last executing test programs: 2m36.388588265s ago: executing program 3 (id=1128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df5902bc4451367e71a1fbe024a670606630d07c7762686efb5937c7dd34123a3863dcf6e0dd5751028fe0c63a64a75f7", 0xf4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc92c8123010cfdbdb58334fab843d30b6f1e0f4805c9a152b188a9f605b298e6f1", 0x66}, {&(0x7f00000001c0)="f2c0293a7f3c9fbf", 0x8}, {&(0x7f0000000640)="a56e36f21e5b3781a76eaf88293ba3631f4c249d6158a8f24521994342243ded321f5d6d4a3a8ed71abe4e83de427ca7f920c61b1538ef5718853cb9c00576a9e573caa79cea", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b834fd06f4637e2507c227b801c6621964aaed5895438fd97d030cd34829f4c54b99d5efb7893f28f4847812f491f7de6864e4b1304dc35ff1759cef048b21bc4ec21a879978ac29ceced9e7d023469a1b06faaddfa976300f676404adb82ebf8ef4f568c33d880a7bb74fa0622a52", 0xd8}, {&(0x7f00000007c0)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf1373d55b65db231bdf20f8738ac39578900a2609508508529dc99cc2e0c7693ea42658dbbcd73a170fd94f4bb03c1de81e670864d13d54a2c849d4f16e19b50dee3f8a13b62dce9e5c32c212d938c5d3cbc7caaaed709c2eccd04150b7bcac12433a0e1aa6e14aae601f57ca4a27cba1e70edf4a99fd86f2a18e2a7c8ca9e9360d", 0x96}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="300c9fd7cbdc2b2f231d94cd6d13c6ea067c8650bb37ea7854a57cf0f7a972cb67dcc77042c0374d9deb15f82653bcca9269068593831548e731cd83a8b279070f5eebd2be96a9e254368dd95429e8f3d996374df3efe2392466f79a", 0x5c}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83f039ffe6e1f06f7b3e966de5ebb9c5f7619c3550cb59fb7880b62ef411bdf76f9fe495b036d68a34f5962b6540b7e38cd9d93e52a809c1aae88fe7214723ea2631f776ea5d951164aaf876436f8cbbae020dfbd3271a36146580128f83e60aa0442348c9d50601a6755eefc23d6b50967e2cba097651718e61e5943fffb8f020735c59dad677af425df8ea066e7b029e65d7b7701d7a1808826f3edfdaac51f2aa735330ae4c9c0089b88a5f99a52772882419d8779cf2226b7feea29a4250", 0xd9}, {&(0x7f00000005c0)="0b1b2c75d835f9", 0x7}, {&(0x7f0000000c00)="816bc87eac38491e86bdab5e121df6e8717fa17084c08e31af61c8d06574fb76b9d3be15b309853de22860e8d0adee0e3a379864db571e13475fd5a4efa1bdc85d0dd055e7c339989e3736c9497f31becba6db536fe5ac3cd18810cb134ca4e257a82a6388c45f9aa9b5dd71eb3664a800302244633df83b23af8b88106fe90ac7fda71296f8571e5c3d9f23aef6e23c2601d0589c8b9de4bd43b876d48f130f70f3e9a4cd87b3d306bfbb65e03ad44ed029921084e9d943811d0a7dac3c53f4c2c9bc254dc15106b29df9ea88", 0xcd}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m36.328663146s ago: executing program 3 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m35.900474663s ago: executing program 3 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 2m35.45139535s ago: executing program 3 (id=1139): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m35.116504645s ago: executing program 3 (id=1142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3e}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@time={0x2, 0x7fffffff}}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r2, 0x0, 0xffffffbf) read$snapshot(r2, 0x0, 0x0) 2m34.922951198s ago: executing program 3 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x45, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m34.914744088s ago: executing program 32 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x45, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m25.028591564s ago: executing program 1 (id=1271): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 2m24.478525523s ago: executing program 1 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3164}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_io_uring_setup(0xe45, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 2m23.594927056s ago: executing program 1 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x20000, 0xfffffffd, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xd, 0xffffad55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x7b2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffefe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x10001, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x5, 0x0, 0x0, 0xb4d}}}]}}]}, 0x45c}}, 0x0) 2m23.453916328s ago: executing program 1 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 2m23.421401719s ago: executing program 1 (id=1289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 2m23.289362571s ago: executing program 1 (id=1295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m23.287138421s ago: executing program 33 (id=1295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m9.016170855s ago: executing program 2 (id=1511): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x4) 2m8.907427677s ago: executing program 2 (id=1514): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b7", 0x4}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) 2m8.639266501s ago: executing program 2 (id=1517): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) waitid(0x2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f00000011c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES16, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 2m8.503546753s ago: executing program 2 (id=1520): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580), 0x3, 0x465, &(0x7f0000000f00)="$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") syz_usb_connect(0x0, 0x3d, 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x11a) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2m7.901361192s ago: executing program 2 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_open_pts(0xffffffffffffffff, 0x50000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7b, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x3, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xff, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2m7.678300916s ago: executing program 2 (id=1540): io_uring_setup(0x7c8a, &(0x7f0000000380)={0x0, 0x7161, 0x8, 0xffffffff, 0x1dd}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 2m7.662021887s ago: executing program 34 (id=1540): io_uring_setup(0x7c8a, &(0x7f0000000380)={0x0, 0x7161, 0x8, 0xffffffff, 0x1dd}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 3.128590301s ago: executing program 6 (id=3835): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000480)='\x00\x00', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/87, 0x57}], 0x1) 2.230912315s ago: executing program 6 (id=3847): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 1.805275581s ago: executing program 4 (id=3848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 1.771864012s ago: executing program 0 (id=3849): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 1.730656423s ago: executing program 0 (id=3850): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000f500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) write$binfmt_elf64(r5, &(0x7f0000001f80)=ANY=[], 0x678) 1.628356804s ago: executing program 6 (id=3852): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) timer_gettime(r1, &(0x7f0000000140)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000f40)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000f80)) 1.538765985s ago: executing program 4 (id=3865): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 1.520341316s ago: executing program 5 (id=3854): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.27133967s ago: executing program 4 (id=3855): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tkill(0x0, 0x12) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.27049172s ago: executing program 6 (id=3856): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) 866.841176ms ago: executing program 0 (id=3860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r5}, &(0x7f00000007c0), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 715.978418ms ago: executing program 7 (id=3861): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 715.244028ms ago: executing program 0 (id=3873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x400}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x60) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) 651.039809ms ago: executing program 5 (id=3863): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x202, 0x1a3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0xb}, 0x20) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) write$ppp(r0, &(0x7f0000000040)="1d2e", 0x2) 629.00253ms ago: executing program 7 (id=3864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 534.910751ms ago: executing program 7 (id=3866): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 534.366811ms ago: executing program 5 (id=3867): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x35, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xffff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 395.888193ms ago: executing program 0 (id=3868): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) timer_gettime(r1, &(0x7f0000000140)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000f40)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000f80)) 379.324004ms ago: executing program 6 (id=3869): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r4, 0x0, 0x0, r4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 379.151074ms ago: executing program 7 (id=3870): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 317.485274ms ago: executing program 5 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x29ed4d1, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 311.148615ms ago: executing program 6 (id=3872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4055}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x398, 0x0, 0x0, 0x0, 0x8000}) 291.445835ms ago: executing program 7 (id=3874): io_setup(0x1, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 193.186796ms ago: executing program 4 (id=3875): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB=',pcr=00000000000000000056,rootcontext=', @ANYBLOB="22f0092283aaf8de02bbea8b6c164ea7f97dc4bd774c2662fefc59aaf24bb14242abc632a2ee6b1fad113f11136a9b0431f6c116d870be2da3a75821fa4190823ac1c5cc3f71b4a7f0b3447fa90556ddeb27cf1cb99a"]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x12, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x4360, 0x4}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 192.529907ms ago: executing program 5 (id=3885): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f5, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000003682ef00000000005f5e7ea8fa5209266b0e3719fca349177faf90fd840655717e9dc8e1b4c16844e0694750c149c0e9dde31018102578d46a78943d6e517f1419d9c306252fbe4d416c85626da7d515e5161ff9653279c5840c868f464d502397a4714ad7628aaf4bd4788ca0d8226e9787b7a6936e6209b75e39a242d5fd1bd2c5a648bc5da94f937548fe0fca43f49fad436d4eb55f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 50.887169ms ago: executing program 0 (id=3876): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 50.616929ms ago: executing program 4 (id=3877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) unshare(0x22020600) 50.200819ms ago: executing program 5 (id=3887): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tkill(0x0, 0x12) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 337.04µs ago: executing program 7 (id=3878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x4, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=3879): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): 187.173682][T10583] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2582: invalid indirect mapped block 4294967295 (level 1) [ 187.198508][T10583] EXT4-fs (loop5): 2 truncates cleaned up [ 187.205229][T10583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.237227][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.269180][T10568] netlink: 'syz.0.2586': attribute type 10 has an invalid length. [ 187.282817][T10592] ref_ctr increment failed for inode: 0xb08 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f46d40 [ 187.289400][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.301920][T10591] uprobe: syz.4.2587:10591 failed to unregister, leaking uprobe [ 187.314007][T10568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.325260][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 187.460036][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2592'. [ 187.473298][T10604] loop5: detected capacity change from 0 to 512 [ 187.490393][T10604] EXT4-fs: Ignoring removed orlov option [ 187.496867][T10604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.510943][T10604] EXT4-fs (loop5): orphan cleanup on readonly fs [ 187.518530][T10604] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2593: bg 0: block 248: padding at end of block bitmap is not set [ 187.536339][T10609] bridge0: port 1(syz_tun) entered blocking state [ 187.543531][T10609] bridge0: port 1(syz_tun) entered disabled state [ 187.552565][T10604] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2593: Failed to acquire dquot type 1 [ 187.567555][T10609] syz_tun: entered allmulticast mode [ 187.574128][T10609] syz_tun: entered promiscuous mode [ 187.579159][T10604] EXT4-fs (loop5): 1 truncate cleaned up [ 187.580079][T10609] bridge0: port 1(syz_tun) entered blocking state [ 187.591942][T10609] bridge0: port 1(syz_tun) entered forwarding state [ 187.596102][T10604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.615216][T10604] EXT4-fs (loop5): shut down