last executing test programs: 4m6.157413682s ago: executing program 32 (id=1090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 3m34.971921589s ago: executing program 33 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3m20.651457665s ago: executing program 34 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="d83abcbae7a7e94a1ba78ddec3639a33d071", @ANYRES32, @ANYBLOB="6c11ca8008000400fd8f0de9935ffb17c785fd105c7fd1110eff0db378156fc6", @ANYRES32=0x0, @ANYBLOB="14001800fc000000000000000000000000000001d631c6888d6bce8a68f2417884a4b47279ffa285fa3220fc28e61c2d7947699efe78e6f68c3fe7db1d0a4d63683044595273a3cfd1177811514039b4cbf40336a6a96d85fada2adb23f5b1fdd2c8ca9c666587b51733e75cd7810d7f4fca0c716607f4fa3430a6ec8e2e82147f18297e1bdde030ddfa2610bb4d212f9e81205f4b3e2015b1335edb12435076b0b7093de14c3f4655070b72ce7ac84390b2314066fc07600528cd3217164b4b5b01507b0e3a226bd1fd218e6ecddc542ab05b74b8df06c0ed0a0d11e2d60839ee0d844ef27475ac087653b87a9a922d9b78116aa93c4d4bca6ecd3bd29bb4ce832f32dba42e95a454ccd667cad09a6fc589babc306b1ce1b7c2eb81fb7709cbed66e5529c27f2295866c2f57ebb170c449cd8d72c30b11a9a9e490bdeafa1e754c548a3d7ef88cac4b1fb496323230a6b120fc4e3c78d66c411b5dbb3fc3d69a771eb58eee0b58d5d0f18e5cd44ac88822b9df3a9065e309fe1e967498c2e291444542cbe600b73adbc5d7d7ad935369be1e95827c9a258d8acb0c6072dba027ef8ae292c17d93f396324a2ed0caa22873f26c920334983e3f818ad1cd02cc9ed139bf9131a053b09d31be10246d4d98b0945bc1c096557056048a2c1a0b51517915cefc65cae25b69fe3824698da532e402cbcf9267ceb7326c19194cef05e4ae011e79bffbaa0f9f82a62d24caa37ba6516a10f57679d4c03be8465bbcb0d355dc3799138f5d12ebdd3b6aeec6dfc90deaed71a79702812bd20b24eb41a26f9043fa0fa3240ec0cb6cfe8f349b8460a63d9a1eb1fda41a3e1c910545bef98929b16eff98c9d9a498e5ef899a789ecf9c590c28ab56943f82b9a81d80fbc302d379d17f34b8b5962c0de114e66baa7707de252a5a55797b294977a88c83d9e66df3a3ccbcb99747051bd020741e285f7822e54d29a9dd31a633e48979e097ceb51db8c2fa8e960b6cb54f02e294f7c94f98502010715396cafc0a910845b53f1b4886099fc3a43512c7003efe3cf549738f1a82de6715f59147bf6c6970e8a0a377e0e08386dd1f37e998f0c5d1280107c2078e4a360bfc8c62b42781d9806380ae025db32c3389b6e922d51410ff6bd90d17c5898f9e3dc3bcfb58db6255b09152ca04c9025799e65759b4ce1e1b69e0b6ee8dc487e0b5ad9f2a183a7183c763c3e7dcf81c42f0e7a4893e1eecab5214c57465a166e555c350f5a70a2727652de182de97ddfc1a9bb21193cef1c01cc060eca47a46625f8abcbbcc0ef4d0e6db920ba422d6f1b49aedefb9eacd2a9b075a41e0459315d86262d71fe44ab8af7e3db1d358827fae332490c8c43278ba8894585928ed88941a0339e7c5c5264c0e82643630c7ac2f6c92d3b8245bbf634db0cb02a3c5513ef02f27831aae54d4c45611ec00625aac37eb6680270ba95c931019e4152bc51ca0b2cb6603827ff94ab763393e9de6993e3a82d894cf623107ec6fd2f4089c998e31054cd075727881a8097d806bdaf82c0bd154d670a539c36d126c6c87b989f60f70a693c3f2c96b0f20ae896e87703853cc4ee2edfd2a18dde4ed5371e1032cdffae4eadfcff13e5c6e97f50e79c132febbe46dd9e035500b532a65aa6f17fca6d6fcd571515050ca609fd889072dcc894bf0679365872465b0cda1d6f13fd12bf33568e446544c6649daaa1f37bece51ec6198830a44f88a565d39ecb20267eb4211c497354c246a038d01ee73a4920b181043704c3e1a33acbe8baa42d578d44b503c0e321d66f17d77bc3b1c665ad04faba1330ddd07b9a34b85dda400e02c64d070beda6e7a5bd30472bb2731c1efc5adfb0b4bbf819ad773ba8234b19548cb8b2e4a0e8d798df60fa6983daf609e6ff379c5bee6079c3ad7e496616c4feb683ac5bf1158b1a44da5f349a6e1739f003687cbd50a8b628d7ad4856b03d2ec7b5e1863418dd82b3b980986fb97ec4fa51f05ea3ba90e4611f817833c3d8e2e479756c38a81881a101c2cbd34457f465ba51af0db42074f483517b93eb4cce6917661eb5ac95b1c42b8d9e4c7e8d46a6a021204366b29c0dbfb318f64fb0fc3f8e688bfe838267b58fe3b25f75dc4797f011384a405ad110e8dd3744e0e615dc72715145717d025e7df958d6eddb3688e261d66994977a8d1b30ad2137ec921f033e659e28c0ab99cfbddf58be72570f53912e96952f2d2a50be1fb4f4134fbd79b7321475a31f5d1184b66a1914468f0ffe6ddad5c3e448099c507d73dce98218aa1deaa734c19783b4a4f42a947a67b8f467f1bb468cb9862c1b85647a43ef503c8f7b52fc1eeabbc18cb2e994e65b5001d8a94496a480e2f90a62089c8e19c85847862bd5107c39263e28b68495f732e080c0d5dee9a868ca3d6473a44fffcff791dba364137edc1a39f296708893574645f0573a73ff9962abaf7e4b8cf4f54d1e20564c78858c0f9bb5097f9cba866b068e538438995be989a3de3f49b76448274e504d01da0d706ea920a87ad4e2eba7aab8b8d80e389a696bd3009a69df71a63bae5bfc1738bd24280d1d0b58388b6f0aedb065106c6e88007e3c27792b9c058359dbd066fb6ea65afd14c4d1c1b0bbf6f618deeb46cb28e3c2a759fb93d0e18fb045dbbbc4cd4e16e221e1e33c2bdafaba23cef650e18fe4022d5bc86ec3e10dd96104bc00b1df8ea283769ecf01f14b746caa952563e4d7cb3e209e0d34a2c081dd75047a4c7de45812838e5064b336e6a498befa838c55ecb43a19a48dd2954bef22c4079c64ac7cac9552684bb4e1835a8cea2c2570ea30c4383d74de7b5dcedaed2c7f32d1652d4346dde554f0d8b03bad970605435f8deb631530f2a4aea7d5263a5c27bccefbd3a504081355dc6ec441842b890359f6ef12923a00a1543f697c039bd7e6e7f919a63b8bffb50ded4a68bccb51b473d90a5d99c0c48af38c5565f4f41ecefedcc5d4188a64e645dd2aecb84332b2874012f1374213f62d73f8775be49ea116bff8303c5d693a76262ad2f6ec71ef85027441e422a2c902bb65bc9db330394d575a3cae5a9d59773c068c547b2066d3a1f140ef55021566ee93c9bb19dbcefeec12cd2f9c7b0f788365257fa1cac9f1c141949c386d4f5b6aa83c1c739e78b7ea671bf20e0c7f8edbd7a9a9f02222c826c09ce58ef8c707dda14448acb8d85a7e1620893f4d87bff4725acf268995da02bc5c0e352cda1cadc1b8e7bd442df9e323e396f6b1b37a8c917e8e049a8c2f734ad374fb99eef94081431e9e657b9aca7e826ad880f1f88eb268166547866532850e9c88a91f0c5966cff5cc6606bdf376c5e305c753de78c5eec1de7dc2ad3d267d3860b2b23692de04fa28b2dcd330bbe7d323eabdaee64b07aff64e0a75165a620fad03a5e8d123420bb41199fda20dcc796f92acb7b22076290c3c30b78a7ed3684a5f20b3520c6c87c2227a64e866c3019f11f80c7fcd7e0f8742bf91a6450d60007e0abfbd5e21e94cefe1ab12a225d0c81368097e389e8cfd02827be4453089b6ef1959efdf94a95bd0b1c44b9c5e6ce67f433b7388376aab9090a4989eb52ebee20d089d6977d41ca46eedec864bad73e963c0c1467fb36b4a991aad1d3d8823c846fe6aaf55852b694608dc089d3bc0b07a7254cd6c6f440e4fac5e03bcf74853debfd27bdfe84937adb4a97963f3f07982d04706fdd6fa0fc594a9578cf5d6aa75fab39eff4be89a4bbd81e22a854cb68e20fbd46330832c0cd2c3424d22d4c43efc17624fa387dd35038ebd95ed0e621092323adf0d5c68857307ffa78c3ef986390c17156a47da3a0d7d5e965ecc31a5fedd3fc5b0ba75aabb77d99e0615953e6b04f62863ae28587e89d6826aca3af431ea90550e5b3c75e320538647729215236f3bd652bc374fd9d521f38a270f66565f7c3410cac1a353b68b8cb36efce631cf3c4351467a8f7cb666ce51a9cd5a916ec3e8199fe5952f2f8122841bc244ce68fd63f251e3028381c8104b94a35722d6135946a84d316dc879ed2b3387b75813991518271c69cdc27f8cfb44d013d2322c4b0572de11b07006879920ca95309100eebb1a2808a8b78ded82a68924028b322d04e574cabe085457261e3bafcfa23ef30195fec6d65145ad26a3c5bccdaf7f79b4eb0d4368899d591e972e6e69f8022fab74632578e9cce3ac5491d7fefefbd9f4e70a877833fa97f6117e6838dde239ed629748da765eadc1f0d24325b70ca61fb2b89e6fd9ece62f6e6f22c6542d9b091ff43918f1eccdf5d91f49c744e664e28fedeeda58a9893ee947c3b963cc04f63344258cba7a8d2bc5660865fe4e4cca93050b35c2c3c7ced0b38d17f08fad35098091a8d25451eb9783ccc306078a60f5d45fe7c9b152c63baefc47026bbdb41659127d0a26e5d4ab77c32ae04b03c1a9b7c0016b78ad4add52d9b13ca90167aae0cbfe37bbb3fa82838b567711b35906b442b5c6f516114aed888eb2e1b7586e2c7ca7c6a59018d699ae049c0fad3710e4ab25da0d3cf57a81858f488e68c2ec99c1ece1ed90499719feb670f6d829ba3af7cfcf75c2b957c98c8b9dfe46c18e33c8085b5e7fe3ad9f9f640c4013bc196e690b1dc48081852fcf5b8806af2dfce7bc2c2d6ed9f5917e025500343af772a468411898790bef5f5856df5a50acbcc9fa6c38ee0856708e45a0f8287dbe6cddff9c665880a2c104d20d5b27b2faf3ec84950c442e9108c5e578a7459d08727f64b1fc589cc47daca73cfedd5a469745ae3508bc3b79d6a2045cc3367c8775b9adc80996da53d192a89367249c493b393476673ac9561838e3477425c3a14c3f10fb7f5a3fcebdc652f453da03053d0838c37ed640abb4a20f5fa10b275fa69f994520b4d1c49f8df2c19db128d55379b26da4670981c68e54b7bb9394daa0fd4932f26986b0142c4a8fb65eb1f352c3e3af5dbcf869437bcc18bdca032c3559f2d05db2859e1f5d6e42a20041a8bbe045ba51caeb234642fc7eda01bb9b3b3f5046c9868d712300e8fa582fdfaf5a981c520efb45cd9dc65e5751b84e38b743412e66cfe519d4d8c722833215df56b5b876fa131971750529891a014664b3915c5d81f3749c012b8b39a5424fbcfdac97559ec94e76e4c674ec2263c0e934861f06de92fb24c0995c6729c72dafcb9b46674296c2a0b9daf7a7e2b3ee2f4f476ff73a2e089a0aa550d3d6215bcd21dee8e350d145d6528a8958fcde3bf9d99cef0275d19d7c59b1e912ca5fc03db9b81ca46c06897d3b63b8d20ca172d18c147a1de551b2e7d39f3f9161bdfa3ebb6cfc80eda66308349f82c1a069b7b8a89479a9a473cd4357cb0a7ff974227159b200b876edca5b37cd610b515037518d660520c88ec065a5cbd1450d42c3a734fd2b32335ad0248b22b658f131599ae95267ebc8d0b59d972a52fb56987add6c7f4c9d8de6b392b9743cd36396ee2f4ebfc1d53b7b949fa04460b190ca2f434c70be89cc5be8051b03808b6de03ac16065edafee18d53ed63d1c544673107cb32ef257f5e6e86bb3063a558fa686998dcb38acbfc33983a48ce853cf94aee11cd3dd7b3b69c0115fef1df7197429cd4c8690e43bed96c283fac688365625d23e88d1f8bfb04a731e5e0eac4846e636f76681253a46595b0fe4f71ff6a9eaae0bc18be258afa8ca1fb6e7b3b6245e477ecb677cda2d7521cf8693d69ba46ef4c0e158f780e51f82e5662aac8b20d4c811f2f8216d47b26ae82a8ffebd79268bca3fd4a987d11086f3f9838dd9a21d64a54901de805ecc02c4a8c03af81864420fc659c4b0365e50a94f1284d3ef27b6dfd4a43faa0f947a129f279edbe19dc33bb24c656a829db7871059cc0c0604fed8bb4d8f95597db7fcab34e5730534946e0d95acc7c0f55d5927dbffbd437a29bd87a586dc4e464233c0d934ae89cd15025416f9627378305f6eaf06c13dea29c23a6930267ae3db2eae8a637b88f8e6e9ebf64059595d8fb08abad50b0c7ac5387375f6b2d13dcdc4bcfde61335078c1100b400b3706f8abdd512f1802567aeb800000014001200fc02000000000000000000000000000184e9cb1d633717c7971a6dbca0513308300bf6cd1015b442a15f8d44a7b3e3d07d76f49967aecfebe1e17e572ebc5cef0914e878e7c1697fcc600400c5802900e00053c858cdcf3b736de63feb00e09098f3d75cec", @ANYRES32], 0x21b0}}, 0x4c000) 2m22.188033456s ago: executing program 35 (id=4160): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") open(0x0, 0x400141042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd54}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1m45.763402282s ago: executing program 0 (id=5387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 1m45.523584396s ago: executing program 0 (id=5399): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 1m45.459096137s ago: executing program 0 (id=5403): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a8", 0x3}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000080)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) 1m44.514548641s ago: executing program 0 (id=5436): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") 1m44.456584881s ago: executing program 0 (id=5447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x35, 0x1000, 0x62}, 0x2c) 1m43.728282092s ago: executing program 0 (id=5451): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m43.727925082s ago: executing program 36 (id=5451): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m13.476499868s ago: executing program 7 (id=6375): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m13.416422959s ago: executing program 7 (id=6376): memfd_create(0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0xb, 0x35) 1m13.415957079s ago: executing program 7 (id=6377): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m13.415689759s ago: executing program 7 (id=6378): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m13.407140619s ago: executing program 7 (id=6380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x0, [], [0x0, 0x0, 0xfffffffd]}, 0x400}}, 0x4c}}, 0x0) 1m13.30828248s ago: executing program 7 (id=6383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4e, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df4"}}}}, 0xfdef) 1m13.30459817s ago: executing program 37 (id=6383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4e, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df4"}}}}, 0xfdef) 1m2.304630062s ago: executing program 9 (id=6729): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0xffff, 0x0, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0xedfc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xe999}}, {{@in=@multicast1, 0x1, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1m2.304158652s ago: executing program 9 (id=6730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x10000, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) 1m2.166373724s ago: executing program 9 (id=6736): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 1m2.036026416s ago: executing program 9 (id=6740): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 1m1.864321599s ago: executing program 9 (id=6744): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m1.487863384s ago: executing program 9 (id=6752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f00000003c0)="00009a4bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 1m1.477326454s ago: executing program 38 (id=6752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f00000003c0)="00009a4bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 34.314056555s ago: executing program 1 (id=7377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 34.094301358s ago: executing program 1 (id=7384): ftruncate(0xffffffffffffffff, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) io_setup(0x200, 0x0) 34.041038349s ago: executing program 1 (id=7387): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r3 = epoll_create(0x802) epoll_pwait(r3, &(0x7f0000000400)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)={0x10000001}) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) 33.855256601s ago: executing program 1 (id=7395): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 33.822835152s ago: executing program 1 (id=7397): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x1c64, 0x1000, 0x3, 0x88}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) 33.557237666s ago: executing program 1 (id=7406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) 33.556702406s ago: executing program 39 (id=7406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) 26.318669643s ago: executing program 3 (id=7642): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) 26.027354157s ago: executing program 3 (id=7645): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 25.914161129s ago: executing program 3 (id=7648): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x9}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 25.856458219s ago: executing program 3 (id=7650): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 25.77733648s ago: executing program 3 (id=7651): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 24.471737129s ago: executing program 3 (id=7682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x400c080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 24.41496895s ago: executing program 40 (id=7682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x400c080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 3.653621776s ago: executing program 2 (id=8222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) 3.42539531s ago: executing program 2 (id=8223): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 2.157982628s ago: executing program 2 (id=8240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0xffffffffffffffff, 0x1, {0x2, 0x1}, {0x0, 0x0, 0x3}, 0xfd}, {0x0, 0x10000000000000, {0x2, 0xf0, 0x4}, {}, 0x0, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.157063618s ago: executing program 6 (id=8241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.736065025s ago: executing program 8 (id=8248): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1.218562092s ago: executing program 8 (id=8250): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3, 0x0, 0x40000000000000}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000280)=0x6) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 1.218332342s ago: executing program 6 (id=8251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x1, &(0x7f0000002040)=[{0x4, 0x9, 0x5, 0x4}]}, 0x10) 1.218134292s ago: executing program 4 (id=8259): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 1.188768803s ago: executing program 8 (id=8252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 1.179480392s ago: executing program 6 (id=8253): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x1000000000000, 0x6, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.140138543s ago: executing program 2 (id=8254): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.139931193s ago: executing program 4 (id=8255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xf8af}, 0x18) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) close(r2) 1.132767423s ago: executing program 8 (id=8256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.124205824s ago: executing program 6 (id=8257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.056575794s ago: executing program 4 (id=8260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0xc92b) 1.052380305s ago: executing program 6 (id=8261): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) connect$netlink(r0, 0x0, 0x0) 1.052171105s ago: executing program 4 (id=8262): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2c020400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 1.012230495s ago: executing program 2 (id=8263): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 791.516728ms ago: executing program 8 (id=8265): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x1e, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0}, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 745.425819ms ago: executing program 2 (id=8276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 733.441429ms ago: executing program 4 (id=8267): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 597.793131ms ago: executing program 5 (id=8268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000580)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 577.979292ms ago: executing program 5 (id=8269): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12}, 0x9c) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 577.797122ms ago: executing program 4 (id=8270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0xffffffffffffffff, 0x1, {0x2, 0x1}, {0x0, 0x0, 0x3}, 0xfd}, {0x0, 0x10000000000000, {0x2, 0xf0, 0x4}, {}, 0x0, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 512.891003ms ago: executing program 5 (id=8271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) 235.937757ms ago: executing program 5 (id=8272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 164.300968ms ago: executing program 5 (id=8273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 7.60262ms ago: executing program 8 (id=8274): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6.99233ms ago: executing program 5 (id=8285): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) connect$netlink(r0, 0x0, 0x0) 0s ago: executing program 6 (id=8286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 8'. [ 253.134348][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 253.134365][ T29] audit: type=1326 audit(1749725390.180:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.164117][ T29] audit: type=1326 audit(1749725390.180:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.187622][ T29] audit: type=1326 audit(1749725390.180:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.211255][ T29] audit: type=1326 audit(1749725390.180:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.244719][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6738'. [ 253.285409][ T29] audit: type=1326 audit(1749725390.180:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20024 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f411c2811e5 code=0x7ffc0000 [ 253.308988][ T29] audit: type=1326 audit(1749725390.180:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.332528][ T29] audit: type=1326 audit(1749725390.180:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.356192][ T29] audit: type=1326 audit(1749725390.190:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.379767][ T29] audit: type=1326 audit(1749725390.190:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.403291][ T29] audit: type=1326 audit(1749725390.190:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 253.437582][T20031] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.478572][T20036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.511506][T20036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.530377][T20031] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.596634][T20031] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.682532][T20031] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.946193][T20052] chnl_net:caif_netlink_parms(): no params data found [ 254.027300][T20052] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.034529][T20052] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.042772][T20052] bridge_slave_0: entered allmulticast mode [ 254.049473][T20052] bridge_slave_0: entered promiscuous mode [ 254.075318][T20052] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.082622][T20052] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.091708][T20052] bridge_slave_1: entered allmulticast mode [ 254.098284][T20052] bridge_slave_1: entered promiscuous mode [ 254.170687][T20052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.202330][T20052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.263983][T20052] team0: Port device team_slave_0 added [ 254.283601][T20052] team0: Port device team_slave_1 added [ 254.328159][T20052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.335229][T20052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.361353][T20052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.424448][T20052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.431455][T20052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.457581][T20052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.527899][T20052] hsr_slave_0: entered promiscuous mode [ 254.544618][T20052] hsr_slave_1: entered promiscuous mode [ 254.555846][T20052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.573540][T20052] Cannot create hsr debugfs directory [ 254.729582][ T5927] bond0 (unregistering): Released all slaves [ 254.777864][ T5927] tipc: Disabling bearer [ 254.782935][ T5927] tipc: Left network mode [ 254.799217][ T5927] hsr_slave_0: left promiscuous mode [ 254.805475][ T5927] hsr_slave_1: left promiscuous mode [ 255.091715][T20052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.101394][T20052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.111669][T20052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.121667][T20052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.137043][ T5927] IPVS: stop unused estimator thread 0... [ 255.193742][T20052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.207293][T20052] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.218698][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.225875][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.246110][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.253243][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.327970][T20118] loop1: detected capacity change from 0 to 1024 [ 255.340282][T20052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.412770][T20131] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6777'. [ 255.436373][T20052] veth0_vlan: entered promiscuous mode [ 255.445140][T20052] veth1_vlan: entered promiscuous mode [ 255.465658][T20052] veth0_macvtap: entered promiscuous mode [ 255.474759][T20052] veth1_macvtap: entered promiscuous mode [ 255.487208][T20052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.498877][T20052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.508589][T20135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6779'. [ 255.509032][T20052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.526395][T20052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.535203][T20052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.544019][T20052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.558065][T20135] syz_tun: entered promiscuous mode [ 255.564529][T20135] syz_tun: left promiscuous mode [ 255.585074][T20031] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.597948][T20031] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.611618][T20031] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.627716][T20031] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.757324][T20149] syzkaller1: entered promiscuous mode [ 255.762978][T20149] syzkaller1: entered allmulticast mode [ 255.905991][T20170] netlink: 'syz.4.6793': attribute type 3 has an invalid length. [ 255.925993][T20171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=20171 comm=syz.1.6794 [ 255.948263][T20173] IPVS: Error connecting to the multicast addr [ 255.954608][T20171] loop1: detected capacity change from 0 to 1024 [ 255.982053][T20171] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 255.993103][T20171] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 256.019498][T20171] JBD2: no valid journal superblock found [ 256.025369][T20171] EXT4-fs (loop1): Could not load journal inode [ 256.082663][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.090204][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.097661][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.113575][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.121104][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.128552][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.135973][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.143413][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.150860][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.158310][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.165744][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.173254][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.180698][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.188438][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.207967][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.215596][T19921] hid-generic 0006:0000:0000.0010: unknown main item tag 0x0 [ 256.223766][T19921] hid-generic 0006:0000:0000.0010: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 256.326109][T20206] netlink: 'syz.4.6810': attribute type 10 has an invalid length. [ 256.334095][T20206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6810'. [ 256.355637][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6812'. [ 256.369151][T20206] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 256.690569][T20254] ipvlan0: entered promiscuous mode [ 256.696169][T20254] bridge0: port 1(ipvlan0) entered blocking state [ 256.703443][T20254] bridge0: port 1(ipvlan0) entered disabled state [ 256.710312][T20254] ipvlan0: entered allmulticast mode [ 256.715686][T20254] bridge0: entered allmulticast mode [ 256.722299][T20254] ipvlan0: left allmulticast mode [ 256.727390][T20254] bridge0: left allmulticast mode [ 257.047719][T20268] loop6: detected capacity change from 0 to 512 [ 257.063802][T20268] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 257.071970][T20268] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 257.080653][T20268] System zones: 0-1, 15-15, 18-18, 34-34 [ 257.088499][T20268] EXT4-fs (loop6): orphan cleanup on readonly fs [ 257.095696][T20268] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 257.111172][T20268] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 257.118055][T20268] EXT4-fs (loop6): 1 truncate cleaned up [ 257.124222][T20268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.151252][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.518636][T20325] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6858'. [ 257.539884][T20325] netlink: zone id is out of range [ 257.546741][T20325] netlink: zone id is out of range [ 257.552775][T20325] netlink: zone id is out of range [ 257.561697][T20325] netlink: zone id is out of range [ 257.587160][T20325] netlink: del zone limit has 8 unknown bytes [ 257.596980][T20321] pim6reg1: entered promiscuous mode [ 257.627546][T20340] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 257.718871][T20352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6871'. [ 257.729062][T20352] sch_tbf: burst 88 is lower than device team_slave_1 mtu (1514) ! [ 257.835440][T20369] loop1: detected capacity change from 0 to 1024 [ 257.842310][T20369] EXT4-fs: Ignoring removed nobh option [ 257.873563][T20380] netlink: 'syz.6.6882': attribute type 4 has an invalid length. [ 257.891573][T20369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.910580][T20380] netlink: 'syz.6.6882': attribute type 4 has an invalid length. [ 257.939899][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 257.939917][ T29] audit: type=1400 audit(1749725395.229:6573): avc: denied { write } for pid=20368 comm="syz.1.6878" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.069012][T19110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.145864][T20419] loop8: detected capacity change from 0 to 128 [ 258.193920][T20407] loop3: detected capacity change from 0 to 8192 [ 258.202665][ T29] audit: type=1326 audit(1749725395.502:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.1.6890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x0 [ 258.250789][ T29] audit: type=1326 audit(1749725395.544:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.1.6890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f3e1221e929 code=0x0 [ 258.298462][T20434] loop8: detected capacity change from 0 to 2048 [ 258.349274][T20434] loop8: p2 p3 < > p4 < p5 > [ 258.354057][T20434] loop8: partition table partially beyond EOD, truncated [ 258.387224][T20434] loop8: p3 start 4284289 is beyond EOD, truncated [ 258.467589][ T29] audit: type=1326 audit(1749725395.775:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.499709][ T29] audit: type=1326 audit(1749725395.775:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.523281][ T29] audit: type=1400 audit(1749725395.807:6578): avc: denied { ioctl } for pid=20470 comm="syz.8.6902" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 258.550019][ T29] audit: type=1326 audit(1749725395.807:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.573558][ T29] audit: type=1326 audit(1749725395.807:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.597194][ T29] audit: type=1326 audit(1749725395.807:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.629778][ T29] audit: type=1326 audit(1749725395.817:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.3.