" path="/84/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.310210][ T4993] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 76.317815][ T4989] EXT4-fs (loop1): Free/Dirty block details [ 76.323720][ T4989] EXT4-fs (loop1): free_blocks=2415919504 [ 76.327215][ T29] audit: type=1400 audit(76.288:3944): avc: denied { ioctl } for pid=4988 comm="syz.1.409" path="/84/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.329844][ T4989] EXT4-fs (loop1): dirty_blocks=64 [ 76.359922][ T4989] EXT4-fs (loop1): Block reservation details [ 76.366567][ T4989] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 76.369318][ T29] audit: type=1326 audit(76.338:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.2.410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35c7e7efc9 code=0x0 [ 76.402644][ T4992] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 76.416661][ T29] audit: type=1400 audit(76.388:3946): avc: denied { ioctl } for pid=4988 comm="syz.1.409" path="/84/file1/bus" dev="loop1" ino=18 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.485361][ T29] audit: type=1400 audit(76.458:3947): avc: denied { module_request } for pid=4999 comm="syz.1.411" kmod="nft-chain-1-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.522964][ T5000] netlink: 'syz.1.411': attribute type 13 has an invalid length. [ 76.531898][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 76.540989][ T29] audit: type=1400 audit(76.508:3948): avc: denied { tracepoint } for pid=4999 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.761716][ T5013] loop1: detected capacity change from 0 to 512 [ 76.790797][ T5013] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.812195][ T5013] EXT4-fs (loop1): mount failed [ 76.837076][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.158733][ T5025] lo speed is unknown, defaulting to 1000 [ 77.511681][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 77.910779][ T5038] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.201709][ T5043] loop2: detected capacity change from 0 to 2048 [ 78.590236][ T5065] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 78.627190][ T5068] loop3: detected capacity change from 0 to 512 [ 78.794564][ T5068] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.432: couldn't read orphan inode 26 (err -116) [ 78.807466][ T5068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.881845][ T5068] lo speed is unknown, defaulting to 1000 [ 79.196014][ T5058] loop4: detected capacity change from 0 to 8192 [ 79.238560][ T5058] loop4: p1 p4 < > [ 79.242496][ T5058] loop4: p1 start 4261412864 is beyond EOD, truncated [ 79.282960][ T3003] loop4: p1 p4 < > [ 79.297661][ T3003] loop4: p1 start 4261412864 is beyond EOD, truncated [ 79.356746][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.426603][ T3824] udevd[3824]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.537934][ T5080] lo speed is unknown, defaulting to 1000 [ 79.572587][ T5086] netlink: 'syz.5.439': attribute type 5 has an invalid length. [ 79.580299][ T5086] __nla_validate_parse: 3 callbacks suppressed [ 79.580314][ T5086] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.439'. [ 79.725369][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'. [ 79.739064][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'. [ 79.749247][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.440'. [ 79.768627][ T5088] netlink: 16 bytes leftover after parsing attributes in process `wޡ'. [ 79.870688][ T5105] IPv6: Can't replace route, no match found [ 80.279950][ T5120] loop1: detected capacity change from 0 to 512 [ 80.301068][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 80.312201][ T5120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.326654][ C0] vcan0: j1939_session_tx_dat: 0xffff88811ab9da00: queue data error: -100 [ 80.355286][ T5118] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 80.355323][ T5118] EXT4-fs: Cannot change journaled quota options when quota turned on [ 80.396310][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.556189][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 80.556413][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 80.593745][ T5134] netlink: 'syz.1.452': attribute type 6 has an invalid length. [ 80.780634][ T5145] lo speed is unknown, defaulting to 1000 [ 81.573151][ T5152] lo speed is unknown, defaulting to 1000 [ 81.674521][ T5145] loop1: detected capacity change from 0 to 512 [ 81.683680][ T5145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.731343][ T5145] EXT4-fs (loop1): 1 truncate cleaned up [ 81.738203][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 81.738293][ T29] audit: type=1400 audit(81.718:4376): avc: denied { write } for pid=5155 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.739061][ T5145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.750664][ T29] audit: type=1400 audit(81.728:4377): avc: denied { create } for pid=5155 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.796084][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.803160][ T29] audit: type=1400 audit(81.758:4378): avc: denied { connect } for pid=5155 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.823003][ T29] audit: type=1400 audit(81.758:4379): avc: denied { read write } for pid=5155 comm="syz.3.457" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.845853][ T29] audit: type=1400 audit(81.758:4380): avc: denied { open } for pid=5155 comm="syz.3.457" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.883615][ T3388] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.898300][ T29] audit: type=1400 audit(81.868:4381): avc: denied { setopt } for pid=5161 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.919463][ T5158] lo speed is unknown, defaulting to 1000 [ 82.025680][ T5166] netlink: 'syz.2.459': attribute type 6 has an invalid length. [ 82.040516][ T29] audit: type=1400 audit(81.998:4382): avc: denied { listen } for pid=5165 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.057164][ T5169] netlink: 'syz.4.460': attribute type 39 has an invalid length. [ 82.136835][ T29] audit: type=1326 audit(82.108:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.3.462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7cb40efc9 code=0x0 [ 82.283775][ T29] audit: type=1400 audit(82.258:4384): avc: denied { bind } for pid=5177 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.302905][ T29] audit: type=1400 audit(82.258:4385): avc: denied { name_bind } for pid=5177 comm="syz.2.464" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.349115][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.116353][ T5197] netlink: 16 bytes leftover after parsing attributes in process `wޡ'. [ 83.440460][ T5207] lo speed is unknown, defaulting to 1000 [ 83.510216][ T5208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.473'. [ 84.135490][ T5234] wg2: entered promiscuous mode [ 84.135507][ T5234] wg2: entered allmulticast mode [ 84.377305][ T5244] IPv6: Can't replace route, no match found [ 84.407091][ T5246] netlink: 'syz.2.485': attribute type 5 has an invalid length. [ 84.583737][ T5250] can: request_module (can-proto-5) failed. [ 85.182365][ T5294] netlink: 'syz.5.491': attribute type 6 has an invalid length. [ 85.189475][ T5287] lo speed is unknown, defaulting to 