requested (2) [ 187.621083][T10609] syz_tun: left allmulticast mode [ 187.622119][T10604] EXT4-fs: Ignoring removed orlov option [ 187.626737][T10609] syz_tun: left promiscuous mode [ 187.626871][T10609] bridge0: port 1(syz_tun) entered disabled state [ 187.632726][T10604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.679638][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.695392][T10609] bond0: (slave batadv0): Releasing backup interface [ 187.720506][T10609] bridge_slave_1: left allmulticast mode [ 187.727704][T10609] bridge_slave_1: left promiscuous mode [ 187.733718][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.773356][T10618] rdma_op ffff88813606a580 conn xmit_rdma 0000000000000000 [ 187.782808][T10609] bond0: (slave bond_slave_0): Releasing backup interface [ 187.815435][T10609] bond0: (slave bond_slave_1): Releasing backup interface [ 187.853513][T10609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.874584][T10609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.897506][T10609] bond2: (slave gretap1): Releasing active interface [ 187.904533][T10609] gretap1: left allmulticast mode [ 188.191759][T10645] bridge_slave_0: left allmulticast mode [ 188.196965][T10647] netlink: 'syz.6.2609': attribute type 10 has an invalid length. [ 188.197465][T10645] bridge_slave_0: left promiscuous mode [ 188.197635][T10645] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.290700][T10645] bridge_slave_1: left allmulticast mode [ 188.296576][T10645] bridge_slave_1: left promiscuous mode [ 188.302342][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.331080][T10645] bond0: (slave bond_slave_0): Releasing backup interface [ 188.370568][T10645] bond0: (slave bond_slave_1): Releasing backup interface [ 188.382770][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.390678][T10645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.405418][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.413471][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.442425][T10645] bond1: (slave gretap1): Releasing active interface [ 188.449731][T10645] gretap1: left allmulticast mode [ 188.481182][T10647] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 188.875121][ T3993] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.921807][ T3993] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.935244][T10672] netlink: 'syz.5.2617': attribute type 1 has an invalid length. [ 189.009340][ T3391] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.020680][T10678] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 189.046898][ T3993] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.065581][ T3391] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.115329][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 189.131672][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.152702][T10679] bridge: RTM_NEWNEIGH with invalid ether address [ 189.177200][ T3993] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.230962][T10694] lo speed is unknown, defaulting to 1000 [ 189.252023][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 189.304424][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2628'. [ 189.316644][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 189.316662][ T30] audit: type=1400 audit(1749059918.121:4352): avc: denied { ioctl } for pid=10674 comm="syz.7.2618" path="/dev/hidraw0" dev="devtmpfs" ino=580 ioctlcmd=0x480d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.348898][T10696] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.369201][T10696] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 189.381133][ T3993] bridge_slave_1: left allmulticast mode [ 189.388550][ T3993] bridge_slave_1: left promiscuous mode [ 189.396035][ T3993] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.410915][ T30] audit: type=1326 audit(1749059918.221:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.4.2631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x0 [ 189.466240][ T3993] bridge_slave_0: left allmulticast mode [ 189.473886][ T3993] bridge_slave_0: left promiscuous mode [ 189.479904][ T3993] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.560584][ T30] audit: type=1326 audit(1749059918.371:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x0 [ 189.632040][T10719] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2635'. [ 190.751137][ T3993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.800056][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2640'. [ 190.809455][T10734] netlink: 'syz.0.2641': attribute type 3 has an invalid length. [ 190.817376][T10734] netlink: 'syz.0.2641': attribute type 3 has an invalid length. [ 190.830592][ T3993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.846954][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2641'. [ 190.862631][ T3993] bond0 (unregistering): Released all slaves [ 190.882620][ T3993] bond1 (unregistering): Released all slaves [ 190.905414][ T30] audit: type=1326 audit(1749059919.701:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 190.929597][ T30] audit: type=1326 audit(1749059919.701:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 190.954145][ T30] audit: type=1326 audit(1749059919.701:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 190.977909][ T30] audit: type=1326 audit(1749059919.711:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 191.002760][ T30] audit: type=1326 audit(1749059919.711:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 191.013112][T10740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10740 comm=syz.7.2640 [ 191.027079][ T30] audit: type=1326 audit(1749059919.711:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 191.064268][ T30] audit: type=1326 audit(1749059919.711:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 191.099709][T10696] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 191.112600][T10696] bond3 (unregistering): Released all slaves [ 191.176626][ T3993] hsr_slave_0: left promiscuous mode [ 191.182519][ T3993] hsr_slave_1: left promiscuous mode [ 191.188957][ T3993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.196492][ T3993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.230781][ T3993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.239235][ T3993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.256017][ T3993] veth1_vlan: left promiscuous mode [ 191.271697][ T3993] veth0_vlan: left promiscuous mode [ 191.370835][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2649'. [ 191.394450][ T3993] team0 (unregistering): Port device team_slave_1 removed [ 191.411890][ T3993] team0 (unregistering): Port device team_slave_0 removed [ 191.498734][T10770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10770 comm=syz.4.2649 [ 191.521207][T10746] bridge: RTM_NEWNEIGH with invalid ether address [ 191.595893][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2651'. [ 191.620570][T10787] ip6gre1: entered allmulticast mode [ 191.668014][T10789] serio: Serial port ptm0 [ 191.851409][T10816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10816 comm=syz.5.2657 [ 191.873573][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2656'. [ 191.918558][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2656'. [ 191.943997][T10820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 191.961903][T10820] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 191.986615][T10820] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 191.999489][T10820] bond2 (unregistering): Released all slaves [ 192.303458][T10867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10867 comm=syz.6.2671 [ 192.423533][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2673'. [ 192.466504][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2670'. [ 192.674596][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2681'. [ 192.843979][T10907] lo speed is unknown, defaulting to 1000 [ 193.005174][T10925] veth0: entered promiscuous mode [ 193.028964][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2691'. [ 193.204879][T10951] lo speed is unknown, defaulting to 1000 [ 193.267338][T10955] SELinux: failed to load policy [ 195.019360][T11084] netlink: 'syz.7.2711': attribute type 13 has an invalid length. [ 195.113391][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.120733][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.210737][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 195.210752][ T30] audit: type=1400 audit(1749059924.021:4437): avc: denied { create } for pid=11063 comm="syz.5.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 195.288267][ T30] audit: type=1400 audit(1749059924.021:4438): avc: denied { read } for pid=11063 comm="syz.5.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 195.313074][T11084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.337111][T11084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.405756][T11084] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.414515][T11084] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.423107][T11084] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.431583][T11084] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.543338][ T30] audit: type=1326 audit(1749059924.351:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.567112][ T30] audit: type=1326 audit(1749059924.351:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.645805][ T30] audit: type=1326 audit(1749059924.411:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.670647][ T30] audit: type=1326 audit(1749059924.411:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.694964][ T30] audit: type=1326 audit(1749059924.411:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.718946][ T30] audit: type=1326 audit(1749059924.411:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.742827][ T30] audit: type=1326 audit(1749059924.411:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.767134][ T30] audit: type=1326 audit(1749059924.411:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 195.959535][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2718'. [ 195.999981][T11104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11104 comm=syz.5.2718 [ 196.435210][T11142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2734'. [ 197.173209][T11172] loop7: detected capacity change from 0 to 2048 [ 197.240069][T11172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 197.398298][T11186] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.516674][T11186] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 680 with error 28 [ 197.529496][T11186] EXT4-fs (loop7): This should not happen!! Data will be lost [ 197.529496][T11186] [ 197.539475][T11186] EXT4-fs (loop7): Total free blocks count 0 [ 197.545623][T11186] EXT4-fs (loop7): Free/Dirty block details [ 197.551590][T11186] EXT4-fs (loop7): free_blocks=2415919104 [ 197.557341][T11186] EXT4-fs (loop7): dirty_blocks=688 [ 197.562782][T11186] EXT4-fs (loop7): Block reservation details [ 197.568943][T11186] EXT4-fs (loop7): i_reserved_data_blocks=43 [ 197.671976][T11209] loop5: detected capacity change from 0 to 128 [ 197.677683][ T3964] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 197.691819][T11209] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.278690][T11256] loop6: detected capacity change from 0 to 512 [ 198.314805][T11256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.344540][T11256] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.469873][T11280] netlink: 'syz.7.2783': attribute type 27 has an invalid length. [ 198.506348][T11280] bridge1: left allmulticast mode [ 198.528418][T11280] ip6gre1: left allmulticast mode [ 198.539166][T11276] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.2775: corrupted inode contents [ 198.553842][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 198.561932][T11276] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.2775: mark_inode_dirty error [ 198.563232][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 198.637114][T11276] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.2775: corrupted inode contents [ 198.799127][T11276] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.2775: mark_inode_dirty error [ 198.799388][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2788'. [ 198.812661][T11276] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.2775: mark inode dirty (error -117) [ 198.820095][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2788'. [ 198.820128][T11294] netlink: 'syz.7.2788': attribute type 11 has an invalid length. [ 198.856133][T11295] loop7: detected capacity change from 0 to 512 [ 198.862690][T11276] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 198.872967][T11295] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 198.942919][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.991131][T11299] lo speed is unknown, defaulting to 1000 [ 198.997012][T11299] lo speed is unknown, defaulting to 1000 [ 199.015002][T11299] lo speed is unknown, defaulting to 1000 [ 199.021716][T11299] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 199.034425][T11299] lo speed is unknown, defaulting to 1000 [ 199.043115][T11299] lo speed is unknown, defaulting to 1000 [ 199.050437][T11299] lo speed is unknown, defaulting to 1000 [ 199.056644][T11299] lo speed is unknown, defaulting to 1000 [ 199.064027][T11299] lo speed is unknown, defaulting to 1000 [ 199.253305][T11326] loop7: detected capacity change from 0 to 2048 [ 199.262811][T11328] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.276753][T11326] EXT4-fs: test_dummy_encryption option not supported [ 199.346994][T11341] loop7: detected capacity change from 0 to 1024 [ 199.357165][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2803'. [ 199.369024][T11341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.392747][T11341] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.2802: Allocating blocks 497-513 which overlap fs metadata [ 199.419767][T11338] EXT4-fs (loop7): pa ffff888106a08230: logic 128, phys. 273, len 15 [ 199.428229][T11338] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 199.457224][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.554946][T11375] 9pnet_fd: Insufficient options for proto=fd [ 199.567110][T10664] IPVS: starting estimator thread 0... [ 199.668310][T11380] IPVS: using max 2256 ests per chain, 112800 per kthread [ 200.041711][T11462] SELinux: security_context_str_to_sid ( lN}ĽwL&bYKBB2k?j1p-X!A:?qDV') failed with errno=-22 [ 200.458818][T11491] loop6: detected capacity change from 0 to 8192 [ 200.466553][T11491] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.508764][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 200.508781][ T30] audit: type=1400 audit(1749059929.321:4556): avc: denied { create } for pid=11492 comm="syz.6.