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 258.741844][T20487] bridge: RTM_NEWNEIGH with invalid ether address [ 259.008125][T20515] syzkaller0: entered promiscuous mode [ 259.013689][T20515] syzkaller0: entered allmulticast mode [ 259.167478][T20529] xt_hashlimit: size too large, truncated to 1048576 [ 259.184824][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6934'. [ 259.612839][T20536] loop8: detected capacity change from 0 to 2048 [ 259.619914][T20536] EXT4-fs: Ignoring removed bh option [ 259.635119][T20536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.758800][T20549] loop6: detected capacity change from 0 to 512 [ 259.766220][T20549] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 259.780826][T20549] EXT4-fs (loop6): 1 truncate cleaned up [ 259.786930][T20549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.815022][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.898493][T20554] syzkaller0: entered promiscuous mode [ 259.904144][T20554] syzkaller0: entered allmulticast mode [ 259.988192][ T5975] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.009216][ T5975] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 260.021657][ T5975] EXT4-fs (loop8): This should not happen!! Data will be lost [ 260.021657][ T5975] [ 260.032340][ T5975] EXT4-fs (loop8): Total free blocks count 0 [ 260.038694][ T5975] EXT4-fs (loop8): Free/Dirty block details [ 260.045395][ T5975] EXT4-fs (loop8): free_blocks=2415919104 [ 260.051604][ T5975] EXT4-fs (loop8): dirty_blocks=8224 [ 260.057069][ T5975] EXT4-fs (loop8): Block reservation details [ 260.063241][ T5975] EXT4-fs (loop8): i_reserved_data_blocks=514 [ 260.077564][ T5962] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 260.222911][T20577] ip6_vti0: mtu greater than device maximum [ 260.320261][T20583] syzkaller0: entered promiscuous mode [ 260.325848][T20583] syzkaller0: entered allmulticast mode [ 260.398789][T20594] tipc: Bearer : already 2 bearers with priority 10 [ 260.406224][T20594] tipc: Bearer : trying with adjusted priority [ 260.413080][T20594] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 260.544281][T20604] loop4: detected capacity change from 0 to 8192 [ 260.582630][T20614] ip6_vti0: mtu greater than device maximum [ 260.766195][T20632] tipc: Started in network mode [ 260.771583][T20632] tipc: Node identity ac14140f, cluster identity 4711 [ 260.787198][T20632] tipc: New replicast peer: 0.0.255.255 [ 260.792946][T20632] tipc: Enabled bearer , priority 10 [ 261.090326][T20657] loop1: detected capacity change from 0 to 128 [ 261.123902][T20652] loop8: detected capacity change from 0 to 8192 [ 261.303625][T20674] smc: net device bond0 applied user defined pnetid SYZ0 [ 261.324991][T20674] smc: net device bond0 erased user defined pnetid SYZ0 [ 261.526235][T20688] loop1: detected capacity change from 0 to 8192 [ 261.530891][T20690] loop6: detected capacity change from 0 to 8192 [ 261.576132][T20694] loop6: detected capacity change from 0 to 512 [ 261.598549][T20694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.611795][T20694] ext4 filesystem being mounted at /1009/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.648329][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.853560][T18389] tipc: Node number set to 2886997007 [ 264.360488][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 264.360507][ T29] audit: type=1326 audit(1749725401.969:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz.4.7009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x0 [ 264.408336][ T29] audit: type=1326 audit(1749725402.021:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz.4.7009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f411c24e929 code=0x0 [ 264.457160][T20723] smc: net device bond0 applied user defined pnetid SYZ0 [ 264.465537][ T29] audit: type=1326 audit(1749725402.063:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.489823][ T29] audit: type=1326 audit(1749725402.063:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.514190][ T29] audit: type=1326 audit(1749725402.084:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.537621][ T29] audit: type=1326 audit(1749725402.084:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.538134][T20724] loop6: detected capacity change from 0 to 8192 [ 264.562018][ T29] audit: type=1326 audit(1749725402.084:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.591769][ T29] audit: type=1326 audit(1749725402.084:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.596666][T20723] smc: net device bond0 erased user defined pnetid SYZ0 [ 264.616055][ T29] audit: type=1326 audit(1749725402.084:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.646490][ T29] audit: type=1326 audit(1749725402.084:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.7010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 264.721677][T20733] loop3: detected capacity change from 0 to 512 [ 264.751873][T20733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.764510][T20734] loop8: detected capacity change from 0 to 8192 [ 264.772022][T20733] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.827433][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.900192][T20747] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.7018'. [ 264.909491][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7018'. [ 265.724524][T20761] loop3: detected capacity change from 0 to 8192 [ 265.944944][T20781] wg2: entered promiscuous mode [ 265.950065][T20781] wg2: entered allmulticast mode [ 265.985213][T20784] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 266.081064][T20792] loop3: detected capacity change from 0 to 8192 [ 266.501136][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7040'. [ 266.517775][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7040'. [ 266.564442][T20802] SELinux: ebitmap: truncated map [ 266.593240][T20802] SELinux: failed to load policy [ 266.621139][T20811] loop8: detected capacity change from 0 to 512 [ 266.637898][T20811] EXT4-fs (loop8): 1 orphan inode deleted [ 266.644121][T20811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.663047][T20811] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.674725][ T5962] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 1 [ 266.724663][T20822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.732013][T20822] IPv6: NLM_F_CREATE should be set when creating new route [ 266.758765][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.804087][T20827] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7054'. [ 267.122433][T20840] loop1: detected capacity change from 0 to 512 [ 267.129595][T20840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.142399][T20840] EXT4-fs (loop1): 1 orphan inode deleted [ 267.148208][T20840] EXT4-fs (loop1): 1 truncate cleaned up [ 267.154502][T20840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.162190][T20839] loop8: detected capacity change from 0 to 8192 [ 267.187879][T19110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.225941][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7062'. [ 267.240657][T20846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7062'. [ 267.288137][T20853] netlink: 'syz.4.7064': attribute type 7 has an invalid length. [ 267.342094][T20855] SELinux: ebitmap: truncated map [ 267.361518][T20855] SELinux: failed to load policy [ 267.391129][T20864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.398417][T20864] IPv6: NLM_F_CREATE should be set when creating new route [ 267.695784][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7077'. [ 267.710185][T20883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7077'. [ 268.134752][T20909] loop4: detected capacity change from 0 to 512 [ 268.149827][T20909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.181624][T20909] EXT4-fs (loop4): 1 orphan inode deleted [ 268.188188][T20909] EXT4-fs (loop4): 1 truncate cleaned up [ 268.207522][T20909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.266406][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.332661][T20916] loop4: detected capacity change from 0 to 512 [ 268.365861][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7091'. [ 268.368939][T20916] EXT4-fs (loop4): 1 orphan inode deleted [ 268.394579][ T5962] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 1 [ 268.408061][T20916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.442884][T20916] ext4 filesystem being mounted at /869/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.572712][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.714767][T20932] netlink: 'syz.3.7098': attribute type 7 has an invalid length. [ 269.131115][ T29] kauditd_printk_skb: 1104 callbacks suppressed [ 269.131155][ T29] audit: type=1326 audit(1749725406.977:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.161210][ T29] audit: type=1326 audit(1749725406.977:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.190453][ T29] audit: type=1326 audit(1749725406.977:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.3.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 269.214050][ T29] audit: type=1326 audit(1749725406.977:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.3.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 269.237582][ T29] audit: type=1326 audit(1749725406.977:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.261008][ T29] audit: type=1326 audit(1749725406.977:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.284511][ T29] audit: type=1326 audit(1749725406.977:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.308220][ T29] audit: type=1326 audit(1749725406.977:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.3.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 269.331841][ T29] audit: type=1326 audit(1749725406.977:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.3.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37868ce929 code=0x7ffc0000 [ 269.355477][ T29] audit: type=1326 audit(1749725406.977:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.1.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e1221e929 code=0x7ffc0000 [ 269.966234][T20967] __nla_validate_parse: 4 callbacks suppressed [ 269.966249][T20967] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7112'. [ 270.006434][T20965] loop1: detected capacity change from 0 to 512 [ 270.078918][T20965] EXT4-fs (loop1): 1 orphan inode deleted [ 270.086014][T20965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.103479][ T5993] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 270.120288][T20965] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.152120][T20972] loop8: detected capacity change from 0 to 128 [ 270.190632][T19110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.209158][T20972] bio_check_eod: 106 callbacks suppressed [ 270.209176][T20972] syz.8.7111: attempt to access beyond end of device [ 270.209176][T20972] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 270.247888][ T5962] kworker/u8:36: attempt to access beyond end of device [ 270.247888][ T5962] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 270.275470][T20984] loop4: detected capacity change from 0 to 128 [ 270.285000][T20984] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.301476][T20984] ext4 filesystem being mounted at /875/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.361249][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7120'. [ 270.367304][ T9599] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.370854][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7120'. [ 270.499290][T21005] netlink: 'syz.1.7128': attribute type 7 has an invalid length. [ 270.546234][T21013] loop3: detected capacity change from 0 to 512 [ 270.561497][T21013] EXT4-fs (loop3): 1 orphan inode deleted [ 270.567876][T21013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.581923][ T5975] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 270.594033][T21013] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.632913][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 270.642635][T21020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7135'. [ 270.653999][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.790221][T21030] loop3: detected capacity change from 0 to 1024 [ 270.809293][T21030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.843826][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.076812][T21042] netlink: 'syz.6.7143': attribute type 7 has an invalid length. [ 271.167328][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 271.182564][T21053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7148'. [ 271.605740][T21097] loop6: detected capacity change from 0 to 512 [ 271.613866][T21097] EXT4-fs: inline encryption not supported [ 271.623257][T21097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 273.363691][T21171] loop4: detected capacity change from 0 to 512 [ 273.370383][T21171] EXT4-fs: Ignoring removed orlov option [ 273.381136][T21171] EXT4-fs: inline encryption not supported [ 273.390715][T21171] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.7196: corrupted in-inode xattr: invalid ea_ino [ 273.404709][T21171] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.7196: couldn't read orphan inode 15 (err -117) [ 273.507948][T21171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.570359][T21171] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7196: bg 0: block 411: padding at end of block bitmap is not set [ 273.593635][T21171] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 273.610146][T21171] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7196: invalid indirect mapped block 234881024 (level 0) [ 273.654699][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.679318][T21194] serio: Serial port ptm0 [ 273.903512][ T29] kauditd_printk_skb: 996 callbacks suppressed [ 273.903532][ T29] audit: type=1326 