1000 [ 85.343050][ T5283] lo speed is unknown, defaulting to 1000 [ 85.510400][ T5349] __nla_validate_parse: 1 callbacks suppressed [ 85.510413][ T5349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.550756][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.560385][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.608942][ T5301] lo speed is unknown, defaulting to 1000 [ 85.619555][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.769513][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.778442][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.789343][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.876649][ T5363] loop9: detected capacity change from 0 to 7 [ 85.883205][ T5363] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.891773][ T5363] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.899732][ T5363] loop9: unable to read partition table [ 85.905495][ T5363] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 85.905495][ T5363] ) failed (rc=-5) [ 85.945676][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.005142][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 86.017414][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.075923][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.121607][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 86.131137][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 86.178145][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.237929][ T3824] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.329058][ T5375] lo speed is unknown, defaulting to 1000 [ 86.330306][ T5382] loop4: detected capacity change from 0 to 128 [ 86.351996][ T5382] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.473069][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.569364][ T5396] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 86.604379][ T5395] lo speed is unknown, defaulting to 1000 [ 86.723667][ T5404] sd 0:0:1:0: device reset [ 86.729237][ T5404] hsr_slave_0: left promiscuous mode [ 86.735025][ T5404] hsr_slave_1: left promiscuous mode [ 86.774603][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 86.774617][ T29] audit: type=1326 audit(86.748:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.805085][ T29] audit: type=1326 audit(86.748:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.827750][ T29] audit: type=1326 audit(86.748:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.850495][ T29] audit: type=1326 audit(86.748:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.873695][ T29] audit: type=1326 audit(86.748:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.896476][ T29] audit: type=1326 audit(86.748:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.919509][ T29] audit: type=1326 audit(86.748:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.942416][ T29] audit: type=1326 audit(86.748:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.965541][ T29] audit: type=1326 audit(86.748:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.988320][ T29] audit: type=1326 audit(86.748:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13201efc9 code=0x7ffc0000 [ 86.996922][ T5407] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5407 comm=syz.4.508 [ 87.400777][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.415126][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.794899][ T5440] syz.1.518 uses obsolete (PF_INET,SOCK_PACKET) [ 87.835160][ T5442] 9pnet_virtio: no channels available for device 127.0.0.1 [ 87.934371][ T5446] loop4: detected capacity change from 0 to 512 [ 87.956838][ T5447] siw: device registration error -23 [ 87.965020][ T5446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.982482][ T5446] netlink: 'syz.4.522': attribute type 4 has an invalid length. [ 88.040363][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.096323][ T5457] loop3: detected capacity change from 0 to 256 [ 88.105437][ T5458] loop4: detected capacity change from 0 to 128 [ 88.118767][ T5457] vfat: Unknown parameter '?`7Xc UA`'GGNL. [ 88.118767][ T5457] _w)B4%hWԳ"eZC/ý!]&NKYR -o_!|' [ 88.191308][ T5454] lo speed is unknown, defaulting to 1000 [ 88.192220][ T5458] SELinux: failed to load policy [ 88.239767][ T5451] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5451 comm=syz.2.523 [ 88.252696][ T5457] loop3: detected capacity change from 0 to 8192 [ 88.473084][ T5470] 0X: renamed from caif0 [ 88.480337][ T5470] 0X: entered allmulticast mode [ 88.485553][ T5470] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 89.244348][ T5490] lo speed is unknown, defaulting to 1000 [ 89.571375][ T5496] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 89.614222][ T5503] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 89.692077][ T5508] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 89.726038][ T5513] SELinux: policydb string length 3866632 does not match expected length 8 [ 89.735299][ T5513] SELinux: failed to load policy [ 89.766736][ T5509] lo speed is unknown, defaulting to 1000 [ 89.830580][ T5511] lo speed is unknown, defaulting to 1000 [ 89.930846][ T5522] netlink: 'syz.2.544': attribute type 6 has an invalid length. [ 90.080094][ T5528] netlink: 'syz.2.545': attribute type 30 has an invalid length. [ 90.646084][ T5536] loop4: detected capacity change from 0 to 4096 [ 90.657338][ T5536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.693179][ T5536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.753177][ T5536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.844493][ T5544] __nla_validate_parse: 13 callbacks suppressed [ 90.844507][ T5544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.549'. [ 90.870397][ T5544] xt_hashlimit: max too large, truncated to 1048576 [ 91.054891][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 91.055557][ T5557] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.173821][ T5562] netlink: 'syz.2.554': attribute type 6 has an invalid length. [ 91.230733][ T5565] netlink: 'syz.2.555': attribute type 6 has an invalid length. [ 91.237045][ T5563] lo speed is unknown, defaulting to 1000 [ 91.393196][ T5569] lo speed is unknown, defaulting to 1000 [ 91.786062][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 91.786074][ T29] audit: type=1326 audit(91.758:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8601e35e67 code=0x7ffc0000 [ 91.815341][ T29] audit: type=1326 audit(91.758:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8601ddb099 code=0x7ffc0000 [ 91.838533][ T29] audit: type=1326 audit(91.758:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 91.861357][ T29] audit: type=1326 audit(91.768:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8601e35e67 code=0x7ffc0000 [ 91.884453][ T29] audit: type=1326 audit(91.768:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8601ddb099 code=0x7ffc0000 [ 91.907811][ T29] audit: type=1326 audit(91.768:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 91.930766][ T29] audit: type=1326 audit(91.768:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8601e35e67 code=0x7ffc0000 [ 91.953919][ T5583] loop5: detected capacity change from 0 to 128 [ 91.954718][ T5583] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.960624][ T29] audit: type=1326 audit(91.768:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8601ddb099 