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 200.576221][T11500] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 200.636219][T11508] loop6: detected capacity change from 0 to 512 [ 200.644222][T11508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.671907][T11508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.684707][T11508] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.698496][T11508] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2832: corrupted xattr block 19: overlapping e_value [ 200.715504][T11508] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 200.725132][T11508] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2832: corrupted xattr block 19: overlapping e_value [ 200.741159][T11508] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 200.751347][T11508] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2832: corrupted xattr block 19: overlapping e_value [ 200.781280][T11512] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2832: corrupted xattr block 19: overlapping e_value [ 200.800743][T11512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 200.834904][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'. [ 200.836179][ T1039] kernel write not supported for file bpf-prog (pid: 1039 comm: kworker/0:2) [ 200.846206][T11512] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.2832: corrupted xattr block 19: overlapping e_value [ 200.891300][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.921640][T11527] lo speed is unknown, defaulting to 1000 [ 200.929906][T11527] lo speed is unknown, defaulting to 1000 [ 201.032595][T11542] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2843'. [ 201.060449][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2846'. [ 201.211921][T11565] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.329517][T11565] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.420618][T11565] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.494043][T11577] bridge: RTM_NEWNEIGH with invalid ether address [ 201.503828][T11565] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.571118][T11565] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.613096][T11565] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.632296][T11565] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.645385][T11565] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.811996][T11595] loop7: detected capacity change from 0 to 2048 [ 201.823677][T11595] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2865'. [ 201.832732][T11595] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2865'. [ 201.842074][T11595] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2865'. [ 201.970063][ T3391] usb usb6-port1: attempt power cycle [ 201.994142][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 202.014737][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 202.030089][T11601] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 202.042353][T11601] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 202.054574][T11601] bond5 (unregistering): (slave batadv2): Releasing backup interface [ 202.066202][T11601] bond5 (unregistering): Released all slaves [ 202.254422][ T30] audit: type=1326 audit(1749059931.061:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.271465][T11616] lo speed is unknown, defaulting to 1000 [ 202.277992][ T30] audit: type=1326 audit(1749059931.061:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.286971][T11616] lo speed is unknown, defaulting to 1000 [ 202.344103][ T30] audit: type=1326 audit(1749059931.061:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.368540][ T30] audit: type=1326 audit(1749059931.061:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.392812][ T30] audit: type=1326 audit(1749059931.061:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.416829][ T30] audit: type=1326 audit(1749059931.061:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.440603][ T30] audit: type=1326 audit(1749059931.061:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.465136][ T30] audit: type=1326 audit(1749059931.061:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 202.490721][ T30] audit: type=1326 audit(1749059931.151:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa6119511e5 code=0x7ffc0000 [ 202.701849][T11641] bridge_slave_0: entered promiscuous mode [ 202.766520][T11639] 9pnet_fd: Insufficient options for proto=fd [ 202.945112][T11665] $H: renamed from bond0 (while UP) [ 202.952951][T11665] $H: entered promiscuous mode [ 202.958048][T11665] bridge0: entered promiscuous mode [ 203.007187][T11671] loop6: detected capacity change from 0 to 512 [ 203.014281][T11671] EXT4-fs: Ignoring removed orlov option [ 203.023565][T11671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.033158][T11671] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.040411][T11671] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2893: bg 0: block 248: padding at end of block bitmap is not set [ 203.056109][T11671] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2893: Failed to acquire dquot type 1 [ 203.068152][T11671] EXT4-fs (loop6): 1 truncate cleaned up [ 203.074606][T11671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.088875][T11671] EXT4-fs: Ignoring removed orlov option [ 203.094751][T11671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.103465][T11671] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 203.120780][T11671] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.2893: Abort forced by user [ 203.131509][T11671] EXT4-fs (loop6): Remounting filesystem read-only [ 203.138198][T11671] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 203.149038][T11671] ext4 filesystem being remounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.173107][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.292228][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2897'. [ 203.301329][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2897'. [ 203.341119][T11692] pim6reg1: entered promiscuous mode [ 203.346558][T11692] pim6reg1: entered allmulticast mode [ 203.858589][ T3391] usb usb6-port1: unable to enumerate USB device [ 204.053271][T11731] loop5: detected capacity change from 0 to 2048 [ 204.060648][T11731] EXT4-fs: Ignoring removed bh option [ 204.070351][T11731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.368748][ T3964] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.383725][ T3964] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 204.396033][ T3964] EXT4-fs (loop5): This should not happen!! Data will be lost [ 204.396033][ T3964] [ 204.405760][ T3964] EXT4-fs (loop5): Total free blocks count 0 [ 204.411984][ T3964] EXT4-fs (loop5): Free/Dirty block details [ 204.417884][ T3964] EXT4-fs (loop5): free_blocks=2415919104 [ 204.423946][ T3964] EXT4-fs (loop5): dirty_blocks=8224 [ 204.429324][ T3964] EXT4-fs (loop5): Block reservation details [ 204.435612][ T3964] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 204.445839][ T3964] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 204.831709][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 204.906166][T11766] netlink: 'syz.4.2926': attribute type 4 has an invalid length. [ 205.052334][T11770] loop7: detected capacity change from 0 to 512 [ 205.083050][T11770] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.097394][T11770] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 205.154959][T11770] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 205.176895][T11770] EXT4-fs (loop7): 1 truncate cleaned up [ 205.191549][T11770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.396223][T11790] bridge0: port 1(syz_tun) entered blocking state [ 205.402885][T11790] bridge0: port 1(syz_tun) entered disabled state [ 205.412402][T11790] syz_tun: entered promiscuous mode [ 205.423017][T11790] syz_tun: left promiscuous mode [ 205.428506][T11790] bridge0: port 1(syz_tun) entered disabled state [ 205.442152][T11790] bond3: (slave gretap1): Releasing active interface [ 205.463725][T11790] gretap1: left allmulticast mode [ 205.476955][T11790] bond4: (slave veth9): Releasing active interface [ 205.582378][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.713078][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 205.713096][ T30] audit: type=1326 audit(1749059934.521:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.743198][ T30] audit: type=1326 audit(1749059934.521:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.766962][ T30] audit: type=1326 audit(1749059934.521:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.791669][ T30] audit: type=1326 audit(1749059934.531:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.815422][ T30] audit: type=1326 audit(1749059934.531:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.839072][ T30] audit: type=1326 audit(1749059934.531:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.862720][ T30] audit: type=1326 audit(1749059934.531:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.886443][ T30] audit: type=1326 audit(1749059934.531:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.910321][ T30] audit: type=1326 audit(1749059934.531:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 205.933893][ T30] audit: type=1326 audit(1749059934.531:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 206.122783][T11822] bridge0: port 3(syz_tun) entered blocking state [ 206.129343][T11822] bridge0: port 3(syz_tun) entered disabled state [ 206.136211][T11822] syz_tun: entered allmulticast mode [ 206.142995][T11822] syz_tun: left allmulticast mode [ 206.159645][T11822] bond2: (slave dummy0): Releasing active interface [ 206.175088][T11822] bridge_slave_0: left allmulticast mode [ 206.180923][T11822] bridge_slave_0: left promiscuous mode [ 206.186611][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.198759][T11822] bridge_slave_1: left allmulticast mode [ 206.204479][T11822] bridge_slave_1: left promiscuous mode [ 206.210246][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.222675][T11822] bond0: (slave bond_slave_0): Releasing backup interface [ 206.233248][T11822] bond0: (slave bond_slave_1): Releasing backup interface [ 206.244347][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.252251][T11822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.261804][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.269306][T11822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.289642][T11822] bond1: (slave gretap1): Releasing active interface [ 206.296515][T11822] gretap1: left allmulticast mode [ 206.475784][T11844] __nla_validate_parse: 1 callbacks suppressed [ 206.475801][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2959'. [ 206.522253][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2961'. [ 206.603394][T11855] loop6: detected capacity change from 0 to 512 [ 206.631644][T11855] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #17: comm syz.6.2964: iget: bogus i_mode (0) [ 206.651796][T11855] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2964: couldn't read orphan inode 17 (err -117) [ 206.664725][T11855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.759090][T11864] bridge0: port 3(syz_tun) entered blocking state [ 206.765626][T11864] bridge0: port 3(syz_tun) entered disabled state [ 206.782565][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.792736][T11864] syz_tun: entered allmulticast mode [ 206.805600][T11864] syz_tun: entered promiscuous mode [ 206.814966][T11868] loop6: detected capacity change from 0 to 512 [ 206.823150][T11868] EXT4-fs: Ignoring removed orlov option [ 206.831634][T11868] ext4: Unknown parameter 'uid>00000000000000000000' [ 206.842265][T11864] syz_tun: left allmulticast mode [ 206.847430][T11864] syz_tun: left promiscuous mode [ 206.852575][T11864] bridge0: port 