audit(1749725411.984:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3be07358e7 code=0x7ffc0000 [ 273.933898][ T29] audit: type=1326 audit(1749725411.984:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3be06dab19 code=0x7ffc0000 [ 273.957981][ T29] audit: type=1326 audit(1749725411.984:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 273.982056][ T29] audit: type=1326 audit(1749725411.995:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3be07358e7 code=0x7ffc0000 [ 274.006046][ T29] audit: type=1326 audit(1749725411.995:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3be06dab19 code=0x7ffc0000 [ 274.030241][ T29] audit: type=1326 audit(1749725411.995:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 274.054289][ T29] audit: type=1326 audit(1749725412.005:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3be07358e7 code=0x7ffc0000 [ 274.078363][ T29] audit: type=1326 audit(1749725412.005:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3be06dab19 code=0x7ffc0000 [ 274.102406][ T29] audit: type=1326 audit(1749725412.005:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 274.126529][ T29] audit: type=1326 audit(1749725412.016:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3be07358e7 code=0x7ffc0000 [ 274.799846][T21233] loop4: detected capacity change from 0 to 128 [ 274.801581][T21237] netlink: 'syz.8.7221': attribute type 1 has an invalid length. [ 274.814838][T21237] netlink: 'syz.8.7221': attribute type 4 has an invalid length. [ 274.822597][T21237] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7221'. [ 274.837624][T21237] netlink: 'syz.8.7221': attribute type 1 has an invalid length. [ 274.845458][T21237] netlink: 'syz.8.7221': attribute type 4 has an invalid length. [ 274.854004][T21237] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7221'. [ 274.878587][T21233] syz.4.7218: attempt to access beyond end of device [ 274.878587][T21233] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 274.909747][ T5953] kworker/u8:27: attempt to access beyond end of device [ 274.909747][ T5953] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 275.369323][T21272] loop1: detected capacity change from 0 to 128 [ 275.401085][T21272] syz.1.7241: attempt to access beyond end of device [ 275.401085][T21272] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 275.439888][ T5953] kworker/u8:27: attempt to access beyond end of device [ 275.439888][ T5953] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 275.477885][T21278] loop4: detected capacity change from 0 to 1024 [ 275.490148][T21278] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.501202][T21278] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 275.512820][T21278] JBD2: no valid journal superblock found [ 275.518602][T21278] EXT4-fs (loop4): Could not load journal inode [ 275.534615][T21278] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 275.607601][T21283] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7245'. [ 275.629822][T21285] -1: renamed from syzkaller0 [ 275.683029][T21298] loop6: detected capacity change from 0 to 128 [ 275.692672][T21298] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.729482][T21298] ext4 filesystem being mounted at /1056/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.872460][ T8426] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.590602][T21308] loop3: detected capacity change from 0 to 128 [ 276.597739][T21310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.622608][T21310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.642423][T21308] syz.3.7256: attempt to access beyond end of device [ 276.642423][T21308] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 276.666357][T21310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.677003][T21310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.692707][ T5953] kworker/u8:27: attempt to access beyond end of device [ 276.692707][ T5953] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 277.675207][T21337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21337 comm=syz.3.7278 [ 277.727403][T21342] loop1: detected capacity change from 0 to 128 [ 277.745321][T21342] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.760382][T21342] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.820793][T19110] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.953538][T21357] loop1: detected capacity change from 0 to 128 [ 277.979764][T21357] syz.1.7277: attempt to access beyond end of device [ 277.979764][T21357] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 278.004401][ T5927] kworker/u8:15: attempt to access beyond end of device [ 278.004401][ T5927] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 278.069624][T21359] loop1: detected capacity change from 0 to 1024 [ 278.086909][T21359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.113165][T19110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.230553][T21384] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7286'. [ 278.242758][T21381] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7286'. [ 278.274197][T21388] wg2: entered promiscuous mode [ 278.275125][T21390] loop3: detected capacity change from 0 to 128 [ 278.279397][T21388] wg2: entered allmulticast mode [ 278.314028][T21390] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.339476][T21390] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.392795][T20052] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.445565][T21403] loop8: detected capacity change from 0 to 1024 [ 278.462201][T21403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.491671][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.505093][T21410] loop3: detected capacity change from 0 to 512 [ 278.511981][T21410] EXT4-fs: inline encryption not supported [ 278.541387][T21410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 278.566606][T21419] loop6: detected capacity change from 0 to 1024 [ 278.598482][T21421] loop1: detected capacity change from 0 to 512 [ 278.607846][T21421] EXT4-fs: journaled quota format not specified [ 278.616016][T21419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.648341][T21433] loop4: detected capacity change from 0 to 512 [ 278.669020][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.678507][T21433] EXT4-fs: inline encryption not supported [ 278.686267][T21433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 278.821044][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 278.821071][ T29] audit: type=1326 audit(1749725417.149:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 278.882283][ T29] audit: type=1326 audit(1749725417.149:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 278.905981][ T29] audit: type=1326 audit(1749725417.149:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 278.929513][ T29] audit: type=1326 audit(1749725417.160:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 278.953115][ T29] audit: type=1326 audit(1749725417.160:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 278.976720][ T29] audit: type=1326 audit(1749725417.160:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 279.000226][ T29] audit: type=1326 audit(1749725417.170:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 279.023794][ T29] audit: type=1326 audit(1749725417.170:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 279.047357][ T29] audit: type=1326 audit(1749725417.181:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 279.070967][ T29] audit: type=1326 audit(1749725417.181:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.4.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 279.549327][T21466] loop1: detected capacity change from 0 to 512 [ 279.556267][T21466] EXT4-fs: Ignoring removed orlov option [ 279.570577][T21466] EXT4-fs: inline encryption not supported [ 279.583969][T21466] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.7323: corrupted in-inode xattr: invalid ea_ino [ 279.597669][T21466] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7323: couldn't read orphan inode 15 (err -117) [ 279.611235][T21466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.627674][T21466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7323: bg 0: block 411: padding at end of block bitmap is not set [ 279.643890][T21466] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 279.658406][T21466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7323: invalid indirect mapped block 234881024 (level 0) [ 279.737560][T19110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.805404][T21480] loop3: detected capacity change from 0 to 256 [ 279.806716][T21477] loop1: detected capacity change from 0 to 512 [ 279.825020][T21477] EXT4-fs: inline encryption not supported [ 279.834554][T21477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.935416][T21495] netlink: 596 bytes leftover after parsing attributes in process `syz.8.7339'. [ 279.987022][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 280.396713][T21525] ALSA: seq fatal error: cannot create timer (-19) [ 280.478170][T21536] atomic_op ffff888104025928 conn xmit_atomic 0000000000000000 [ 280.490979][T21538] IPv4: Oversized IP packet from 127.202.26.0 [ 280.573487][T21550] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7364'. [ 280.760942][T21570] loop4: detected capacity change from 0 to 1024 [ 280.774661][T21570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.803987][T21570] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 280.840808][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7375'. [ 280.892876][T21585] loop8: detected capacity change from 0 to 128 [ 280.901486][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.938005][T21585] syz.8.7378: attempt to access beyond end of device [ 280.938005][T21585] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 280.962545][T21585] syz.8.7378: attempt to access beyond end of device [ 280.962545][T21585] loop8: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 280.985237][T21585] syz.8.7378: attempt to access beyond end of device [ 280.985237][T21585] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 281.025426][T21585] syz.8.7378: attempt to access beyond end of device [ 281.025426][T21585] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 281.056301][T21585] syz.8.7378: attempt to access beyond end of device [ 281.056301][T21585] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 281.108238][T21585] syz.8.7378: attempt to access beyond end of device [ 281.108238][T21585] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 281.123058][T21585] syz.8.7378: attempt to access beyond end of device [ 281.123058][T21585] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 281.138990][T21585] syz.8.7378: attempt to access beyond end of device [ 281.138990][T21585] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 281.157191][T21585] syz.8.7378: attempt to access beyond end of device [ 281.157191][T21585] loop8: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 281.160840][T21599] syzkaller0: entered promiscuous mode [ 281.176358][T21599] syzkaller0: entered allmulticast mode [ 281.188129][T21610] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7388'. [ 281.244383][T21613] netlink: 'syz.8.7390': attribute type 1 has an invalid length. [ 281.379731][T21637] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.7407'. [ 281.389784][T21637] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7407'. [ 281.429868][T21642] loop3: detected capacity change from 0 to 1024 [ 281.436847][T21642] EXT4-fs: Ignoring removed orlov option [ 281.442667][T21642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.459695][T21642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.489588][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.720218][T21655] chnl_net:caif_netlink_parms(): no params data found [ 281.758360][T21655] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.765544][T21655] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.773653][T21655] bridge_slave_0: entered allmulticast mode [ 281.780035][T21655] bridge_slave_0: entered promiscuous mode [ 281.786858][T21655] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.794414][T21655] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.801675][T21655] bridge_slave_1: entered allmulticast mode [ 281.808357][T21655] bridge_slave_1: entered promiscuous mode [ 281.826673][T21655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.837143][T21655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.858521][T21655] team0: Port device team_slave_0 added [ 281.865055][T21655] team0: Port device team_slave_1 added [ 281.883155][T21655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.890156][T21655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.916802][T21655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.928402][T21655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.936024][T21655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.962795][T21655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.990715][T21655] hsr_slave_0: entered promiscuous mode [ 281.996773][T21655] hsr_slave_1: entered promiscuous mode [ 282.003344][T21655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.010908][T21655] Cannot create hsr debugfs directory [ 282.114704][T21673] serio: Serial port ptm0 [ 282.290553][T21655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.299494][T21655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.308499][T21655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.317653][T21655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.363394][T21655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.377486][T21655] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.388407][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.395601][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.408010][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.415187][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.486789][T21655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.595906][T21655] veth0_vlan: entered promiscuous mode [ 282.604482][T21655] veth1_vlan: entered promiscuous mode [ 282.621514][T21655] veth0_macvtap: entered promiscuous mode [ 282.629724][T21655] veth1_macvtap: entered promiscuous mode [ 282.642078][T21655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.655046][T21655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.663754][T21655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.672566][T21655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.681364][T21655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.690106][T21655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.741338][T21713] 9pnet_fd: Insufficient