code=0x7ffc0000 [ 91.960650][ T29] audit: type=1326 audit(91.768:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 92.019490][ T5583] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.029669][ T29] audit: type=1326 audit(91.788:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8601e35e67 code=0x7ffc0000 [ 92.062768][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'. [ 92.130432][ T41] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.161898][ T5587] loop5: detected capacity change from 0 to 512 [ 92.178221][ T5587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.210948][ T5587] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.217749][ T5587] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.563: inode #15: comm syz.5.563: iget: illegal inode # [ 92.231382][ T5587] EXT4-fs (loop5): Remounting filesystem read-only [ 92.238778][ T5587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.264027][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.292448][ T5593] netlink: 'syz.5.565': attribute type 6 has an invalid length. [ 92.453242][ T5598] lo speed is unknown, defaulting to 1000 [ 92.610588][ T5596] netlink: 'syz.4.567': attribute type 6 has an invalid length. [ 92.763889][ T5600] lo speed is unknown, defaulting to 1000 [ 92.773903][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'. [ 93.211467][ T5624] loop3: detected capacity change from 0 to 512 [ 93.218908][ T5619] lo speed is unknown, defaulting to 1000 [ 93.381640][ T5624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.393170][ T5624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.400138][ T5624] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.575: inode #15: comm syz.3.575: iget: illegal inode # [ 93.414005][ T5624] EXT4-fs (loop3): Remounting filesystem read-only [ 93.421345][ T5624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.512339][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.550404][ T5629] netlink: 'syz.3.577': attribute type 6 has an invalid length. [ 94.196514][ T5651] bridge0: entered promiscuous mode [ 94.255948][ T5651] macvtap1: entered allmulticast mode [ 94.261559][ T5651] bridge0: entered allmulticast mode [ 94.318831][ T5651] bridge0: port 1(macvtap1) entered blocking state [ 94.325583][ T5651] bridge0: port 1(macvtap1) entered disabled state [ 94.386577][ T5651] bridge0: left allmulticast mode [ 94.392624][ T5651] bridge0: left promiscuous mode [ 94.633080][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 95.581295][ T5673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.591465][ T5671] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.600929][ T5671] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 95.734607][ T5678] loop4: detected capacity change from 0 to 1024 [ 95.743825][ T5678] EXT4-fs: Ignoring removed orlov option [ 95.749602][ T5678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.756424][ T5679] loop2: detected capacity change from 0 to 2048 [ 95.802118][ T5678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.822758][ T5679] Alternate GPT is invalid, using primary GPT. [ 95.829832][ T5679] loop2: p2 p3 p7 [ 95.885067][ T3003] Alternate GPT is invalid, using primary GPT. [ 95.892411][ T3003] loop2: p2 p3 p7 [ 96.095384][ T5685] lo speed is unknown, defaulting to 1000 [ 96.135860][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.420274][ T5695] netlink: 'syz.4.595': attribute type 6 has an invalid length. [ 96.730653][ T5699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.755319][ T5667] syz.3.588 (5667) used greatest stack depth: 6376 bytes left [ 96.784759][ T5704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.598'. [ 96.786519][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 96.806103][ T5699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.821332][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 96.821346][ T29] audit: type=1400 audit(96.798:6415): avc: denied { create } for pid=5700 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.850706][ T29] audit: type=1400 audit(96.828:6416): avc: denied { setopt } for pid=5700 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.889220][ T29] audit: type=1326 audit(96.858:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 96.913269][ T29] audit: type=1326 audit(96.858:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 96.936200][ T29] audit: type=1326 audit(96.858:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 96.959541][ T29] audit: type=1326 audit(96.858:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 96.982382][ T29] audit: type=1326 audit(96.858:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 97.005924][ T29] audit: type=1326 audit(96.858:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 97.029947][ T29] audit: type=1326 audit(96.858:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 97.052794][ T29] audit: type=1326 audit(96.858:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 97.084956][ T5699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.138218][ T5704] lo speed is unknown, defaulting to 1000 [ 97.211240][ T5699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.275455][ T416] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.308526][ T416] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.334834][ T416] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.388143][ T416] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.474097][ T5724] netlink: 'syz.4.604': attribute type 6 has an invalid length. [ 97.505461][ T5728] netlink: 172 bytes leftover after parsing attributes in process `syz.4.606'. [ 97.524981][ T5728] siw: device registration error -23 [ 97.610668][ T5734] loop3: detected capacity change from 0 to 8192 [ 97.619847][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.620570][ T5730] lo speed is unknown, defaulting to 1000 [ 97.628960][ T5734] FAT-fs (loop3): Filesystem has been set read-only [ 97.641096][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.650573][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.659572][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.668492][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.678847][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 97.687530][ T5734] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 98.383730][ T5753] loop5: detected capacity change from 0 to 164 [ 98.389447][ T5746] lo speed is unknown, defaulting to 1000 [ 98.405304][ T5753] bio_check_eod: 9920 callbacks suppressed [ 98.405317][ T5753] syz.5.612: attempt to access beyond end of device [ 98.405317][ T5753] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 98.536282][ T5753] syz.5.612: attempt to access beyond end of device [ 98.536282][ T5753] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 98.570106][ T5760] netlink: 'syz.3.616': attribute type 6 has an invalid length. [ 98.604640][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 98.645303][ T5766] loop3: detected capacity change from 0 to 2048 [ 98.689929][ T5766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.756987][ T5766] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 98.800420][ T5766] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 98.813073][ T5766] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.813073][ T5766] [ 98.822830][ T5766] EXT4-fs (loop3): Total free blocks count 0 [ 98.829860][ T5766] EXT4-fs (loop3): Free/Dirty block details [ 98.835808][ T5766] EXT4-fs (loop3): free_blocks=2415919504 [ 98.841560][ T5766] EXT4-fs (loop3): dirty_blocks=64 [ 98.846750][ T5766] EXT4-fs (loop3): Block reservation details [ 98.852747][ T5766] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 98.868293][ T5775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.876014][ T5775] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 98.887981][ T5775] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 98.946327][ T5779] loop3: detected capacity change from 0 to 512 [ 98.954031][ T5779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.990822][ T5779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.997360][ T5779] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.621: inode #15: comm syz.3.621: iget: illegal inode # [ 99.012849][ T5779] EXT4-fs (loop3): Remounting filesystem read-only [ 99.033905][ T5784] loop4: detected capacity change from 0 to 128 [ 99.034158][ T5779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.040982][ T5784] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.077498][ T5784] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.087726][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.124557][ T5788] netlink: 'syz.5.625': attribute type 6 has an invalid length. [ 99.136632][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 99.252989][ T5336] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.338796][ T5801] netlink: 'syz.4.628': attribute type 6 has an invalid length. [ 99.422595][ T5804] IPv6: Can't replace route, no match found [ 99.436452][ T5805] xt_NFQUEUE: number of total queues is 0 [ 99.480959][ T5807] SELinux: policydb string length 3866632 does not match expected length 8 [ 99.515289][ T5807] SELinux: failed to load policy [ 99.852006][ T5814] lo speed is unknown, defaulting to 1000 [ 100.083052][ T5825] netlink: 'syz.1.637': attribute type 6 has an invalid length. [ 100.174965][ T5831] lo speed is unknown, defaulting to 1000 [ 100.218419][ T5834] lo speed is unknown, defaulting to 1000 [ 100.429292][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.643'. [ 100.880227][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 101.025111][ T5862] netlink: 'syz.1.649': attribute type 6 has an invalid length. [ 101.077964][ T5865] lo speed is unknown, defaulting to 1000 [ 101.195460][ T5870] loop3: detected capacity change from 0 to 256 [ 101.215076][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.222526][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.250776][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.258715][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.270900][ T5866] lo speed is unknown, defaulting to 1000 [ 101.350371][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.652'. [ 101.388356][ T5880] netlink: 19 bytes leftover after parsing attributes in process `syz.5.654'. [ 101.399387][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 101.408411][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.415884][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.723380][ T5885] lo speed is unknown, defaulting to 1000 [ 101.731624][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.739790][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.747865][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.755321][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.899082][ T5894] __nla_validate_parse: 1 callbacks suppressed [ 101.899097][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.658'. [ 101.918434][ T29] kauditd_printk_skb: 1433 callbacks suppressed [ 101.918522][ T29] audit: type=1326 audit(2147483749.892:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 101.949740][ T29] audit: type=1326 audit(2147483749.892:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 102.069353][ T5896] lo speed is unknown, defaulting to 1000 [ 102.167229][ T29] audit: type=1326 audit(2147483750.132:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.222267][ T5900] loop5: detected capacity change from 0 to 512 [ 102.227620][ T29] audit: type=1326 audit(2147483750.162:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.253332][ T29] audit: type=1326 audit(2147483750.162:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.277136][ T29] audit: type=1326 audit(2147483750.162:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.300535][ T29] audit: type=1326 audit(2147483750.162:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.324637][ T29] audit: type=1326 audit(2147483750.172:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.348438][ T29] audit: type=1326 audit(2147483750.172:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.372355][ T29] audit: type=1326 audit(2147483750.172:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 102.400611][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.661: bad orphan inode 11862016 [ 102.412832][ T5900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.425569][ T5900] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.637535][ T5914] lo speed is unknown, defaulting to 1000 [ 102.684358][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 102.700377][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.780638][ T5917] lo speed is unknown, defaulting to 1000 [ 102.852844][ T5928] netlink: 56 bytes leftover after parsing attributes in process `syz.2.668'. [ 102.862034][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 103.100524][ T5938] netlink: 'syz.1.671': attribute type 6 has an invalid length. [ 103.114485][ T5940] loop3: detected capacity change from 0 to 2048 [ 103.189939][ T5940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.220754][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.670'. [ 103.247194][ T5940] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 103.260627][ T5947] loop5: detected capacity change from 0 to 512 [ 103.291051][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 103.317815][ T5940] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 103.328544][ T5951] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.330222][ T5940] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.330222][ T5940] [ 103.337130][ T5947] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.674: EA inode hash validation failed [ 103.346427][ T5940] EXT4-fs (loop3): Total free blocks count 0 [ 103.364995][ T5940] EXT4-fs (loop3): Free/Dirty block details [ 103.365010][ T5940] EXT4-fs (loop3): free_blocks=2415919504 [ 103.376746][ T5940] EXT4-fs (loop3): dirty_blocks=64 [ 103.378464][ T5951] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 103.381955][ T5940] EXT4-fs (loop3): Block reservation details [ 103.395502][ T5940] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 103.401991][ T5947] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.674: corrupted inode contents [ 103.422102][ T5951] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 103.427789][ T5947] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.674: mark_inode_dirty error [ 103.448706][ T5952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'. [ 103.459497][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'. [ 