3(syz_tun) entered disabled state [ 206.878587][T11864] bridge_slave_0: left allmulticast mode [ 206.884632][T11864] bridge_slave_0: left promiscuous mode [ 206.890512][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.898992][T11864] bridge_slave_1: left allmulticast mode [ 206.904727][T11864] bridge_slave_1: left promiscuous mode [ 206.910654][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.929338][T11864] bond0: (slave bond_slave_0): Releasing backup interface [ 206.939925][T11864] bond0: (slave bond_slave_1): Releasing backup interface [ 206.950891][T11864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.958745][T11864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.961414][T11876] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 206.974737][T11864] bond1: (slave gretap1): Releasing active interface [ 206.982170][T11864] gretap1: left allmulticast mode [ 206.988578][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 207.029635][T11878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.037991][T11878] bond3: (slave bond4): making interface the new active one [ 207.058445][T11878] bond3: (slave bond4): Enslaving as an active interface with an up link [ 207.074578][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2972'. [ 207.085369][T11876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.134817][T11886] syzkaller0: entered promiscuous mode [ 207.140953][T11886] syzkaller0: entered allmulticast mode [ 207.346326][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 207.542473][T11913] bridge0: port 1(syz_tun) entered blocking state [ 207.550389][T11913] bridge0: port 1(syz_tun) entered disabled state [ 207.572016][T11913] syz_tun: entered allmulticast mode [ 207.580509][T11913] syz_tun: left allmulticast mode [ 207.597188][T11913] $H: (slave bridge0): Releasing backup interface [ 207.605067][T11913] bridge0: left promiscuous mode [ 207.761943][T11923] netlink: 'syz.4.2991': attribute type 10 has an invalid length. [ 207.770096][T11923] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2991'. [ 207.911178][T11937] wg2: entered promiscuous mode [ 207.916139][T11937] wg2: entered allmulticast mode [ 208.000551][T11935] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 208.076230][T11947] bridge0: port 1(syz_tun) entered blocking state [ 208.082904][T11947] bridge0: port 1(syz_tun) entered disabled state [ 208.091893][T11947] syz_tun: entered allmulticast mode [ 208.098179][T11947] syz_tun: entered promiscuous mode [ 208.105928][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3004'. [ 208.118884][T11947] syz_tun: left allmulticast mode [ 208.124099][T11947] syz_tun: left promiscuous mode [ 208.129370][T11947] bridge0: port 1(syz_tun) entered disabled state [ 208.138445][T11947] bond3: (slave bond4): Releasing backup interface [ 208.155090][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3004'. [ 208.249578][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3009'. [ 208.371113][T11981] bridge0: port 1(syz_tun) entered blocking state [ 208.377704][T11981] bridge0: port 1(syz_tun) entered disabled state [ 208.393188][T11981] syz_tun: entered allmulticast mode [ 208.409946][T11981] syz_tun: left allmulticast mode [ 208.608257][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3020'. [ 208.722349][T11999] xt_hashlimit: size too large, truncated to 1048576 [ 209.092810][T12017] bridge0: port 1(syz_tun) entered blocking state [ 209.099400][T12017] bridge0: port 1(syz_tun) entered disabled state [ 209.127279][T12017] syz_tun: entered allmulticast mode [ 209.151576][T12017] syz_tun: left allmulticast mode [ 209.338553][T12039] loop5: detected capacity change from 0 to 512 [ 209.353516][T12046] loop6: detected capacity change from 0 to 128 [ 209.371581][T12039] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.442099][T12039] EXT4-fs (loop5): mount failed [ 209.449312][T12053] pim6reg1: entered promiscuous mode [ 209.454666][T12053] pim6reg1: entered allmulticast mode [ 209.559912][T12059] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.679917][T12059] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.730626][T12059] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.787702][T12059] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.806690][T12077] loop5: detected capacity change from 0 to 128 [ 209.846624][T12059] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.864722][T12059] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.893685][T12059] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.912523][T12059] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.975979][T12092] loop6: detected capacity change from 0 to 1024 [ 209.985444][T12096] bridge0: port 1(syz_tun) entered blocking state [ 209.992209][T12096] bridge0: port 1(syz_tun) entered disabled state [ 209.999410][T12092] EXT4-fs: Ignoring removed bh option [ 210.005148][T12092] EXT4-fs: inline encryption not supported [ 210.014162][T12096] syz_tun: entered promiscuous mode [ 210.024401][T12098] loop5: detected capacity change from 0 to 512 [ 210.036776][T12096] syz_tun: left promiscuous mode [ 210.039621][T12098] EXT4-fs: Ignoring removed orlov option [ 210.042319][T12096] bridge0: port 1(syz_tun) entered disabled state [ 210.055087][T12098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.055226][T12092] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.067341][T12098] EXT4-fs (loop5): orphan cleanup on readonly fs [ 210.075413][T12092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 210.108546][T12098] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3060: bg 0: block 248: padding at end of block bitmap is not set [ 210.123492][T12092] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.3067: lblock 2 mapped to illegal pblock 2 (length 1) [ 210.139521][T12098] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3060: Failed to acquire dquot type 1 [ 210.140433][T12092] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.3067: lblock 0 mapped to illegal pblock 48 (length 1) [ 210.165651][T12092] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3067: Failed to acquire dquot type 0 [ 210.178093][T12098] EXT4-fs (loop5): 1 truncate cleaned up [ 210.184515][T12092] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 210.187365][T12098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.206645][T12092] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3067: mark_inode_dirty error [ 210.221418][T12092] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.232289][T12092] EXT4-fs (loop6): 1 orphan inode deleted [ 210.233765][T12098] EXT4-fs: Ignoring removed orlov option [ 210.240401][T12092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.256762][ T4035] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.266320][T12098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.273800][ T4035] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 210.290878][T12092] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm syz.6.3067: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.311248][T12098] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 210.338963][T12114] 9pnet: p9_errstr2errno: server reported unknown error [ 210.346372][T12098] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3060: Abort forced by user [ 210.357313][T12098] EXT4-fs (loop5): Remounting filesystem read-only [ 210.364001][T12098] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 210.374654][T12098] ext4 filesystem being remounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.397701][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.401269][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.426252][ T7073] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 210.439738][ T7073] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 210.449813][ T7073] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 210.515519][T12129] ALSA: seq fatal error: cannot create timer (-19) [ 210.529918][T12135] bridge0: port 1(syz_tun) entered blocking state [ 210.536513][T12135] bridge0: port 1(syz_tun) entered disabled state [ 210.547368][T12135] syz_tun: entered allmulticast mode [ 210.563911][T12135] syz_tun: left allmulticast mode [ 210.721419][ T30] kauditd_printk_skb: 413 callbacks suppressed [ 210.721436][ T30] audit: type=1400 audit(1749059939.531:5031): avc: denied { bind } for pid=12153 comm="syz.5.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.797519][ T30] audit: type=1400 audit(1749059939.531:5032): avc: denied { write } for pid=12147 comm="syz.0.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.817601][ T30] audit: type=1326 audit(1749059939.531:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 210.841131][ T30] audit: type=1326 audit(1749059939.531:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 210.864687][ T30] audit: type=1326 audit(1749059939.531:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 210.888265][ T30] audit: type=1326 audit(1749059939.531:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 210.911904][ T30] audit: type=1326 audit(1749059939.531:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 210.935568][ T30] audit: type=1326 audit(1749059939.531:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 210.959559][ T30] audit: type=1326 audit(1749059939.561:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 210.983359][ T30] audit: type=1326 audit(1749059939.561:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 211.087610][T12165] loop5: detected capacity change from 0 to 1024 [ 211.105911][T12165] EXT4-fs (loop5): inodes count not valid: 32 vs 1312 [ 211.256680][T12168] tipc: Bearer : already 2 bearers with priority 10 [ 211.264084][T12168] tipc: Bearer : trying with adjusted priority [ 211.270992][T12168] tipc: New replicast peer: 255.255.255.255 [ 211.277179][T12168] tipc: Enabled bearer , priority 9 [ 211.446789][T12178] bridge0: port 1(syz_tun) entered blocking state [ 211.453469][T12178] bridge0: port 1(syz_tun) entered disabled state [ 211.468309][T12178] syz_tun: entered allmulticast mode [ 211.474343][T12178] syz_tun: left allmulticast mode [ 211.694840][T12185] bridge0: port 1(macvlan0) entered blocking state [ 211.703878][T12185] bridge0: port 1(macvlan0) entered disabled state [ 211.737825][T12185] macvlan0: entered allmulticast mode [ 211.744496][T12185] bridge0: entered allmulticast mode [ 211.789444][T12185] macvlan0: left allmulticast mode [ 211.795773][T12185] bridge0: left allmulticast mode [ 212.148700][T12202] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.258962][T12202] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.349425][T12202] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.469651][T12202] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.537469][T12202] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.557438][T12202] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.583399][T12202] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.607356][T12202] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.767663][T12219] IPv6: sit2: Disabled Multicast RS [ 212.815536][T12228] netlink: 'syz.6.3119': attribute type 5 has an invalid length. [ 212.817816][T12229] netlink: 'syz.5.3110': attribute type 39 has an invalid length. [ 212.823470][T12228] __nla_validate_parse: 2 callbacks suppressed [ 212.823486][T12228] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3119'. [ 212.860599][T12228] : renamed from $H [ 213.110528][T12243] loop6: detected capacity change from 0 to 512 [ 213.118440][T12243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.129502][T12243] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3115: invalid block [ 213.146184][T12243] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3115: invalid indirect mapped block 4294967295 (level 1) [ 213.164703][T12243] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3115: invalid indirect mapped block 4294967295 (level 1) [ 213.179595][T12243] EXT4-fs (loop6): 2 truncates cleaned up [ 213.185873][T12243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.264116][T12256] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.3115: path /325/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 213.454176][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.478779][T12265] pim6reg1: entered promiscuous mode [ 213.484128][T12265] pim6reg1: entered allmulticast mode [ 213.682341][T12270] loop8: detected capacity change from 0 to 7 [ 213.693152][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.702381][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 213.710918][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.720128][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 213.731070][T12270] loop8: unable to read partition table [ 213.737112][T12272] loop7: detected capacity change from 0 to 128 [ 213.737282][T12270] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 213.756707][T12272] netlink: 'syz.7.3126': attribute type 6 has an invalid length. [ 214.042132][T12282] netlink: 'syz.4.3129': attribute type 1 has an invalid length. [ 214.055839][T12282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.068232][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 214.078697][T12282] bond5 (unregistering): Released all slaves [ 214.698928][T12323] tipc: Enabled bearer , priority 0 [ 214.706433][T12322] tipc: Resetting bearer [ 214.722414][T12322] tipc: Disabling bearer [ 214.729994][T12327] tipc: Bearer : already 2 bearers with priority 10 [ 214.737629][T12327] tipc: Bearer : trying with adjusted priority [ 214.744931][T12327] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 214.807256][T12331] ref_ctr increment failed for inode: 0x6e6 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810e3f0000 [ 214.819700][T12330] uprobe: syz.7.3150:12330 failed to unregister, leaking uprobe [ 214.839738][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 215.126373][T12354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3161'. [ 215.195419][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.206691][T12363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.222586][ T10] lo speed is unknown, defaulting to 1000 [ 215.228491][ T10] syz0: Port: 1 Link ACTIVE [ 215.451758][T12387] loop7: detected capacity change from 0 to 512 [ 215.470571][T12387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.488533][T12387] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.514217][T12387] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3173: corrupted inode contents [ 215.538310][T12387] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3173: mark_inode_dirty error [ 215.551743][T12387] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3173: corrupted inode contents [ 215.567651][T12387] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3173: corrupted inode contents [ 215.584795][T12387] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3173: mark_inode_dirty error [ 215.596817][T12387] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3173: corrupted inode contents [ 215.612259][T12387] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3173: mark_inode_dirty error [ 215.624027][T12387] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3173: corrupted inode contents [ 215.636756][T12387] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3173: mark_inode_dirty error [ 215.664168][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.888264][T12400] Set syz1 is full, maxelem 65536 reached [ 215.925410][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3183'. [ 215.966595][T12418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3185'. [ 215.992440][T12419] syzkaller0: entered promiscuous mode [ 215.998009][T12419] syzkaller0: entered allmulticast mode [ 216.005292][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 216.005307][ T30] audit: type=1400 audit(1749059943.816:5293): avc: denied { connect } for pid=12420 comm="syz.4.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.032244][ T30] audit: type=1400 audit(1749059943.826:5294): avc: denied { write } for pid=12420 comm="syz.4.3187" path="socket:[34971]" dev="sockfs" ino=34971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.131595][T12429] xt_hashlimit: size too large, truncated to 1048576 [ 216.190877][ T30] audit: type=1326 audit(1749059943.976:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.214752][ T30] audit: type=1326 audit(1749059943.976:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.238306][ T30] audit: type=1326 audit(1749059943.976:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.262037][ T30] audit: type=1326 audit(1749059943.976:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.285726][ T30] audit: type=1326 audit(1749059943.976:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.309292][ T30] audit: type=1326 audit(1749059943.976:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.333234][ T30] audit: type=1326 audit(1749059943.976:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.357082][ T30] audit: type=1326 audit(1749059943.986:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 216.787761][T12460] futex_wake_op: syz.5.3202 tries to shift op by -1; fix this program [ 216.797736][ T3395] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 216.805210][ T3395] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 216.812741][ T3395] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 216.823929][ T3395] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 217.026449][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 217.069191][T12477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12477 comm=syz.4.3208 [ 217.307724][T12510] loop5: detected capacity change from 0 to 512 [ 217.348419][T12510] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.367337][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3223'. [ 217.443364][T12510] EXT4-fs (loop5): 1 truncate cleaned up [ 217.452264][T12510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.524936][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.778841][T12546] netlink: 'syz.4.3239': attribute type 3 has an invalid length. [ 217.786650][T12546] netlink: 'syz.4.3239': attribute type 3 has an invalid length. [ 217.796478][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 218.418731][T12553] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 218.429547][T12553] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 218.459082][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3244'. [ 218.540149][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3243'. [ 218.549428][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3243'. [ 218.558482][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3243'. [ 218.568037][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3243'. [ 218.606791][T12578] random: crng reseeded on system resumption [ 219.086476][T12609] netlink: 'syz.0.3264': attribute type 1 has an invalid length. [ 219.100326][T12609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.109564][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 219.127253][T12609] bond5 (unregistering): Released all slaves [ 219.496121][T12626] loop5: detected capacity change from 0 to 256 [ 219.595540][T12633] loop5: detected capacity change from 0 to 4096 [ 219.617305][T12633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.646732][T12623] lo speed is unknown, defaulting to 1000 [ 219.665433][T12623] lo speed is unknown, defaulting to 1000 [ 219.668404][T12643] loop6: detected capacity change from 0 to 1024 [ 219.707838][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3268'. [ 219.728828][T12643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.791988][T12643] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3278: Allocating blocks 497-513 which overlap fs metadata [ 219.824718][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.872758][T12643] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3278: Allocating blocks 497-513 which overlap fs metadata [ 219.891907][T12659] loop5: detected capacity change from 0 to 256 [ 219.900712][T12659] FAT-fs (loop5): bogus number of FAT sectors [ 219.907027][T12659] FAT-fs (loop5): Can't find a valid FAT filesystem [ 219.910045][T12642] EXT4-fs (loop6): pa ffff888106a08310: logic 48, phys. 177, len 21 [ 219.922192][T12642] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 219.972668][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.043535][T12669] rdma_op ffff88811d1a0d80 conn xmit_rdma 0000000000000000 [ 220.318670][T12696] xt_hashlimit: max too large, truncated to 1048576 [ 220.367079][T12700] loop7: detected capacity change from 0 to 128 [ 220.396070][T12700] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.411943][T12700] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.442326][ T7771] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.462503][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3306'. [ 220.641694][T12735] syzkaller0: entered promiscuous mode [ 220.647317][T12735] syzkaller0: entered allmulticast mode [ 220.663879][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3315'. [ 220.737507][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3316'. [ 220.774689][T12744] lo speed is unknown, defaulting to 1000 [ 220.788961][T12744] lo speed is unknown, defaulting to 1000 [ 220.821123][T12752] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 221.063044][T12760] : left promiscuous mode [ 221.083406][T12760] bridge_slave_0: left promiscuous mode [ 221.129136][T12760] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.137771][T12760] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.146408][T12760] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.154831][T12760] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.164931][T12771] netlink: 'syz.0.3326': attribute type 4 has an invalid length. [ 221.194860][T12770] netlink: 'syz.0.3326': attribute type 4 has an invalid length. [ 221.204984][T10664] lo speed is unknown, defaulting to 1000 [ 221.206653][ T9] lo speed is unknown, defaulting to 1000 [ 221.234721][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 221.234734][ T30] audit: type=1326 audit(1749059949.046:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.281054][ T30] audit: type=1326 audit(1749059949.076:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.304930][ T30] audit: type=1326 audit(1749059949.076:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.328535][ T30] audit: type=1326 audit(1749059949.076:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.354854][ T30] audit: type=1326 audit(1749059949.076:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.382594][ T30] audit: type=1326 audit(1749059949.076:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.406621][ T30] audit: type=1326 audit(1749059949.076:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.430228][ T30] audit: type=1326 audit(1749059949.076:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.453890][ T30] audit: type=1326 audit(1749059949.076:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.477558][ T30] audit: type=1326 audit(1749059949.076:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3b7ee929 code=0x7ffc0000 [ 221.695842][T12793] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.749591][T12793] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.809660][T12793] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.879849][T12793] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.945428][T12793] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.956941][T12793] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.968706][T12793] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.979860][T12793] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.217038][T12816] ref_ctr increment failed for inode: 0x7e5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f461c0 [ 222.220693][T12813] lo speed is unknown, defaulting to 1000 [ 222.231234][T12815] uprobe: syz.7.3342:12815 failed to unregister, leaking uprobe [ 222.256057][T12813] lo speed is unknown, defaulting to 1000 [ 222.572213][T12821] netlink: 'syz.0.3343': attribute type 13 has an invalid length. [ 222.931677][T12814] Set syz1 is full, maxelem 65536 reached [ 223.137760][ T9] lo speed is unknown, defaulting to 1000 [ 223.143613][ T9] syz0: Port: 1 Link DOWN [ 223.151384][T12827] bridge: RTM_NEWNEIGH with invalid ether address [ 223.228601][T12840] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 223.260764][T12840] SELinux: failed to load policy [ 223.367390][T12855] bridge: RTM_NEWNEIGH with invalid ether address [ 224.194331][T12899] __nla_validate_parse: 1 callbacks suppressed [ 224.194346][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 224.209505][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3370'. [ 224.218475][T12899] netlink: 'syz.5.3370': attribute type 11 has an invalid length. [ 224.257848][T12899] loop5: detected capacity change from 0 to 512 [ 224.290538][T12899] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 224.414874][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3373'. [ 224.741022][T12927] tipc: New replicast peer: 10.1.1.2 [ 224.746491][T12927] tipc: Enabled bearer , priority 10 [ 224.818170][T12936] lo speed is unknown, defaulting to 1000 [ 224.846065][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 224.846304][T12936] lo speed is unknown, defaulting to 1000 [ 225.238646][T12962] loop5: detected capacity change from 0 to 1024 [ 225.268224][T12966] 9pnet_fd: Insufficient options for proto=fd [ 225.276299][ T3395] IPVS: starting estimator thread 0... [ 225.317130][T12962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.339481][T12962] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3395: Allocating blocks 497-513 which overlap fs metadata [ 225.368324][T12970] IPVS: using max 2304 ests per chain, 115200 per kthread [ 225.378025][T12961] EXT4-fs (loop5): pa ffff888106a4f850: logic 128, phys. 273, len 15 [ 225.386278][T12961] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 225.519171][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.551017][T12992] lo speed is unknown, defaulting to 1000 [ 225.551950][T12997] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.3411'. [ 225.558996][T12992] lo speed is unknown, defaulting to 1000 [ 225.602479][T13003] loop6: detected capacity change from 0 to 512 [ 225.649286][T13003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.708255][T13003] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.780142][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.878394][ T3395] tipc: Node number set to 4116100410 [ 225.906189][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3425'. [ 226.060724][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'. [ 226.071067][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3428'. [ 226.876220][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 226.876238][ T30] audit: type=1400 audit(1749059954.686:5569): avc: denied { mounton } for pid=13076 comm="syz.7.3440" path=2F3430302FE91F7189591E9233614B dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 226.908859][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3450'. [ 226.921066][ T3395] kernel write not supported for file bpf-prog (pid: 3395 comm: kworker/1:5) [ 227.016869][ T30] audit: type=1400 audit(1749059954.816:5570): avc: denied { setopt } for pid=13081 comm="syz.5.