options for proto=fd [ 282.789645][T21721] loop5: detected capacity change from 0 to 512 [ 282.799680][T21724] loop8: detected capacity change from 0 to 128 [ 282.807236][T21721] EXT4-fs: inline encryption not supported [ 282.825417][T21724] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 282.838107][T21721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.917410][T21733] loop6: detected capacity change from 0 to 512 [ 282.934396][T21733] EXT4-fs: Ignoring removed orlov option [ 282.952199][T21733] EXT4-fs: inline encryption not supported [ 282.968760][T21733] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.7420: corrupted in-inode xattr: invalid ea_ino [ 282.983614][T21733] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7420: couldn't read orphan inode 15 (err -117) [ 282.996224][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7429'. [ 282.996520][T21733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.026496][T21733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7420: bg 0: block 411: padding at end of block bitmap is not set [ 283.047913][T21733] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 283.065263][T21733] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7420: invalid indirect mapped block 234881024 (level 0) [ 283.111906][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.129219][T21751] 9p: Unknown uid 00000000004294967295 [ 283.166136][T21753] random: crng reseeded on system resumption [ 283.324640][T21776] loop4: detected capacity change from 0 to 512 [ 283.340641][T21776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.367060][T21776] EXT4-fs (loop4): 1 truncate cleaned up [ 283.375583][T21776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.420596][T21788] loop8: detected capacity change from 0 to 2048 [ 283.440639][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.453500][T21788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.493542][T21799] loop4: detected capacity change from 0 to 1024 [ 283.502029][T21799] EXT4-fs: Invalid want_extra_isize 0 [ 283.519026][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.762294][T21822] tipc: Enabled bearer , priority 22 [ 283.810600][T21828] IPv4: Oversized IP packet from 127.202.26.0 [ 283.854517][T21834] loop8: detected capacity change from 0 to 512 [ 283.869718][T21834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.882540][T21834] ext4 filesystem being mounted at /666/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.917927][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.944997][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 283.945014][ T29] audit: type=1326 audit(1749725422.524:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.8.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 283.983748][ T29] audit: type=1326 audit(1749725422.524:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.8.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 284.007519][ T29] audit: type=1326 audit(1749725422.524:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.8.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 284.031202][ T29] audit: type=1326 audit(1749725422.524:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.8.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be073e929 code=0x7ffc0000 [ 284.200363][T21858] SELinux: ebitmap: truncated map [ 284.206664][T21858] SELinux: failed to load policy [ 284.332571][ T29] audit: type=1326 audit(1749725422.933:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.356201][ T29] audit: type=1326 audit(1749725422.933:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.408557][ T29] audit: type=1326 audit(1749725422.933:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.432182][ T29] audit: type=1326 audit(1749725422.933:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.455810][ T29] audit: type=1326 audit(1749725422.965:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.479404][ T29] audit: type=1326 audit(1749725422.965:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21875 comm="syz.6.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 284.516142][T21880] vhci_hcd: invalid port number 96 [ 284.521312][T21880] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 284.673506][T21895] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 284.681713][T21895] tipc: Enabled bearer , priority 10 [ 285.008127][T21937] loop9: detected capacity change from 0 to 7 [ 285.015469][T21937] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.024033][T21937] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.032079][T21937] loop9: unable to read partition table [ 285.038083][T21937] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 285.038083][T21937] U) failed (rc=-5) [ 285.260964][T21965] netlink: 404 bytes leftover after parsing attributes in process `syz.8.7522'. [ 285.285065][T21967] loop3: detected capacity change from 0 to 512 [ 285.306195][T21967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.332262][T21967] EXT4-fs (loop3): 1 truncate cleaned up [ 285.340150][T21967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.359337][T21976] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7527'. [ 285.444730][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.525673][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7536'. [ 285.581172][T22001] loop5: detected capacity change from 0 to 1024 [ 285.602351][T22001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.640196][T22001] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7538'. [ 285.704689][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.882148][T22029] sch_fq: defrate 4294967295 ignored. [ 286.198029][T22054] loop5: detected capacity change from 0 to 2048 [ 286.240612][T22054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.276143][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.638339][T22078] atomic_op ffff888146def928 conn xmit_atomic 0000000000000000 [ 286.683084][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7573'. [ 286.976778][T22104] loop8: detected capacity change from 0 to 8192 [ 287.019720][T22104] loop8: p3 [ 287.023107][T22104] loop8: p3 size 196608 extends beyond EOD, truncated [ 287.129247][T22128] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 287.135801][T22128] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 287.143492][T22128] vhci_hcd vhci_hcd.0: Device attached [ 287.150164][T22129] vhci_hcd: connection closed [ 287.150835][ T5978] vhci_hcd: stop threads [ 287.160658][ T5978] vhci_hcd: release socket [ 287.165119][ T5978] vhci_hcd: disconnect device [ 287.448959][T22142] loop3: detected capacity change from 0 to 512 [ 287.460220][T22142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.472851][T22142] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.508530][T22142] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.7598: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 287.528522][T22142] EXT4-fs (loop3): Remounting filesystem read-only [ 287.545905][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.608099][T22153] netlink: 75 bytes leftover after parsing attributes in process `syz.3.7602'. [ 287.657314][T22161] bridge: RTM_NEWNEIGH with invalid ether address [ 287.940514][T22186] loop3: detected capacity change from 0 to 1024 [ 287.947417][T22186] EXT4-fs: Ignoring removed oldalloc option [ 287.954702][T22186] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 287.983699][T22186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.093166][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7620'. [ 288.256061][T22206] loop8: detected capacity change from 0 to 512 [ 288.278946][T22206] EXT4-fs (loop8): orphan cleanup on readonly fs [ 288.285943][T22206] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7624: bg 0: block 248: padding at end of block bitmap is not set [ 288.302250][T22206] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7624: Failed to acquire dquot type 1 [ 288.318372][T22206] EXT4-fs (loop8): 1 truncate cleaned up [ 288.325186][T22206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.347643][T22206] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.7624: deleted inode referenced: 12 [ 288.380274][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.390607][T20052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.563874][T22214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.574568][T22231] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7634'. [ 288.591738][T22214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.646010][T22233] wireguard1: entered promiscuous mode [ 288.832033][T22251] netlink: 'syz.3.7642': attribute type 27 has an invalid length. [ 288.844871][T22251] tipc: Resetting bearer [ 288.873389][T22251] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.880753][T22251] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.911626][T22251] wg2: left promiscuous mode [ 288.917279][T22251] wg2: left allmulticast mode [ 288.940252][T22251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.950235][T22251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.981670][T22251] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.990673][T22251] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.000467][T22251] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.009585][T22251] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.038933][T22253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.048620][T22253] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.059265][T22253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.076451][T22255] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7643'. [ 289.307342][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 289.307359][ T29] audit: type=1326 audit(1749725428.162:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.337844][ T29] audit: type=1326 audit(1749725428.162:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.439428][ T29] audit: type=1326 audit(1749725428.214:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.463795][ T29] audit: type=1326 audit(1749725428.214:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.487719][ T29] audit: type=1326 audit(1749725428.214:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.512173][ T29] audit: type=1326 audit(1749725428.224:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.536816][ T29] audit: type=1326 audit(1749725428.224:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.561114][ T29] audit: type=1326 audit(1749725428.224:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.585496][ T29] audit: type=1326 audit(1749725428.245:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a721ab19 code=0x7ffc0000 [ 289.609707][ T29] audit: type=1326 audit(1749725428.245:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.6.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f38a727e929 code=0x7ffc0000 [ 289.902421][T22301] loop8: detected capacity change from 0 to 1024 [ 290.124711][T22318] netlink: 'syz.5.7670': attribute type 3 has an invalid length. [ 290.206349][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.214665][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.222155][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.245073][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.252643][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.260704][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.268199][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.275594][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.283824][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.291432][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.299523][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.306980][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.314464][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.322640][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.330630][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.338929][T18386] hid-generic 0006:0000:0000.0011: unknown main item tag 0x0 [ 290.360269][T18386] hid-generic 0006:0000:0000.0011: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 290.474224][T22337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.507178][T22336] netlink: 'syz.8.7679': attribute type 10 has an invalid length. [ 290.515050][T22336] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7679'. [ 290.534283][T22337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.568269][T22336] team0: Port device geneve1 added [ 290.916293][ T5978] bridge_slave_1: left allmulticast mode [ 290.922053][ T5978] bridge_slave_1: left promiscuous mode [ 290.928627][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.972972][ T5978] bridge_slave_0: left allmulticast mode [ 290.978716][ T5978] bridge_slave_0: left promiscuous mode [ 290.985172][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.029440][ T5978] tipc: Resetting bearer [ 291.103751][ T5978] tipc: Disabling bearer [ 291.204667][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.217619][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.232622][ T5978] bond0 (unregistering): Released all slaves [ 291.295572][ T5978] tipc: Disabling bearer [ 291.300745][ T5978] tipc: Left network mode [ 291.318194][ T5978] hsr_slave_0: left promiscuous mode [ 291.337619][ T5978] hsr_slave_1: left promiscuous mode [ 291.343685][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.358174][T22379] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7696'. [ 291.368129][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.387459][T22379] netlink: zone id is out of range [ 291.397131][T22379] netlink: zone id is out of range [ 291.420363][T22379] netlink: zone id is out of range [ 291.436379][T22379] netlink: zone id is out of range [ 291.447450][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 291.452122][T22379] netlink: del zone limit has 8 unknown bytes [ 291.470949][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 291.775958][T18415] IPVS: starting estimator thread 0... [ 291.826126][T22355] chnl_net:caif_netlink_parms(): no params data found [ 291.877893][T22407] IPVS: using max 2208 ests per chain, 110400 per kthread [ 291.994768][T22426] vlan2: entered allmulticast mode [ 292.006777][T22355] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.014054][T22355] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.034616][T22355] bridge_slave_0: entered allmulticast mode [ 292.041347][T22355] bridge_slave_0: entered promiscuous mode [ 292.051942][T22355] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.059198][T22355] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.066497][T22355] bridge_slave_1: entered allmulticast mode [ 292.073066][T22355] bridge_slave_1: entered promiscuous mode [ 292.109394][T22355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.139600][T22432] loop5: detected capacity change from 0 to 1024 [ 292.146486][T22432] EXT4-fs: Ignoring removed bh option [ 292.147324][T22355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.151964][T22432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.180398][T22355] team0: Port device team_slave_0 added [ 292.189306][T22432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.204362][T22355] team0: Port device team_slave_1 added [ 292.251727][T22355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.258727][T22355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.284853][T22355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.310565][T22355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.317598][T22355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.344285][T22355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.400681][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.483143][T22355] hsr_slave_0: entered promiscuous mode [ 292.489870][T22355] hsr_slave_1: entered promiscuous mode [ 292.496058][T22355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.503832][T22355] Cannot create hsr debugfs directory [ 292.516787][T22453] SELinux: ebitmap: truncated map [ 292.522473][T22453] SELinux: failed to load policy [ 292.649500][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7727'. [ 292.738789][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7727'. [ 292.911822][T22483] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7736'. [ 292.934099][T22355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.955220][T22355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.965568][T22485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7738'. [ 292.967039][T22355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.988976][T22355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.008016][T22485] syz_tun: entered promiscuous mode [ 293.017895][T22485] syz_tun: left promiscuous mode [ 293.066283][T22355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.080342][T22355] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.090742][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.097921][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.117658][T22501] xt_hashlimit: size too large, truncated to 1048576 [ 293.126841][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.133960][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.323871][T22514] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 293.342918][T22355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.352746][T22513] IPVS: stopping master sync thread 22514 ... [ 293.489234][T22355] veth0_vlan: entered promiscuous mode [ 293.564926][T22355] veth1_vlan: entered promiscuous mode [ 293.607420][T22355] veth0_macvtap: entered promiscuous mode [ 293.616531][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7753'. [ 293.640024][T22538] loop5: detected capacity change from 0 to 2048 [ 293.646890][T22538] EXT4-fs: Ignoring removed bh option [ 293.655027][T22355] veth1_macvtap: entered promiscuous mode [ 293.667149][T22355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.670567][T22538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.679227][T22355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.708048][T22355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.717651][T22355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.726653][T22355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.735573][T22355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.148049][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 294.148068][ T29] audit: type=1326 audit(1749725433.243:10112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22573 comm="syz.6.7768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a727e929 code=0x0 [ 294.213990][T22579] loop2: detected capacity change from 0 to 512 [ 294.222279][T22579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.236388][ T37] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 294.252729][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 294.264982][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 294.264982][ T37] [ 294.274777][ T37] EXT4-fs (loop5): Total free blocks count 0 [ 294.280921][ T37] EXT4-fs (loop5): Free/Dirty block details [ 294.286838][ T37] EXT4-fs (loop5): free_blocks=2415919104 [ 294.292711][ T37] EXT4-fs (loop5): dirty_blocks=8224 [ 294.298043][ T37] EXT4-fs (loop5): Block reservation details [ 294.300000][T22579] EXT4-fs (loop2): 1 truncate cleaned up [ 294.304039][ T37] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 294.311766][T22579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.321007][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 294.353180][T22355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.420156][T22586] loop4: detected capacity change from 0 to 8192 [ 294.499795][T22594] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 294.537830][T22592] pim6reg1: entered promiscuous mode [ 294.661248][T22607] netlink: 'syz.2.7781': attribute type 4 has an invalid length. [ 294.680667][T22607] netlink: 'syz.2.7781': attribute type 4 has an invalid length. [ 294.694103][T22611] loop4: detected capacity change from 0 to 128 [ 294.972647][T22654] bridge: RTM_NEWNEIGH with invalid ether address [ 294.986844][T22655] serio: Serial port ptm0 [ 295.559398][T22736] loop4: detected capacity change from 0 to 128 [ 295.579616][T22736] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 295.672536][T22746] loop2: detected capacity change from 0 to 512 [ 295.708545][T22746] EXT4-fs: Ignoring removed orlov option [ 295.717900][T22746] EXT4-fs: inline encryption not supported [ 295.728223][T22752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.737292][T22752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.748288][T22746] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7804: corrupted in-inode xattr: invalid ea_ino [ 295.748967][T22752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.770683][T22752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.792433][T22746] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7804: couldn't read orphan inode 15 (err -117) [ 295.805301][T22746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.827222][T22746] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7804: bg 0: block 411: padding at end of block bitmap is not set [ 295.844189][T22746] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 295.853265][T22746] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7804: invalid indirect mapped block 234881024 (level 0) [ 295.894907][T22355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.946576][T22761] serio: Serial port ptm0 [ 296.024895][T22770] -1: renamed from syzkaller0 [ 296.033679][T22771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7813'. [ 296.067316][T22773] loop8: detected capacity change from 0 to 1024 [ 296.074591][T22773] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.086339][T22773] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.104851][T22773] JBD2: no valid journal superblock found [ 296.110744][T22773] EXT4-fs (loop8): Could not load journal inode [ 296.124236][T22773] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 296.207604][T22779] netlink: 'syz.8.7829': attribute type 27 has an invalid length. [ 296.343022][T22787] loop5: detected capacity change from 0 to 128 [ 296.361119][T22787] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 296.919165][T22779] wg2: left promiscuous mode [ 296.923832][T22779] wg2: left allmulticast mode [ 297.161039][T22779] team_slave_1: left promiscuous mode [ 297.350772][T22799] loop5: detected capacity change from 0 to 512 [ 297.368573][T22799] EXT4-fs: Ignoring removed orlov option [ 297.376097][T22799] EXT4-fs: inline encryption not supported [ 297.387392][T22799] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.7823: corrupted in-inode xattr: invalid ea_ino [ 297.402188][T22799] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7823: couldn't read orphan inode 15 (err -117) [ 297.415906][T22799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.434971][T22799] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7823: bg 0: block 411: padding at end of block bitmap is not set [ 297.449900][T22799] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 297.460168][T22799] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.7823: invalid indirect mapped block 234881024 (level 0) [ 297.491216][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.557753][T22779] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.566249][T22779] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.574746][T22779] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.583175][T22779] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.656576][T22781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.666297][T22781] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.676451][T22781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.781811][ T29] audit: type=1326 audit(1749725437.053:10113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.4.7827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f411c24e929 code=0x0 [ 297.858342][T22821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7830'. [ 297.887804][T22827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.910851][T22827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.922390][T22823] loop6: detected capacity change from 0 to 512 [ 297.922803][T22827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.938180][T22827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.953845][T22823] EXT4-fs: journaled quota format not specified [ 299.010347][T22865] loop5: detected capacity change from 0 to 512 [ 299.036020][T22865] EXT4-fs: journaled quota format not specified [ 299.075644][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7851'. [ 299.152520][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7865'. [ 299.278005][T22883] loop8: detected capacity change from 0 to 1024 [ 299.293444][T22883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.322970][T22883] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 299.370996][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.384141][T22894] netlink: 'syz.6.7864': attribute type 27 has an invalid length. [ 299.392169][ T29] audit: type=1326 audit(1749725438.733:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.454312][T22894] erspan0: left promiscuous mode [ 299.476159][ T29] audit: type=1326 audit(1749725438.764:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.500634][ T29] audit: type=1326 audit(1749725438.764:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.514151][T22894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.525170][ T29] audit: type=1326 audit(1749725438.764:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.555626][ T29] audit: type=1326 audit(1749725438.764:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.579970][ T29] audit: type=1326 audit(1749725438.764:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.604288][ T29] audit: type=1326 audit(1749725438.764:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.628803][ T29] audit: type=1326 audit(1749725438.764:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.653183][ T29] audit: type=1326 audit(1749725438.764:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.677001][ T29] audit: type=1326 audit(1749725438.764:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz.4.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411c24e929 code=0x7ffc0000 [ 299.702359][T22894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.720312][T22911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7870'. [ 299.859863][T22920] loop6: detected capacity change from 0 to 1024 [ 299.884933][T22920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.908084][T22920] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 299.973416][T22927] syzkaller0: entered promiscuous mode [ 299.979238][T22927] syzkaller0: entered allmulticast mode [ 299.986632][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.998663][T22932] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7878'. [ 300.040141][T22935] loop6: detected capacity change from 0 to 512 [ 300.047374][T22935] EXT4-fs: Ignoring removed orlov option [ 300.055088][T22935] EXT4-fs: inline encryption not supported [ 300.064512][T22935] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.7879: corrupted in-inode xattr: invalid ea_ino [ 300.080559][T22935] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7879: couldn't read orphan inode 15 (err -117) [ 300.093366][T22935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.109508][T22935] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7879: bg 0: block 411: padding at end of block bitmap is not set [ 300.126000][T22935] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 300.137016][T22935] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7879: invalid indirect mapped block 234881024 (level 0) [ 300.159799][T22947] netlink: 'syz.5.7883': attribute type 27 has an invalid length. [ 300.180562][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.257071][T22947] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.264332][T22947] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.297261][T22953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.345130][T22947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.358847][T22947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.400359][T22947] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.409490][T22947] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.419312][T22947] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.428585][T22947] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.467950][T22948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.477158][T22948] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.506589][T22948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.545158][T22961] loop2: detected capacity change from 0 to 128 [ 300.572195][T22961] syz.2.7899: attempt to access beyond end of device [ 300.572195][T22961] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 300.586841][T22961] syz.2.7899: attempt to access beyond end of device [ 300.586841][T22961] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 300.600576][T22961] syz.2.7899: attempt to access beyond end of device [ 