103.463737][ T5947] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.674: corrupted inode contents [ 103.503871][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.676'. [ 103.528462][ T5947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.674: mark_inode_dirty error [ 103.561152][ T5947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.674: mark inode dirty (error -117) [ 103.610642][ T5947] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 103.632919][ T5947] EXT4-fs (loop5): 1 orphan inode deleted [ 103.641640][ T5947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.652020][ T5954] lo speed is unknown, defaulting to 1000 [ 103.758825][ T5964] lo speed is unknown, defaulting to 1000 [ 103.768964][ T5964] lo speed is unknown, defaulting to 1000 [ 103.781132][ T5964] lo speed is unknown, defaulting to 1000 [ 103.892441][ T5964] infiniband sz1: set active [ 103.897172][ T5964] infiniband sz1: added lo [ 103.913433][ T3579] lo speed is unknown, defaulting to 1000 [ 103.970255][ T5964] RDS/IB: sz1: added [ 103.997866][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.017730][ T5964] smc: adding ib device sz1 with port count 1 [ 104.034526][ T5964] smc: ib device sz1 port 1 has no pnetid [ 104.040810][ T3388] lo speed is unknown, defaulting to 1000 [ 104.082816][ T5964] lo speed is unknown, defaulting to 1000 [ 104.209713][ T5964] lo speed is unknown, defaulting to 1000 [ 104.302699][ T5964] lo speed is unknown, defaulting to 1000 [ 104.371353][ T5964] lo speed is unknown, defaulting to 1000 [ 104.409130][ T5964] lo speed is unknown, defaulting to 1000 [ 104.450385][ T5964] lo speed is unknown, defaulting to 1000 [ 104.582245][ T6001] loop4: detected capacity change from 0 to 128 [ 104.603070][ T6002] netlink: 172 bytes leftover after parsing attributes in process `syz.2.689'. [ 104.631748][ T6001] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.640372][ T6001] FAT-fs (loop4): Filesystem has been set read-only [ 105.181009][ T5985] loop3: detected capacity change from 0 to 512 [ 105.199594][ T5985] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.683: bg 0: block 248: padding at end of block bitmap is not set [ 105.214374][ T5985] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.683: Failed to acquire dquot type 1 [ 105.227716][ T5985] EXT4-fs (loop3): 1 truncate cleaned up [ 105.234061][ T5985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.246943][ T5985] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.430855][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.472117][ T2786] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.484535][ T2786] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.497751][ T2786] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.510684][ T2786] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.622088][ T6043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 105.628645][ T6043] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.636524][ T6043] vhci_hcd vhci_hcd.0: Device attached [ 105.645160][ T6043] xt_hashlimit: max too large, truncated to 1048576 [ 105.653240][ T6043] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 105.698140][ T6051] vhci_hcd: connection closed [ 105.698397][ T123] vhci_hcd: stop threads [ 105.707721][ T123] vhci_hcd: release socket [ 105.712344][ T123] vhci_hcd: disconnect device [ 105.718884][ T6052] veth0_to_team: entered promiscuous mode [ 106.881543][ T6082] loop5: detected capacity change from 0 to 512 [ 106.899395][ T6082] ext4: Unknown parameter 'uid' [ 106.933674][ T29] kauditd_printk_skb: 1287 callbacks suppressed [ 106.933686][ T29] audit: type=1326 audit(2147483755.898:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 107.005689][ T29] audit: type=1326 audit(2147483755.938:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 107.047686][ T29] audit: type=1326 audit(2147483756.028:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.117837][ T29] audit: type=1326 audit(2147483756.048:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.198679][ T29] audit: type=1326 audit(2147483756.178:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.247669][ T29] audit: type=1326 audit(2147483756.198:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.271782][ T29] audit: type=1326 audit(2147483756.198:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.295563][ T29] audit: type=1326 audit(2147483756.198:9160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 107.331185][ T29] audit: type=1400 audit(2147483756.308:9161): avc: denied { create } for pid=6089 comm="syz.5.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.358147][ T29] audit: type=1400 audit(2147483756.338:9162): avc: denied { create } for pid=6096 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.447664][ T6095] loop4: detected capacity change from 0 to 512 [ 107.459889][ T6095] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.717: EA inode hash validation failed [ 107.473510][ T6095] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.717: corrupted inode contents [ 107.487474][ T6091] rdma_rxe: rxe_newlink: failed to add bond0 [ 107.493923][ T6095] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.717: mark_inode_dirty error [ 107.506394][ T6095] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.717: corrupted inode contents [ 107.519033][ T6095] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.717: mark_inode_dirty error [ 107.541632][ T6095] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.717: mark inode dirty (error -117) [ 107.554636][ T6095] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 107.563849][ T6095] EXT4-fs (loop4): 1 orphan inode deleted [ 107.570521][ T6095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.597239][ T6110] __nla_validate_parse: 12 callbacks suppressed [ 107.597254][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 107.603868][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.635257][ T6115] loop4: detected capacity change from 0 to 764 [ 107.650336][ T6115] Symlink component flag not implemented [ 107.656186][ T6115] Symlink component flag not implemented [ 107.662680][ T6115] Symlink component flag not implemented (129) [ 107.669168][ T6115] Symlink component flag not implemented (6) [ 107.676437][ T6117] tmpfs: Unknown parameter 'g>;OeN4[akU{3g7AnUH[7' [ 107.686519][ T6115] rock: directory entry would overflow storage [ 107.692728][ T6115] rock: sig=0x4f50, size=4, remaining=3 [ 107.698410][ T6115] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 107.775011][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 107.901278][ T6131] netlink: 'syz.3.726': attribute type 6 has an invalid length. [ 108.238817][ T6149] netlink: 56 bytes leftover after parsing attributes in process `syz.5.729'. [ 108.248725][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.729'. [ 108.753318][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 109.225365][ T6184] loop3: detected capacity change from 0 to 512 [ 109.236711][ T6184] ------------[ cut here ]------------ [ 109.242450][ T6184] EA inode 11 i_nlink=2 [ 109.242656][ T6184] WARNING: CPU: 0 PID: 6184 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 109.257192][ T6184] Modules linked in: [ 109.261343][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.3.744 