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.101507][ T30] audit: type=1326 audit(1749059954.916:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.150413][ T30] audit: type=1326 audit(1749059954.946:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.174210][ T30] audit: type=1326 audit(1749059954.946:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.198068][ T30] audit: type=1326 audit(1749059954.946:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.221906][ T30] audit: type=1326 audit(1749059954.946:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.245609][ T30] audit: type=1326 audit(1749059954.946:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 227.269593][T13084] syzkaller0: entered promiscuous mode [ 227.275635][T13084] syzkaller0: entered allmulticast mode [ 227.327061][T13090] lo speed is unknown, defaulting to 1000 [ 227.336038][T13090] lo speed is unknown, defaulting to 1000 [ 227.370590][ T30] audit: type=1326 audit(1749059955.186:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.7.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffac87811e5 code=0x7ffc0000 [ 227.472912][ T30] audit: type=1400 audit(1749059955.286:5578): avc: denied { map } for pid=13105 comm="syz.0.3449" path="socket:[38073]" dev="sockfs" ino=38073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.516547][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3451'. [ 227.605180][T13117] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.670387][T13117] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.760036][T13117] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.820689][T13117] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.843440][T13128] loop7: detected capacity change from 0 to 128 [ 227.853947][T13128] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.869172][T13128] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.891060][T13117] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.905900][T13117] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.935802][T13117] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.950047][T13117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.362206][T13133] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.399761][T13133] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.462400][T13133] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.510325][T13133] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.350784][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3464'. [ 229.721661][T13175] netlink: 'syz.0.3477': attribute type 4 has an invalid length. [ 229.884115][ T7771] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.907398][T13190] loop6: detected capacity change from 0 to 512 [ 229.927752][T13190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.950634][T13197] loop7: detected capacity change from 0 to 512 [ 229.970659][T13197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.986671][T13190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.005445][T13190] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.005524][T13197] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.069839][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.091780][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.132575][T13210] loop7: detected capacity change from 0 to 256 [ 230.156360][T13210] netlink: 'syz.7.3485': attribute type 13 has an invalid length. [ 231.053708][T13133] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.078444][T13133] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.087082][T13273] loop7: detected capacity change from 0 to 1024 [ 231.092590][T13133] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.094469][T13273] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.113612][T13133] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.122963][T13273] EXT4-fs: Ignoring removed nobh option [ 231.128803][T13273] EXT4-fs: Ignoring removed bh option [ 231.159846][T13275] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.177067][T13273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.212518][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.229809][T13275] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.279734][T13275] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.371720][T13275] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.614505][T13298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3520'. [ 231.982273][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3525'. [ 232.100166][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3531'. [ 232.429212][T13338] loop6: detected capacity change from 0 to 256 [ 232.442504][T13338] netlink: 'syz.6.3535': attribute type 13 has an invalid length. [ 232.644898][T13343] loop6: detected capacity change from 0 to 512 [ 232.680180][T13343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.695210][T13343] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.725814][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.740521][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 232.740539][ T30] audit: type=1326 audit(1749059960.556:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.7.3541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x0 [ 232.774958][T13354] ref_ctr increment failed for inode: 0x7ef offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810e3f3f40 [ 232.786660][T13353] uprobe: syz.6.3540:13353 failed to unregister, leaking uprobe [ 232.932792][ T30] audit: type=1326 audit(1749059960.746:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 232.956756][ T30] audit: type=1326 audit(1749059960.746:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 232.980417][ T30] audit: type=1326 audit(1749059960.746:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.004025][ T30] audit: type=1326 audit(1749059960.746:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.027683][ T30] audit: type=1326 audit(1749059960.746:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.051419][ T30] audit: type=1326 audit(1749059960.746:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.075029][ T30] audit: type=1326 audit(1749059960.746:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.098682][ T30] audit: type=1326 audit(1749059960.746:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.122435][ T30] audit: type=1326 audit(1749059960.746:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 233.474256][T13377] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.506196][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3551'. [ 233.598604][T13386] netlink: 'syz.6.3554': attribute type 10 has an invalid length. [ 233.606556][T13386] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3554'. [ 233.637977][T13390] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 233.647912][T13390] SELinux: failed to load policy [ 233.932056][T13408] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.280654][T13419] netlink: 'syz.0.3565': attribute type 13 has an invalid length. [ 234.346693][T13275] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.363320][T13275] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.377672][T13275] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.405349][T13275] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.576187][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3582'. [ 234.602559][T13437] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 234.618520][T13437] SELinux: failed to load policy [ 234.665465][T13447] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.246450][T13457] loop5: detected capacity change from 0 to 512 [ 235.332732][T13457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.345984][T13457] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.463334][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 235.472459][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 235.481525][T13471] netlink: 'syz.0.3581': attribute type 11 has an invalid length. [ 235.493182][T13469] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.3580: corrupted inode contents [ 235.535805][T13469] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.3580: mark_inode_dirty error [ 235.557598][T13469] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.3580: corrupted inode contents [ 235.578367][T13469] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.3580: mark_inode_dirty error [ 235.620578][T13469] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.3580: mark inode dirty (error -117) [ 235.763147][T13469] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 235.800354][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.861202][T13477] loop5: detected capacity change from 0 to 2048 [ 235.889703][T13477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 236.025055][T13485] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.049310][T13485] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 876 with error 28 [ 236.061985][T13485] EXT4-fs (loop5): This should not happen!! Data will be lost [ 236.061985][T13485] [ 236.071976][T13485] EXT4-fs (loop5): Total free blocks count 0 [ 236.079068][T13485] EXT4-fs (loop5): Free/Dirty block details [ 236.085189][T13485] EXT4-fs (loop5): free_blocks=2415919104 [ 236.091355][T13485] EXT4-fs (loop5): dirty_blocks=880 [ 236.097158][T13485] EXT4-fs (loop5): Block reservation details [ 236.103312][T13485] EXT4-fs (loop5): i_reserved_data_blocks=55 [ 236.209458][ T3987] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 236.336970][T13494] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 236.711050][T13507] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.711358][T13504] batadv_slave_0: entered promiscuous mode [ 236.730646][T13504] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3604'. [ 236.740445][T13504] batadv_slave_0 (unregistering): left promiscuous mode [ 237.001527][T13512] loop6: detected capacity change from 0 to 512 [ 237.011565][T13512] EXT4-fs: Ignoring removed nobh option [ 237.025479][T13512] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 237.044343][T13517] loop7: detected capacity change from 0 to 512 [ 237.046158][T13512] EXT4-fs (loop6): 1 truncate cleaned up [ 237.058572][T13512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.085787][T13517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.087490][T13512] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #12: block 7: comm syz.6.3609: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 237.098651][T13517] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.155141][T13512] EXT4-fs (loop6): Remounting filesystem read-only [ 237.245460][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.292096][T13526] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.3598: corrupted inode contents [ 237.311924][T13526] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #18: comm syz.7.3598: mark_inode_dirty error [ 237.335692][T13526] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.3598: corrupted inode contents [ 237.388937][T13526] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.3598: mark_inode_dirty error [ 237.521652][T13526] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.3598: mark inode dirty (error -117) [ 237.554784][T13526] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 237.627375][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.951711][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3616'. [ 237.989596][T13614] loop6: detected capacity change from 0 to 2048 [ 238.023269][T13614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 238.165465][T13628] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.180845][T13628] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1656 with error 28 [ 238.193522][T13628] EXT4-fs (loop6): This should not happen!! Data will be lost [ 238.193522][T13628] [ 238.203407][T13628] EXT4-fs (loop6): Total free blocks count 0 [ 238.209442][T13628] EXT4-fs (loop6): Free/Dirty block details [ 238.215501][T13628] EXT4-fs (loop6): free_blocks=2415919104 [ 238.221304][T13628] EXT4-fs (loop6): dirty_blocks=1664 [ 238.226665][T13628] EXT4-fs (loop6): Block reservation details [ 238.232745][T13628] EXT4-fs (loop6): i_reserved_data_blocks=104 [ 238.354896][ T3993] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 238.422163][ T30] kauditd_printk_skb: 596 callbacks suppressed [ 238.422180][ T30] audit: type=1326 audit(1749059966.236:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.467581][ T30] audit: type=1326 audit(1749059966.276:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.491940][ T30] audit: type=1326 audit(1749059966.276:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.515920][ T30] audit: type=1326 audit(1749059966.276:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.539717][ T30] audit: type=1326 audit(1749059966.276:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.563665][ T30] audit: type=1326 audit(1749059966.276:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.587584][ T30] audit: type=1326 audit(1749059966.276:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.611456][ T30] audit: type=1326 audit(1749059966.276:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.635302][ T30] audit: type=1326 audit(1749059966.276:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.659074][ T30] audit: type=1326 audit(1749059966.276:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.7.