300.600576][T22961] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 300.615261][T22961] syz.2.7899: attempt to access beyond end of device [ 300.615261][T22961] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 300.630006][T22961] syz.2.7899: attempt to access beyond end of device [ 300.630006][T22961] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 300.648257][T22961] syz.2.7899: attempt to access beyond end of device [ 300.648257][T22961] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 300.666992][T22961] syz.2.7899: attempt to access beyond end of device [ 300.666992][T22961] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 300.682204][T22961] syz.2.7899: attempt to access beyond end of device [ 300.682204][T22961] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 300.696306][T22961] syz.2.7899: attempt to access beyond end of device [ 300.696306][T22961] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 300.783025][T22973] loop5: detected capacity change from 0 to 1024 [ 300.814816][T22973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.835951][T22973] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 300.873134][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.905900][T22980] loop4: detected capacity change from 0 to 1024 [ 300.915691][T22980] EXT4-fs: Ignoring removed orlov option [ 300.921798][T22980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.932192][T22979] syzkaller0: entered promiscuous mode [ 300.937730][T22979] syzkaller0: entered allmulticast mode [ 300.949089][T22980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.012821][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.133562][T22994] loop5: detected capacity change from 0 to 128 [ 301.137149][T22997] 9p: Unknown uid 00000000004294967295 [ 301.151039][T22999] serio: Serial port ptm1 [ 301.153936][T22994] syz.5.7904: attempt to access beyond end of device [ 301.153936][T22994] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 301.301621][T23020] loop8: detected capacity change from 0 to 512 [ 301.311977][T23020] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 301.326241][T23020] EXT4-fs (loop8): 1 truncate cleaned up [ 301.332665][T23020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.363543][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.377225][T23030] loop6: detected capacity change from 0 to 128 [ 301.572374][T23035] 9p: Unknown uid 00000000004294967295 [ 301.722097][T23048] loop6: detected capacity change from 0 to 2048 [ 301.741137][T23048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.770661][T23057] loop2: detected capacity change from 0 to 1024 [ 301.778009][T23057] EXT4-fs: Invalid want_extra_isize 0 [ 301.779168][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.854652][T23065] loop2: detected capacity change from 0 to 512 [ 301.871796][T23065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.891138][T23065] EXT4-fs (loop2): 1 truncate cleaned up [ 301.899070][T23065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.944353][T22355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.186815][T23094] IPv4: Oversized IP packet from 127.202.26.0 [ 302.258387][T23104] loop5: detected capacity change from 0 to 512 [ 302.278449][T23104] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.319589][T23104] EXT4-fs (loop5): 1 truncate cleaned up [ 302.332734][T23110] SELinux: ebitmap: truncated map [ 302.340082][T23110] SELinux: failed to load policy [ 302.352975][T23104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.396896][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.599910][T23135] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 302.608131][T23135] tipc: Enabled bearer , priority 10 [ 302.745907][T23144] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 302.764465][T23146] loop8: detected capacity change from 0 to 512 [ 302.782182][T23146] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.793822][T23144] SELinux: failed to load policy [ 302.799957][T23146] EXT4-fs (loop8): 1 truncate cleaned up [ 302.807903][T23146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.520936][T23207] loop9: detected capacity change from 0 to 7 [ 303.528530][T23207] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.538484][T23207] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.546521][T23207] loop9: unable to read partition table [ 303.553356][T23207] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 303.553356][T23207] U) failed (rc=-5) [ 303.670753][T18414] tipc: Node number set to 3016150495 [ 303.782773][T23234] netlink: 404 bytes leftover after parsing attributes in process `syz.2.7997'. [ 303.897897][T23243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8001'. [ 303.919780][T23243] netem: change failed [ 303.977253][T23252] loop2: detected capacity change from 0 to 512 [ 303.987015][T23252] EXT4-fs: Ignoring removed bh option [ 303.996527][T23252] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.005891][T23252] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 304.058875][T23252] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 304.069382][T23252] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 304.109302][T23267] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 304.177645][T23271] loop5: detected capacity change from 0 to 164 [ 304.195903][T23271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 304.267262][T23285] loop9: detected capacity change from 0 to 7 [ 304.276371][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8020'. [ 304.280379][T23285] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.294115][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8020'. [ 304.319122][T23285] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.327064][T23285] loop9: unable to read partition table [ 304.340385][T23299] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 304.371790][T23285] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 304.371790][T23285] U) failed (rc=-5) [ 304.461218][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8035'. [ 304.494114][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8035'. [ 304.581298][T23329] loop8: detected capacity change from 0 to 512 [ 304.597059][T23329] EXT4-fs: Ignoring removed bh option [ 304.611764][T23329] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.614044][T23326] Falling back ldisc for ttyS3. [ 304.620944][T23329] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 304.632862][T23329] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 304.651267][T23329] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 304.717652][T23341] loop9: detected capacity change from 0 to 7 [ 304.725827][T23341] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.734276][T23341] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.743049][T23341] loop9: unable to read partition table [ 304.747215][T23342] loop2: detected capacity change from 0 to 164 [ 304.750461][T23341] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 304.750461][T23341] U) failed (rc=-5) [ 304.770687][T23342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 304.870006][T23349] loop6: detected capacity change from 0 to 128 [ 305.009200][T23360] vhci_hcd: invalid port number 96 [ 305.014410][T23360] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 305.174931][T23369] loop4: detected capacity change from 0 to 512 [ 305.182023][T23369] EXT4-fs: Ignoring removed bh option [ 305.201324][T23369] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.210486][T23369] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 305.223380][T23382] loop9: detected capacity change from 0 to 7 [ 305.230019][T23382] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.237920][T23382] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.245861][T23382] loop9: unable to read partition table [ 305.251752][T23382] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 305.251752][T23382] U) failed (rc=-5) [ 305.283237][T23369] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 305.316650][T23369] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 305.330353][T23387] loop6: detected capacity change from 0 to 512 [ 305.351263][T23387] ext4 filesystem being mounted at /1203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.366879][T23388] Falling back ldisc for ttyS3. [ 305.381750][T23387] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8052: corrupted inode contents [ 305.410158][T23387] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8052: mark_inode_dirty error [ 305.440269][T23399] loop4: detected capacity change from 0 to 164 [ 305.447042][T23387] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8052: corrupted inode contents [ 305.464650][T23399] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 305.585669][T23413] loop4: detected capacity change from 0 to 128 [ 305.628412][T23417] vhci_hcd: invalid port number 96 [ 305.634425][T23417] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 305.733526][T23430] loop5: detected capacity change from 0 to 512 [ 305.740111][T23426] Falling back ldisc for ttyS3. [ 305.748441][T23430] EXT4-fs: Ignoring removed bh option [ 305.754657][T23430] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.763818][T23430] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 305.774710][T23430] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 305.778405][T23432] loop8: detected capacity change from 0 to 512 [ 305.798352][T23430] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 305.827832][T23413] bio_check_eod: 131 callbacks suppressed [ 305.827865][T23413] syz.4.8059: attempt to access beyond end of device [ 305.827865][T23413] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 305.833941][T23432] ext4 filesystem being mounted at /797/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.847792][T23413] syz.4.8059: attempt to access beyond end of device [ 305.847792][T23413] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 305.847975][T23413] syz.4.8059: attempt to access beyond end of device [ 305.847975][T23413] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 305.889073][T23413] syz.4.8059: attempt to access beyond end of device [ 305.889073][T23413] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 305.903890][T23413] syz.4.8059: attempt to access beyond end of device [ 305.903890][T23413] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 305.916931][T23432] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.8071: corrupted inode contents [ 305.917477][T23413] syz.4.8059: attempt to access beyond end of device [ 305.917477][T23413] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 305.943271][T23413] syz.4.8059: attempt to access beyond end of device [ 305.943271][T23413] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 305.956899][T23432] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.8071: mark_inode_dirty error [ 305.957221][T23432] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.8071: corrupted inode contents [ 305.983080][T23413] syz.4.8059: attempt to access beyond end of device [ 305.983080][T23413] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 305.997255][T23413] syz.4.8059: attempt to access beyond end of device [ 305.997255][T23413] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 306.029715][T23413] syz.4.8059: attempt to access beyond end of device [ 306.029715][T23413] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 306.071690][T23442] syzkaller0: entered promiscuous mode [ 306.077231][T23442] syzkaller0: entered allmulticast mode [ 306.106387][T23451] syzkaller1: entered promiscuous mode [ 306.111943][T23451] syzkaller1: entered allmulticast mode [ 306.228763][T23456] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8078'. [ 306.278949][T23462] syzkaller1: entered promiscuous mode [ 306.284521][T23462] syzkaller1: entered allmulticast mode [ 306.318543][T23464] Falling back ldisc for ttyS3. [ 306.349608][T23466] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8094'. [ 306.485859][T23474] loop6: detected capacity change from 0 to 512 [ 306.485954][T23472] loop4: detected capacity change from 0 to 512 [ 306.498233][T23474] EXT4-fs: Ignoring removed bh option [ 306.516566][T23474] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.526413][T23474] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 306.540180][T23472] EXT4-fs mount: 13 callbacks suppressed [ 306.540199][T23472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.560668][T23472] ext4 filesystem being mounted at /1048/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.567884][T23474] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 306.580459][T23484] loop2: detected capacity change from 0 to 128 [ 306.588042][T23474] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 306.599069][T23474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.612253][T23472] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8085: corrupted inode contents [ 306.644872][T23472] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8085: mark_inode_dirty error [ 306.645554][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.687204][T23472] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8085: corrupted inode contents [ 306.696618][T23491] loop5: detected capacity change from 0 to 512 [ 306.706201][T23491] EXT4-fs: Ignoring removed bh option [ 306.713649][T23491] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.722873][T23491] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 306.734296][T23491] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 306.751459][T23491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 306.760900][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.803196][T23491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.859278][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.916218][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 306.916279][ T29] audit: type=1326 audit(1749725446.638:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23511 comm="syz.8.8099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3be073e929 code=0x0 [ 306.931415][T23501] syzkaller0: entered promiscuous mode [ 306.951172][T23501] syzkaller0: entered allmulticast mode [ 307.016472][T23515] Falling back ldisc for ttyS3. [ 307.033425][T23521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.049907][T23521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.084040][T23527] loop2: detected capacity change from 0 to 512 [ 307.105736][T23527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.119380][T23527] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.136769][T23527] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8107: corrupted inode contents [ 307.150363][T23535] loop5: detected capacity change from 0 to 128 [ 307.160294][T23537] loop4: detected capacity change from 0 to 512 [ 307.166945][T23537] EXT4-fs: Ignoring removed bh option [ 307.172453][T23527] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8107: mark_inode_dirty error [ 307.186721][T23537] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.195854][T23537] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 307.218460][T23527] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8107: corrupted inode contents [ 307.265125][T23537] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 307.276349][T22355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.286885][T23537] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 307.300956][T23537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.359958][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.380943][ T29] audit: type=1326 audit(1749725447.131:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.387649][T23555] syzkaller1: entered promiscuous mode [ 307.405472][ T29] audit: type=1326 audit(1749725447.131:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.410085][T23555] syzkaller1: entered allmulticast mode [ 307.454953][ T29] audit: type=1326 audit(1749725447.194:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.478698][ T29] audit: type=1326 audit(1749725447.194:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.479745][T23552] Falling back ldisc for ttyS3. [ 307.502383][ T29] audit: type=1326 audit(1749725447.194:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.502490][ T29] audit: type=1326 audit(1749725447.194:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.502523][ T29] audit: type=1326 audit(1749725447.194:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.502558][ T29] audit: type=1326 audit(1749725447.194:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.5.