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.271202][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.281519][ T6184] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 109.288150][ T6184] Code: 90 49 8d 7e 40 e8 c6 fe b8 ff 4d 8b 6e 40 4c 89 e7 e8 da f9 b8 ff 41 8b 56 48 48 c7 c7 06 c7 55 86 4c 89 ee e8 17 fd 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 98 ca b5 03 0f 1f 84 00 00 00 00 00 [ 109.308542][ T6184] RSP: 0018:ffffc900019ef5a0 EFLAGS: 00010246 [ 109.314702][ T6184] RAX: 4f662fe378ed5700 RBX: ffff88811a0fed18 RCX: 0000000000080000 [ 109.322813][ T6184] RDX: ffffc90004060000 RSI: 0000000000003e09 RDI: 0000000000003e0a [ 109.330864][ T6184] RBP: 0000000000000002 R08: 0001c900019ef427 R09: 0000000000000000 [ 109.338862][ T6184] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a0fecc8 [ 109.346945][ T6184] R13: 000000000000000b R14: ffff88811a0fec80 R15: 0000000000000001 [ 109.355148][ T6184] FS: 00007fc7c9e776c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 109.364266][ T6184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.371339][ T6184] CR2: 00007f2de3188000 CR3: 00000001382a8000 CR4: 00000000003506f0 [ 109.379336][ T6184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.387357][ T6184] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 109.395392][ T6184] Call Trace: [ 109.398770][ T6184] [ 109.401784][ T6184] ext4_xattr_set_entry+0x77f/0x1020 [ 109.407098][ T6184] ext4_xattr_ibody_set+0x184/0x3c0 [ 109.412328][ T6184] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 109.418289][ T6184] __ext4_expand_extra_isize+0x246/0x280 [ 109.424122][ T6184] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 109.429645][ T6184] ext4_evict_inode+0x80e/0xd90 [ 109.434603][ T6184] ? __pfx_ext4_evict_inode+0x10/0x10 [ 109.440078][ T6184] evict+0x2e3/0x550 [ 109.444033][ T6184] ? __dquot_initialize+0x146/0x7c0 [ 109.449318][ T6184] iput+0x4ed/0x650 [ 109.453174][ T6184] ext4_process_orphan+0x1a9/0x1c0 [ 109.458451][ T6184] ext4_orphan_cleanup+0x6a8/0xa00 [ 109.463621][ T6184] ext4_fill_super+0x3483/0x3810 [ 109.468918][ T6184] ? snprintf+0x86/0xb0 [ 109.473296][ T6184] ? set_blocksize+0x1a8/0x310 [ 109.478106][ T6184] ? sb_set_blocksize+0xe3/0x100 [ 109.483170][ T6184] ? setup_bdev_super+0x30e/0x370 [ 109.488252][ T6184] ? __pfx_ext4_fill_super+0x10/0x10 [ 109.493923][ T6184] get_tree_bdev_flags+0x291/0x300 [ 109.499148][ T6184] ? __pfx_ext4_fill_super+0x10/0x10 [ 109.504529][ T6184] get_tree_bdev+0x1f/0x30 [ 109.509124][ T6184] ext4_get_tree+0x1c/0x30 [ 109.513546][ T6184] vfs_get_tree+0x57/0x1d0 [ 109.518009][ T6184] do_new_mount+0x24d/0x660 [ 109.522518][ T6184] path_mount+0x4a5/0xb70 [ 109.526848][ T6184] ? user_path_at+0x109/0x130 [ 109.531832][ T6184] __se_sys_mount+0x28c/0x2e0 [ 109.536677][ T6184] __x64_sys_mount+0x67/0x80 [ 109.541339][ T6184] x64_sys_call+0x2b51/0x3000 [ 109.546040][ T6184] do_syscall_64+0xd2/0x200 [ 109.550617][ T6184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.556711][ T6184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.562688][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.568642][ T6184] RIP: 0033:0x7fc7cb41076a [ 109.573122][ T6184] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.592779][ T6184] RSP: 002b:00007fc7c9e76e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.601223][ T6184] RAX: ffffffffffffffda RBX: 00007fc7c9e76ef0 RCX: 00007fc7cb41076a [ 109.609286][ T6184] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc7c9e76eb0 [ 109.617515][ T6184] RBP: 0000200000000180 R08: 00007fc7c9e76ef0 R09: 0000000001a08700 [ 109.625579][ T6184] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 109.633623][ T6184] R13: 00007fc7c9e76eb0 R14: 0000000000000470 R15: 0000200000000700 [ 109.641806][ T6184] [ 109.644818][ T6184] ---[ end trace 0000000000000000 ]--- [ 109.658926][ T6184] EXT4-fs (loop3): 1 orphan inode deleted [ 109.665030][ T6184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.706294][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.837273][ T6193] lo speed is unknown, defaulting to 1000 [ 109.852987][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 109.879766][ T6197] macvtap1: entered allmulticast mode [ 109.885318][ T6197] bridge0: entered allmulticast mode [ 109.906660][ T6197] bridge0: port 3(macvtap1) entered blocking state [ 109.913353][ T6197] bridge0: port 3(macvtap1) entered disabled state [ 109.938188][ T6197] bridge0: left allmulticast mode [ 109.963653][ T6193] lo speed is unknown, defaulting to 1000 [ 110.810752][ T6218] macvtap1: entered allmulticast mode [ 110.816291][ T6218] bridge0: entered allmulticast mode [ 110.823235][ T6218] bridge0: port 3(macvtap1) entered blocking state [ 110.829998][ T6218] bridge0: port 3(macvtap1) entered disabled state [ 110.841314][ T6218] bridge0: left allmulticast mode [ 110.966016][ T6219] lo speed is unknown, defaulting to 1000 [ 111.018535][ T6219] lo speed is unknown, defaulting to 1000 [ 111.583229][ T6223] : renamed from wg2 [ 111.614310][ T6231] loop5: detected capacity change from 0 to 764 [ 111.629135][ T6232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.754'. [ 111.638158][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 111.667121][ T6229] loop4: detected capacity change from 0 to 512 [ 111.677036][ T6231] Symlink component flag not implemented [ 111.682807][ T6231] Symlink component flag not implemented [ 111.691202][ T6229] ext4: Unknown parameter 'uid' [ 111.696507][ T6231] Symlink component flag not implemented (129) [ 111.702757][ T6231] Symlink component flag not implemented (6) [ 111.709948][ T6231] rock: directory entry would overflow storage [ 111.716122][ T6231] rock: sig=0x4f50, size=4, remaining=3 [ 111.721781][ T6231] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 111.737990][ T6236] lo speed is unknown, defaulting to 1000 [ 111.776061][ T6236] lo speed is unknown, defaulting to 1000 [ 111.858272][ T6245] loop5: detected capacity change from 0 to 128 [ 112.009699][ T6246] lo speed is unknown, defaulting to 1000 [ 112.062607][ T6246] lo speed is unknown, defaulting to 1000 [ 112.295967][ T29] kauditd_printk_skb: 1105 callbacks suppressed [ 112.295981][ T29] audit: type=1400 audit(2147483761.268:10268): avc: denied { create } for pid=6248 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.340947][ T6249] veth2: entered promiscuous mode [ 112.346155][ T6249] veth2: entered allmulticast mode [ 112.352388][ T29] audit: type=1400 audit(2147483761.298:10269): avc: denied { mount } for pid=6248 comm="syz.1.764" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.404533][ T29] audit: type=1400 audit(2147483761.378:10270): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.504831][ T29] audit: type=1326 audit(2147483761.478:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.529280][ T29] audit: type=1326 audit(2147483761.478:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.600053][ T6256] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 112.646083][ T29] audit: type=1326 audit(2147483761.478:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.670585][ T29] audit: type=1326 audit(2147483761.478:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.694279][ T29] audit: type=1326 audit(2147483761.478:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.718456][ T29] audit: type=1326 audit(2147483761.548:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.742111][ T29] audit: type=1326 audit(2147483761.548:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 112.888045][ T6259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 112.894613][ T6259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.902498][ T6259] vhci_hcd vhci_hcd.0: Device attached [ 112.912413][ T6259] xt_hashlimit: max too large, truncated to 1048576 [ 112.920552][ T6259] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.945529][ T6264] pim6reg: entered allmulticast mode [ 112.978055][ T6261] vhci_hcd: connection closed [ 112.978902][ T2786] vhci_hcd: stop threads [ 112.988348][ T2786] vhci_hcd: release socket [ 112.992911][ T2786] vhci_hcd: disconnect device [ 113.054804][ T6264] bond0: (slave bond_slave_0): Releasing backup interface [ 113.089550][ T6264] bond0: (slave bond_slave_1): Releasing backup interface [ 113.120471][ T6264] team0: Port device team_slave_0 removed [ 113.129807][ T6264] team0: Port device team_slave_1 removed [ 113.140460][ T6264] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.156589][ T3388] lo speed is unknown, defaulting to 1000 [ 113.175089][ T3395] syz!: Port: 1 Link DOWN [ 113.253576][ T6269] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.354467][ T6273] IPv6: Can't replace route, no match found [ 113.457635][ T6274] lo speed is unknown, defaulting to 1000 [ 113.498799][ T6274] lo speed is unknown, defaulting to 1000 [ 113.770779][ T6279] loop3: detected capacity change from 0 to 512 [ 113.780900][ T6279] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.772: EA inode hash validation failed [ 113.794095][ T6279] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.772: corrupted inode contents [ 113.806516][ T6279] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.772: mark_inode_dirty error [ 113.818428][ T6279] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.772: corrupted inode contents [ 113.830733][ T6279] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.772: mark_inode_dirty error [ 113.843069][ T6279] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.772: mark inode dirty (error -117) [ 113.843529][ T6279] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 113.865280][ T6279] EXT4-fs (loop3): 1 orphan inode deleted [ 113.865626][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.924364][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.946772][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 114.073075][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.082925][ T6293] bridge_slave_1: left allmulticast mode [ 114.088669][ T6293] bridge_slave_1: left promiscuous mode [ 114.094601][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.103293][ T6293] bridge_slave_0: left allmulticast mode [ 114.109767][ T6293] bridge_slave_0: left promiscuous mode [ 114.115674][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.201099][ T6293] loop3: detected capacity change from 0 to 1024 [ 114.210236][ T6293] EXT4-fs: Invalid want_extra_isize 127 [ 114.254977][ T6309] netlink: 'syz.3.780': attribute type 6 has an invalid length. [ 114.453928][ T6311] bond1: invalid ARP target 0.0.0.0 specified for addition [ 114.476651][ T6311] bond1: option arp_ip_target: invalid value (0) [ 114.510159][ T6311] bond1 (unregistering): Released all slaves [ 114.580217][ T6322] lo speed is unknown, defaulting to 1000 [ 114.609369][ T6322] lo speed is unknown, defaulting to 1000 [ 115.187127][ T6331] netlink: 'syz.1.794': attribute type 5 has an invalid length. [ 115.256525][ T6337] netlink: 'syz.1.794': attribute type 13 has an invalid length. [ 115.264796][ T6337] netlink: 'syz.1.794': attribute type 17 has an invalid length. [ 115.283204][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 115.296705][ T6337] erspan0: left allmulticast mode [ 115.330287][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.402382][ T6349] loop5: detected capacity change from 0 to 512 [ 115.415769][ T6349] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.786: EA inode hash validation failed [ 115.434760][ T6349] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.786: corrupted inode contents [ 115.448680][ T6349] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.786: mark_inode_dirty error [ 115.460518][ T6337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.461128][ T6349] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.786: corrupted inode contents [ 115.497609][ T6349] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.786: mark_inode_dirty error [ 115.512511][ T6349] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.786: mark inode dirty (error -117) [ 115.525908][ T6349] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 115.536459][ T6349] EXT4-fs (loop5): 1 orphan inode deleted [ 115.543481][ T6349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.583256][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.937683][ T6366] SELinux: policydb version 0 does not match my version range 15-35 [ 115.946536][ T6366] SELinux: failed to load policy [ 116.130361][ T6374] loop4: detected capacity change from 0 to 128 [ 116.205954][ T6375] lo speed is unknown, defaulting to 1000 [ 116.237798][ T6380] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.257482][ T6375] lo speed is unknown, defaulting to 1000 [ 116.363269][ T6380] lo speed is unknown, defaulting to 1000 [ 116.399050][ T6380] lo speed is unknown, defaulting to 1000 [ 116.554642][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'. [ 116.880881][ T6396] lo speed is unknown, defaulting to 1000 [ 116.925994][ T6396] lo speed is unknown, defaulting to 1000 [ 117.175850][ T6405] loop4: detected capacity change from 0 to 1024 [ 117.284569][ T6405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.379340][ T29] kauditd_printk_skb: 850 callbacks suppressed [ 117.379355][ T29] audit: type=1326 audit(2147483766.358:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8601e3d810 code=0x7ffc0000 [ 117.415977][ T6405] netlink: 'syz.4.807': attribute type 27 has an invalid length. [ 117.432650][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 117.449792][ T29] audit: type=1326 audit(2147483766.358:11129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8601e3dd17 code=0x7ffc0000 [ 117.469086][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 117.473729][ T29] audit: type=1326 audit(2147483766.358:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8601e3d810 code=0x7ffc0000 [ 117.506191][ T29] audit: type=1326 audit(2147483766.358:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.529891][ T29] audit: type=1326 audit(2147483766.358:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.554003][ T29] audit: type=1326 audit(2147483766.388:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.577775][ T29] audit: type=1326 audit(2147483766.388:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.601457][ T29] audit: type=1326 audit(2147483766.388:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.625194][ T29] audit: type=1326 audit(2147483766.388:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.649078][ T29] audit: type=1326 audit(2147483766.388:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8601e3efc9 