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffac874e929 code=0x7ffc0000 [ 238.693598][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 238.712272][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.763327][T13651] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 238.771903][T13653] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 238.860076][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3624'. [ 239.399102][T13695] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 239.490373][T13704] lo speed is unknown, defaulting to 1000 [ 239.504989][T13704] lo speed is unknown, defaulting to 1000 [ 239.785548][T13735] loop6: detected capacity change from 0 to 512 [ 239.801720][T13735] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.817252][T13735] EXT4-fs (loop6): mount failed [ 240.011773][T13775] loop6: detected capacity change from 0 to 1024 [ 240.030762][T13775] EXT4-fs (loop6): inodes count not valid: 32 vs 1312 [ 240.235414][T13805] loop6: detected capacity change from 0 to 128 [ 240.253232][T13805] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.278826][T13805] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 240.677820][T13846] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 240.688605][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'. [ 241.405182][T13910] loop6: detected capacity change from 0 to 512 [ 241.421838][T13910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.434800][T13910] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.535918][T13918] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.3670: corrupted inode contents [ 241.550438][T13918] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.3670: mark_inode_dirty error [ 241.562188][T13918] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.3670: corrupted inode contents [ 241.576542][T13918] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.3670: mark_inode_dirty error [ 241.593244][T13918] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.3670: mark inode dirty (error -117) [ 241.606854][T13918] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 241.644928][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.753420][T13931] loop7: detected capacity change from 0 to 512 [ 241.761031][T13931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.793825][T13931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.812186][T13931] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.827874][T13931] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3677: corrupted xattr block 19: overlapping e_value [ 241.844702][T13931] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 241.854333][T13931] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3677: corrupted xattr block 19: overlapping e_value [ 241.871027][T13931] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 241.880549][T13931] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3677: corrupted xattr block 19: overlapping e_value [ 241.899922][T13936] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3677: corrupted xattr block 19: overlapping e_value [ 241.914765][T13936] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 241.928050][T13936] EXT4-fs error (device loop7): ext4_xattr_block_find:1869: inode #15: comm syz.7.3677: corrupted xattr block 19: overlapping e_value [ 241.936216][T13933] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.976949][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.996498][T13938] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 242.023546][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3679'. [ 242.085288][T13933] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.093011][T13946] netlink: 'syz.0.3681': attribute type 6 has an invalid length. [ 242.110030][T13948] netlink: 'syz.7.3682': attribute type 5 has an invalid length. [ 242.117901][T13948] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3682'. [ 242.131461][T13948] : renamed from bond0 [ 242.187263][T13933] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.361988][T13933] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.430103][T13972] lo speed is unknown, defaulting to 1000 [ 242.437008][T13972] lo speed is unknown, defaulting to 1000 [ 242.682642][T13933] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.703225][T13933] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.723940][T13933] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.736081][T13933] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.841348][T14025] lo speed is unknown, defaulting to 1000 [ 242.855793][T14025] lo speed is unknown, defaulting to 1000 [ 243.073432][T14073] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 243.092195][T12834] kernel write not supported for file bpf-prog (pid: 12834 comm: kworker/1:11) [ 243.174681][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3693'. [ 243.388923][T14129] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.3695'. [ 243.494486][T14146] pim6reg1: entered promiscuous mode [ 243.500015][T14146] pim6reg1: entered allmulticast mode [ 243.759099][ T30] kauditd_printk_skb: 553 callbacks suppressed [ 243.759119][ T30] audit: type=1326 audit(1749059971.576:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.792434][ T30] audit: type=1326 audit(1749059971.576:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.816330][ T30] audit: type=1326 audit(1749059971.606:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.840110][ T30] audit: type=1326 audit(1749059971.606:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.864095][ T30] audit: type=1326 audit(1749059971.606:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.887699][ T30] audit: type=1326 audit(1749059971.606:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.911506][ T30] audit: type=1326 audit(1749059971.606:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.935347][ T30] audit: type=1326 audit(1749059971.606:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.959028][ T30] audit: type=1326 audit(1749059971.606:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.983070][ T30] audit: type=1326 audit(1749059971.606:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf9ce929 code=0x7ffc0000 [ 243.983747][T14179] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 244.151023][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 244.206081][T14187] lo speed is unknown, defaulting to 1000 [ 244.212776][T14187] lo speed is unknown, defaulting to 1000 [ 244.918652][T14208] tipc: Cannot configure node identity twice [ 245.066538][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'. [ 245.113569][T14230] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 245.176248][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 245.187657][T14238] lo speed is unknown, defaulting to 1000 [ 245.191680][T14237] loop5: detected capacity change from 0 to 512 [ 245.211014][T14237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.229880][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3736'. [ 245.241671][T14238] lo speed is unknown, defaulting to 1000 [ 245.250710][T14237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.273628][T14237] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.299913][T14237] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3732: corrupted xattr block 19: overlapping e_value [ 245.335216][T14237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 245.352337][T14237] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3732: corrupted xattr block 19: overlapping e_value [ 245.366934][T14237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 245.383460][T14237] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3732: corrupted xattr block 19: overlapping e_value [ 245.410851][T14265] loop7: detected capacity change from 0 to 512 [ 245.423785][T14260] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3732: corrupted xattr block 19: overlapping e_value [ 245.427689][T14265] EXT4-fs: Ignoring removed nobh option [ 245.444351][T14260] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 245.455844][T14265] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.467501][T14265] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 245.477728][T14265] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3738: Corrupt directory, running e2fsck is recommended [ 245.493118][T14260] EXT4-fs error (device loop5): ext4_xattr_block_find:1869: inode #15: comm syz.5.3732: corrupted xattr block 19: overlapping e_value [ 245.508631][T14265] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 245.518209][T14265] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.3738: corrupted in-inode xattr: invalid ea_ino [ 245.533580][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.535072][T14265] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3738: couldn't read orphan inode 15 (err -117) [ 245.557387][T14265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.582746][T14265] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.594391][T14265] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 245.604621][T14265] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3738: Corrupt directory, running e2fsck is recommended [ 245.622598][T14265] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.634537][T14265] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 245.644683][T14265] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3738: Corrupt directory, running e2fsck is recommended [ 245.645975][T14286] bridge: RTM_NEWNEIGH with invalid ether address [ 245.668510][T14265] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.680503][T14265] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 245.690696][T14265] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3738: Corrupt directory, running e2fsck is recommended [ 245.714907][T14265] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.736740][T14265] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.3738: path /461/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 245.757818][T14265] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 8: comm syz.7.3738: path /461/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 245.806576][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.312060][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3746'. [ 246.344725][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 246.361033][T14383] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 246.371122][T14383] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 246.392687][T14383] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 246.402095][T14383] bond3 (unregistering): Released all slaves [ 246.495483][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3750'. [ 246.538402][T14405] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.599983][T14405] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.659676][T14405] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.699821][T14405] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.745379][T14405] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.757127][T14405] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.769634][T14405] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.781792][T14405] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.000733][T14419] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3754'. [ 247.041318][T14422] 9pnet: p9_errstr2errno: server reported unknown error [ 247.501375][T14436] loop6: detected capacity change from 0 to 1024 [ 247.510603][T14436] EXT4-fs: Ignoring removed orlov option [ 247.524684][T14436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.660831][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3767'. [ 248.415496][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.581782][T14460] lo speed is unknown, defaulting to 1000 [ 248.598744][T14460] lo speed is unknown, defaulting to 1000 [ 248.621287][T14473] loop5: detected capacity change from 0 to 512 [ 248.657534][T14473] EXT4-fs: Ignoring removed nobh option [ 248.667608][T14473] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 248.679431][T14473] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 248.689606][T14473] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3776: Corrupt directory, running e2fsck is recommended [ 248.715645][T14473] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 248.727831][T14473] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3776: corrupted in-inode xattr: invalid ea_ino [ 248.763504][T14473] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3776: couldn't read orphan inode 15 (err -117) [ 248.780854][T14473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.814387][T14473] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 248.826067][T14473] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 248.836260][T14473] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3776: Corrupt directory, running e2fsck is recommended [ 248.853603][T14473] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 248.865317][T14473] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 248.875747][T14473] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3776: Corrupt directory, running e2fsck is recommended [ 248.920134][T14484] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 248.931983][T14484] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 248.942306][T14484] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3776: Corrupt directory, running e2fsck is recommended [ 248.977837][T14481] bridge: RTM_NEWNEIGH with invalid ether address [ 248.998201][T14473] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 249.096483][T14473] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.3776: path /437/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 249.152735][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'. [ 249.179577][ T30] kauditd_printk_skb: 353 callbacks suppressed [ 249.179596][ T30] audit: type=1400 audit(1749059976.996:7218): avc: denied { write } for pid=14491 comm="syz.7.3782" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.196561][T14473] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 8: comm syz.5.3776: path /437/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 249.253647][T14494] loop7: detected capacity change from 0 to 512 [ 249.291506][T14494] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 249.332833][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.352590][T14494] EXT4-fs (loop7): 1 truncate cleaned up [ 249.380574][T14494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.461315][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3787'. [ 249.495447][ T30] audit: type=1326 audit(1749059977.296:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.519258][ T30] audit: type=1326 audit(1749059977.296:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.543215][ T30] audit: type=1326 audit(1749059977.296:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.560117][T14506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14506 comm=syz.6.3787 [ 249.566973][ T30] audit: type=1326 audit(1749059977.296:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.603641][ T30] audit: type=1326 audit(1749059977.296:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.627268][ T30] audit: type=1326 audit(1749059977.296:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.650883][ T30] audit: type=1326 audit(1749059977.296:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.674476][ T30] audit: type=1326 audit(1749059977.296:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.698403][ T30] audit: type=1326 audit(1749059977.296:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61191e929 code=0x7ffc0000 [ 249.789042][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.811156][T14508] netlink: 'syz.4.3789': attribute type 4 has an invalid length. [ 249.830006][T14508] netlink: 'syz.4.3789': attribute type 4 has an invalid length. [ 250.022366][T14526] netlink: 'syz.6.3796': attribute type 1 has an invalid length. [ 250.053214][T14526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.071812][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3796'. [ 250.094787][T14526] bond0 (unregistering): Released all slaves [ 250.284325][T14537] lo speed is unknown, defaulting to 1000 [ 250.295029][T14537] lo speed is unknown, defaulting to 1000 [ 250.326852][T14545] netlink: 'syz.5.3802': attribute type 4 has an invalid length. [ 250.369552][T14545] netlink: 'syz.5.3802': attribute type 4 has an invalid length. [ 250.379380][T14548] netlink: 'syz.7.3803': attribute type 10 has an invalid length. [ 250.391319][T14548] : (slave bridge0): Enslaving as an active interface with an up link [ 250.402360][T12836] lo speed is unknown, defaulting to 1000 [ 250.408168][T12836] sz0: Port: 1 Link ACTIVE [ 250.435286][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3805'. [ 250.456685][T14552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14552 comm=syz.5.3805 [ 250.488865][T14554] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 250.497578][T14554] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 250.511203][ T3391] lo speed is unknown, defaulting to 1000 [ 250.517215][ T3391] syz0: Port: 1 Link ACTIVE [ 250.552371][T14559] syzkaller0: entered promiscuous mode [ 250.557938][T14559] syzkaller0: entered allmulticast mode [ 250.598854][T14565] netlink: 'syz.7.3811': attribute type 1 has an invalid length. [ 250.616357][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.638183][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3811'. [ 250.674491][T14565] bond0 (unregistering): Released all slaves [ 251.528819][T14589] lo speed is unknown, defaulting to 1000 [ 251.535506][T14589] lo speed is unknown, defaulting to 1000 [ 251.648357][T14593] netlink: 'syz.5.3822': attribute type 10 has an invalid length. [ 251.659607][T14593] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.725456][T14604] lo speed is unknown, defaulting to 1000 [ 251.732188][T14604] lo speed is unknown, defaulting to 1000 [ 252.304240][T14635] lo speed is unknown, defaulting to 1000 [ 252.310855][T14635] lo speed is unknown, defaulting to 1000 [ 252.454881][T14647] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 252.619517][T14652] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.669812][T14652] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.720285][T14652] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.790346][T14652] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.877585][T14652] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.889179][T14652] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.900921][T14652] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.912575][T14652] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.030819][T14665] loop7: detected capacity change from 0 to 512 [ 253.054539][T14665] EXT4-fs: Ignoring removed orlov option [ 253.070386][T14665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.116349][T14665] EXT4-fs (loop7): orphan cleanup on readonly fs [ 253.123290][T14665] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3846: bg 0: block 248: padding at end of block bitmap is not set [ 253.140254][T14665] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3846: Failed to acquire dquot type 1 [ 253.209287][T14665] EXT4-fs (loop7): 1 truncate cleaned up [ 253.284003][T14665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.434728][T14664] EXT4-fs (loop7): shut down requested (2) [ 253.481456][T14664] EXT4-fs: Ignoring removed orlov option [ 253.527677][T14664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.602214][T14673] syzkaller0: entered promiscuous mode [ 253.608175][T14673] syzkaller0: entered allmulticast mode [ 253.650315][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.795536][T14686] lo speed is unknown, defaulting to 1000 [ 253.802108][T14686] lo speed is unknown, defaulting to 1000 [ 254.137590][T14704] loop7: detected capacity change from 0 to 512 [ 254.144732][T14704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.157956][T14704] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3857: invalid block [ 254.174614][T14704] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3857: invalid indirect mapped block 4294967295 (level 1) [ 254.190760][ T30] kauditd_printk_skb: 606 callbacks suppressed [ 254.190776][ T30] audit: type=1326 audit(1749059982.006:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 254.220526][ T30] audit: type=1326 audit(1749059982.006:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 254.244142][ T30] audit: type=1326 audit(1749059982.006:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 254.274605][T14704] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3857: invalid indirect mapped block 4294967295 (level 1) [ 254.293632][T14704] EXT4-fs (loop7): 2 truncates cleaned up [ 254.300294][T14704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.314933][ T30] audit: type=1326 audit(1749059982.086:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 254.338637][ T30] audit: type=1326 audit(1749059982.086:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 254.362199][ T30] audit: type=1326 audit(1749059982.086:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 254.385815][ T30] audit: type=1326 audit(1749059982.086:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 254.409370][ T30] audit: type=1326 audit(1749059982.086:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f21d4ade929 code=0x7ffc0000 [ 254.432986][ T30] audit: type=1326 audit(1749059982.106:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d4ad58e7 code=0x7ffc0000 [ 254.456799][ T30] audit: type=1326 audit(1749059982.106:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14703 comm="syz.6.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21d4a7ab19 code=0x7ffc0000 [ 254.483973][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.569772][T14711] syzkaller0: entered promiscuous mode [ 254.575358][T14711] syzkaller0: entered allmulticast mode [ 254.730301][T14716] lo speed is unknown, defaulting to 1000 [ 254.748761][T14716] lo speed is unknown, defaulting to 1000 [ 254.800238][T14722] bridge_slave_0: entered promiscuous mode [ 255.045110][T14734] lo speed is unknown, defaulting to 1000 [ 255.076236][T14734] lo speed is unknown, defaulting to 1000 [ 255.222483][T14753] SELinux: security_context_str_to_sid ( lN}ĽwL&bYKBB2k?j1p-X!A:?qDV') failed with errno=-22 [ 255.244509][T14751] $H: renamed from bond0 (while UP) [ 255.252153][T14751] $H: entered promiscuous mode [ 255.257271][T14751] bridge0: entered promiscuous mode [ 255.368134][T14755] loop5: detected capacity change from 0 to 1024 [ 255.386911][T14755] EXT4-fs: Ignoring removed orlov option [ 255.405373][T14755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.748446][T14767] ================================================================== [ 255.756597][T14767] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 255.764623][T14767] [ 255.766958][T14767] write to 0xffff88811a0229a4 of 4 bytes by task 14755 on cpu 1: [ 255.774683][T14767] xas_set_mark+0x12b/0x140 [ 255.779213][T14767] tag_pages_for_writeback+0xc2/0x290 [ 255.784624][T14767] ext4_do_writepages+0x697/0x21c0 [ 255.790125][T14767] ext4_writepages+0x176/0x300 [ 255.794925][T14767] do_writepages+0x1c3/0x310 [ 255.799539][T14767] filemap_write_and_wait_range+0x144/0x340 [ 255.805479][T14767] filemap_invalidate_pages+0xa4/0x1a0 [ 255.810971][T14767] kiocb_invalidate_pages+0x6e/0x80 [ 255.816198][T14767] __iomap_dio_rw+0x5d4/0x1250 [ 255.821008][T14767] iomap_dio_rw+0x40/0x90 [ 255.825381][T14767] ext4_file_write_iter+0xad9/0xf00 [ 255.830707][T14767] iter_file_splice_write+0x5f2/0x970 [ 255.836209][T14767] direct_splice_actor+0x156/0x2a0 [ 255.841373][T14767] splice_direct_to_actor+0x312/0x680 [ 255.846790][T14767] do_splice_direct+0xda/0x150 [ 255.851681][T14767] do_sendfile+0x380/0x650 [ 255.856136][T14767] __x64_sys_sendfile64+0x105/0x150 [ 255.861377][T14767] x64_sys_call+0xb39/0x2fb0 [ 255.865988][T14767] do_syscall_64+0xd2/0x200 [ 255.870567][T14767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.876606][T14767] [ 255.878945][T14767] read to 0xffff88811a0229a4 of 4 bytes by task 14767 on cpu 0: [ 255.886598][T14767] file_write_and_wait_range+0x10e/0x2c0 [ 255.892278][T14767] generic_buffers_fsync_noflush+0x45/0x120 [ 255.898230][T14767] ext4_sync_file+0x1ab/0x690 [ 255.903058][T14767] vfs_fsync_range+0x10d/0x130 [ 255.907838][T14767] ext4_buffered_write_iter+0x34f/0x3c0 [ 255.913423][T14767] ext4_file_write_iter+0xdbf/0xf00 [ 255.918665][T14767] iter_file_splice_write+0x5f2/0x970 [ 255.924091][T14767] direct_splice_actor+0x156/0x2a0 [ 255.929259][T14767] splice_direct_to_actor+0x312/0x680 [ 255.934691][T14767] do_splice_direct+0xda/0x150 [ 255.939488][T14767] do_sendfile+0x380/0x650 [ 255.943933][T14767] __x64_sys_sendfile64+0x105/0x150 [ 255.949338][T14767] x64_sys_call+0xb39/0x2fb0 [ 255.953954][T14767] do_syscall_64+0xd2/0x200 [ 255.958497][T14767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.964516][T14767] [ 255.966849][T14767] value changed: 0x02000021 -> 0x04000021 [ 255.972569][T14767] [ 255.974896][T14767] Reported by Kernel Concurrency Sanitizer on: [ 255.981062][T14767] CPU: 0 UID: 0 PID: 14767 Comm: syz.5.3887 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 255.993234][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.003388][T14767] ================================================================== [ 256.281498][ T6640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.