code=0x7ffc0000 [ 117.699727][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.707108][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.827355][ T6405] veth0_to_team: left promiscuous mode [ 117.841304][ T6424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'. [ 117.850272][ T6424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'. [ 117.908653][ T6406] lo speed is unknown, defaulting to 1000 [ 117.918931][ T5336] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.927579][ T5336] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.946704][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 117.958846][ T5336] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.963007][ T6424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'. [ 118.027484][ T6430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.048529][ T6432] vlan0: entered allmulticast mode [ 118.053761][ T6432] bond1: entered allmulticast mode [ 118.107371][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.131061][ T5336] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.142472][ T6406] lo speed is unknown, defaulting to 1000 [ 118.155073][ T6439] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 118.175672][ T6438] dummy0: mtu less than device minimum [ 118.374698][ T6456] netlink: 'syz.4.818': attribute type 30 has an invalid length. [ 118.705578][ T6485] IPv6: Can't replace route, no match found [ 119.315909][ T6502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6502 comm=syz.3.835 [ 119.359917][ T6502] lo speed is unknown, defaulting to 1000 [ 119.387718][ T6502] lo speed is unknown, defaulting to 1000 [ 119.845014][ T6521] __nla_validate_parse: 16 callbacks suppressed [ 119.845029][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 119.860828][ T6521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.842'. [ 120.002244][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 120.155885][ T6525] lo speed is unknown, defaulting to 1000 [ 120.225309][ T6525] lo speed is unknown, defaulting to 1000 [ 120.578916][ T6532] loop5: detected capacity change from 0 to 256 [ 120.586974][ T6532] vfat: Unknown parameter '?`7Xc UA`'GGNL. [ 120.586974][ T6532] _w)B4%hWԳ"eZC/ý!]&NKYR -o_!|' [ 120.738283][ T6532] loop5: detected capacity change from 0 to 8192 [ 120.901526][ T6548] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1044) [ 120.909860][ T6548] FAT-fs (loop5): Filesystem has been set read-only [ 121.103184][ T6538] lo speed is unknown, defaulting to 1000 [ 121.260137][ T6538] lo speed is unknown, defaulting to 1000 [ 121.465267][ T6557] netlink: 'syz.2.854': attribute type 6 has an invalid length. [ 121.544405][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 121.918146][ T6573] lo speed is unknown, defaulting to 1000 [ 121.951544][ T6573] lo speed is unknown, defaulting to 1000 [ 121.977265][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 122.294013][ T6590] lo speed is unknown, defaulting to 1000 [ 122.329535][ T6590] lo speed is unknown, defaulting to 1000 [ 122.372343][ T6592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.384695][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.393651][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.404961][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 122.404974][ T29] audit: type=1400 audit(2147483771.378:12067): avc: denied { write } for pid=6591 comm="syz.4.864" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.405513][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.411602][ T29] audit: type=1400 audit(2147483771.378:12068): avc: denied { open } for pid=6591 comm="syz.4.864" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.434451][ T6592] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 122.434466][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.486273][ T29] audit: type=1400 audit(2147483771.378:12069): avc: denied { ioctl } for pid=6591 comm="syz.4.864" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.538297][ T29] audit: type=1326 audit(2147483771.518:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 122.562211][ T29] audit: type=1326 audit(2147483771.518:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cb40efc9 code=0x7ffc0000 [ 122.635511][ T6602] loop4: detected capacity change from 0 to 164 [ 122.676077][ T29] audit: type=1326 audit(2147483771.628:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 122.699638][ T29] audit: type=1326 audit(2147483771.638:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 122.723291][ T29] audit: type=1326 audit(2147483771.638:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 122.747422][ T29] audit: type=1326 audit(2147483771.638:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 122.771191][ T29] audit: type=1326 audit(2147483771.638:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f75453aefc9 code=0x7ffc0000 [ 122.801392][ T6603] siw: device registration error -23 [ 122.837812][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.845348][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.949282][ T5336] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.963918][ T5336] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.996221][ T5336] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.012867][ T5336] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.051816][ T6620] IPv6: Can't replace route, no match found [ 123.075796][ T6611] ================================================================== [ 123.084000][ T6611] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 123.092683][ T6611] [ 123.095098][ T6611] write to 0xffff888115d356a8 of 8 bytes by task 6608 on cpu 1: [ 123.102724][ T6611] shmem_file_splice_read+0x470/0x600 [ 123.108110][ T6611] splice_direct_to_actor+0x26f/0x680 [ 123.113838][ T6611] do_splice_direct+0xda/0x150 [ 123.118608][ T6611] do_sendfile+0x380/0x650 [ 123.123130][ T6611] __x64_sys_sendfile64+0x105/0x150 [ 123.128331][ T6611] x64_sys_call+0x2bb4/0x3000 [ 123.133092][ T6611] do_syscall_64+0xd2/0x200 [ 123.137606][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.143678][ T6611] [ 123.145989][ T6611] write to 0xffff888115d356a8 of 8 bytes by task 6611 on cpu 0: [ 123.153631][ T6611] shmem_file_splice_read+0x470/0x600 [ 123.159097][ T6611] splice_direct_to_actor+0x26f/0x680 [ 123.164561][ T6611] do_splice_direct+0xda/0x150 [ 123.169356][ T6611] do_sendfile+0x380/0x650 [ 123.173788][ T6611] __x64_sys_sendfile64+0x105/0x150 [ 123.178976][ T6611] x64_sys_call+0x2bb4/0x3000 [ 123.183641][ T6611] do_syscall_64+0xd2/0x200 [ 123.188309][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.194206][ T6611] [ 123.196521][ T6611] value changed: 0x00000000000299ac -> 0x0000000000029a1a [ 123.203692][ T6611] [ 123.206021][ T6611] Reported by Kernel Concurrency Sanitizer on: [ 123.212452][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.2.869 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.223646][ T6611] Tainted: [W]=WARN [ 123.227451][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.237779][ T6611] ================================================================== [ 123.249385][ T6619] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 123.257733][ T6619] netdevsim netdevsim5: Direct firmware load for . failed with error -22