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 307.701505][T23577] loop2: detected capacity change from 0 to 128 [ 307.773734][T23581] syzkaller1: entered promiscuous mode [ 307.779347][T23581] syzkaller1: entered allmulticast mode [ 307.857210][ T29] audit: type=1326 audit(1749725447.625:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23590 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a40e929 code=0x7ffc0000 [ 307.976041][T23598] Falling back ldisc for ttyS3. [ 308.048142][T23614] loop4: detected capacity change from 0 to 128 [ 308.214140][T23626] syzkaller1: entered promiscuous mode [ 308.219687][T23626] syzkaller1: entered allmulticast mode [ 308.349505][T23642] ipvlan0: entered promiscuous mode [ 308.355494][T23642] bridge0: port 1(ipvlan0) entered blocking state [ 308.362026][T23642] bridge0: port 1(ipvlan0) entered disabled state [ 308.370246][T23642] ipvlan0: entered allmulticast mode [ 308.375583][T23642] bridge0: entered allmulticast mode [ 308.381336][T23642] ipvlan0: left allmulticast mode [ 308.386779][T23642] bridge0: left allmulticast mode [ 309.799471][T23655] loop8: detected capacity change from 0 to 128 [ 309.816421][T23658] ipvlan2: entered promiscuous mode [ 309.823007][T23658] bridge0: port 3(ipvlan2) entered blocking state [ 309.829521][T23658] bridge0: port 3(ipvlan2) entered disabled state [ 309.852852][T23658] ipvlan2: entered allmulticast mode [ 309.858266][T23658] bridge0: entered allmulticast mode [ 309.875982][T23658] ipvlan2: left allmulticast mode [ 309.881105][T23658] bridge0: left allmulticast mode [ 309.994306][T23666] loop8: detected capacity change from 0 to 512 [ 310.043235][T23666] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 310.051187][T23666] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 310.111799][T23666] System zones: 0-1, 15-15, 18-18, 34-34 [ 310.136059][T23666] EXT4-fs (loop8): orphan cleanup on readonly fs [ 310.152438][T23666] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 310.167053][T23666] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 310.194024][T23666] EXT4-fs (loop8): 1 truncate cleaned up [ 310.210621][T23666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.235703][T23683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.247061][T23683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.285168][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.416619][T23701] loop8: detected capacity change from 0 to 1024 [ 310.432532][T23701] EXT4-fs: Ignoring removed nobh option [ 310.453054][T23701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.477523][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8181'. [ 310.490058][T13732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.509574][T23709] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 310.603208][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8202'. [ 310.612710][T23719] loop4: detected capacity change from 0 to 512 [ 310.626555][T23719] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 310.635281][T23719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 310.645221][T23719] System zones: 0-1, 15-15, 18-18, 34-34 [ 310.651170][T23719] EXT4-fs (loop4): orphan cleanup on readonly fs [ 310.658764][T23719] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 310.674162][T23719] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 310.681289][T23725] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 310.694228][T23719] EXT4-fs (loop4): 1 truncate cleaned up [ 310.708417][T23719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.747994][ T9599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.929067][T23745] loop6: detected capacity change from 0 to 1024 [ 310.942943][T23745] EXT4-fs: Ignoring removed nobh option [ 310.972417][T23745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.001454][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.206763][T23768] loop4: detected capacity change from 0 to 2048 [ 311.241829][T23768] loop4: p2 p3 < > p4 < p5 > [ 311.246623][T23768] loop4: partition table partially beyond EOD, truncated [ 311.255555][T23768] loop4: p3 start 4284289 is beyond EOD, truncated [ 311.330808][T23780] loop6: detected capacity change from 0 to 2048 [ 311.377910][T23780] loop6: p2 p3 < > p4 < p5 > [ 311.382708][T23780] loop6: partition table partially beyond EOD, truncated [ 311.399946][T23780] loop6: p3 start 4284289 is beyond EOD, truncated [ 311.441829][T23790] wg2: entered promiscuous mode [ 311.446808][T23790] wg2: entered allmulticast mode [ 311.475962][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8221'. [ 313.000968][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8240'. [ 313.053238][T23819] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 313.063914][T23818] loop4: detected capacity change from 0 to 128 [ 313.136812][T23833] wg2: left promiscuous mode [ 313.141517][T23833] wg2: left allmulticast mode [ 313.153435][T23833] wg2: entered promiscuous mode [ 313.158417][T23833] wg2: entered allmulticast mode [ 313.209929][T23841] netlink: 'syz.4.8244': attribute type 1 has an invalid length. [ 313.224786][T23841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.245930][T23841] bond2: (slave veth7): Enslaving as an active interface with a down link [ 313.260628][T23841] bond2: (slave dummy0): making interface the new active one [ 313.271466][T23841] dummy0: entered promiscuous mode [ 313.276991][T23841] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 313.415678][T23850] loop8: detected capacity change from 0 to 128 [ 314.025648][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8257'. [ 314.034672][T23874] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8256'. [ 314.055302][T23873] rtc_cmos 00:00: Alarms can be up to one day in the future [ 314.066557][T23871] wg2: entered promiscuous mode [ 314.071583][T23871] wg2: entered allmulticast mode [ 314.090433][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8256'. [ 314.109040][T23879] loop6: detected capacity change from 0 to 1024 [ 314.142886][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 314.142900][ T29] audit: type=1326 audit(1749725454.228:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.143180][T23879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.149049][ T29] audit: type=1326 audit(1749725454.228:10309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.208804][ T29] audit: type=1326 audit(1749725454.228:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.232456][ T29] audit: type=1326 audit(1749725454.228:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.256360][ T29] audit: type=1326 audit(1749725454.228:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.280005][ T29] audit: type=1326 audit(1749725454.228:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.303741][ T29] audit: type=1326 audit(1749725454.228:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.333690][ T29] audit: type=1326 audit(1749725454.323:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.357433][ T29] audit: type=1326 audit(1749725454.323:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.381059][ T29] audit: type=1326 audit(1749725454.323:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.5.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d351e929 code=0x7ffc0000 [ 314.462532][T23897] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 314.578735][T23906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8270'. [ 314.914660][T18389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 314.923186][T18389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 314.930876][T18389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 314.938514][T18389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 314.946756][T18389] rtc rtc0: __rtc_set_alarm: err=-22 [ 314.952936][T23911] loop5: detected capacity change from 0 to 128 [ 315.056006][ T8426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.143865][T23916] loop5: detected capacity change from 0 to 1024 [ 315.154319][T23916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.343049][T23923] ================================================================== [ 315.351171][T23923] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 315.358296][T23923] [ 315.360630][T23923] write to 0xffff888106e4b254 of 4 bytes by task 23916 on cpu 1: [ 315.368397][T23923] xas_set_mark+0x12b/0x140 [ 315.372934][T23923] __folio_start_writeback+0x1dd/0x440 [ 315.378401][T23923] ext4_bio_write_folio+0x5ad/0x9f0 [ 315.383605][T23923] mpage_submit_folio+0xe4/0x170 [ 315.388582][T23923] mpage_process_page_bufs+0x39b/0x4a0 [ 315.394058][T23923] mpage_prepare_extent_to_map+0x741/0xaa0 [ 315.399905][T23923] ext4_do_writepages+0xa1a/0x21c0 [ 315.405021][T23923] ext4_writepages+0x176/0x300 [ 315.409808][T23923] do_writepages+0x1c6/0x310 [ 315.414401][T23923] file_write_and_wait_range+0x156/0x2c0 [ 315.420056][T23923] generic_buffers_fsync_noflush+0x45/0x120 [ 315.425968][T23923] ext4_sync_file+0x1ab/0x690 [ 315.430655][T23923] vfs_fsync_range+0x10d/0x130 [ 315.435442][T23923] ext4_buffered_write_iter+0x34f/0x3c0 [ 315.441032][T23923] ext4_file_write_iter+0xdbf/0xf00 [ 315.446238][T23923] iter_file_splice_write+0x5f2/0x970 [ 315.451629][T23923] direct_splice_actor+0x156/0x2a0 [ 315.456762][T23923] splice_direct_to_actor+0x312/0x680 [ 315.462170][T23923] do_splice_direct+0xda/0x150 [ 315.466982][T23923] do_sendfile+0x380/0x650 [ 315.471406][T23923] __x64_sys_sendfile64+0x105/0x150 [ 315.476612][T23923] x64_sys_call+0xb39/0x2fb0 [ 315.481225][T23923] do_syscall_64+0xd2/0x200 [ 315.485735][T23923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.491636][T23923] [ 315.493962][T23923] read to 0xffff888106e4b254 of 4 bytes by task 23923 on cpu 0: [ 315.501592][T23923] xas_find_marked+0x5dc/0x620 [ 315.506365][T23923] find_get_entry+0x5d/0x380 [ 315.510970][T23923] filemap_get_folios_tag+0x92/0x210 [ 315.516267][T23923] mpage_prepare_extent_to_map+0x320/0xaa0 [ 315.522085][T23923] ext4_do_writepages+0xa1a/0x21c0 [ 315.527201][T23923] ext4_writepages+0x176/0x300 [ 315.531984][T23923] do_writepages+0x1c6/0x310 [ 315.536609][T23923] filemap_write_and_wait_range+0x144/0x340 [ 315.542536][T23923] filemap_invalidate_pages+0xa4/0x1a0 [ 315.548027][T23923] kiocb_invalidate_pages+0x6e/0x80 [ 315.553261][T23923] __iomap_dio_rw+0x5d4/0x1250 [ 315.558062][T23923] iomap_dio_rw+0x40/0x90 [ 315.562434][T23923] ext4_file_write_iter+0xad9/0xf00 [ 315.567657][T23923] iter_file_splice_write+0x5f2/0x970 [ 315.573061][T23923] direct_splice_actor+0x156/0x2a0 [ 315.578202][T23923] splice_direct_to_actor+0x312/0x680 [ 315.583629][T23923] do_splice_direct+0xda/0x150 [ 315.588425][T23923] do_sendfile+0x380/0x650 [ 315.592863][T23923] __x64_sys_sendfile64+0x105/0x150 [ 315.598084][T23923] x64_sys_call+0xb39/0x2fb0 [ 315.602688][T23923] do_syscall_64+0xd2/0x200 [ 315.607210][T23923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.613121][T23923] [ 315.615455][T23923] value changed: 0x0a000021 -> 0x04000021 [ 315.621183][T23923] [ 315.623512][T23923] Reported by Kernel Concurrency Sanitizer on: [ 315.629751][T23923] CPU: 0 UID: 0 PID: 23923 Comm: syz.5.8285 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 315.642280][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.652356][T23923] ================================================================== [ 315.792984][T23916] ================================================================== [ 315.801122][T23916] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 315.808538][T23916] [ 315.810890][T23916] write to 0xffff888106e4b254 of 4 bytes by task 23923 on cpu 1: [ 315.818642][T23916] xas_set_mark+0x12b/0x140 [ 315.823182][T23916] tag_pages_for_writeback+0xc2/0x290 [ 315.828590][T23916] ext4_do_writepages+0x697/0x21c0 [ 315.833733][T23916] ext4_writepages+0x176/0x300 [ 315.838535][T23916] do_writepages+0x1c6/0x310 [ 315.843276][T23916] file_write_and_wait_range+0x156/0x2c0 [ 315.848950][T23916] generic_buffers_fsync_noflush+0x45/0x120 [ 315.854903][T23916] ext4_sync_file+0x1ab/0x690 [ 315.859618][T23916] vfs_fsync_range+0x10d/0x130 [ 315.864425][T23916] ext4_buffered_write_iter+0x34f/0x3c0 [ 315.870024][T23916] ext4_file_write_iter+0xdbf/0xf00 [ 315.875261][T23916] iter_file_splice_write+0x5f2/0x970 [ 315.880682][T23916] direct_splice_actor+0x156/0x2a0 [ 315.885845][T23916] splice_direct_to_actor+0x312/0x680 [ 315.891266][T23916] do_splice_direct+0xda/0x150 [ 315.896075][T23916] do_sendfile+0x380/0x650 [ 315.900535][T23916] __x64_sys_sendfile64+0x105/0x150 [ 315.905786][T23916] x64_sys_call+0xb39/0x2fb0 [ 315.910414][T23916] do_syscall_64+0xd2/0x200 [ 315.914957][T23916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.920886][T23916] [ 315.923224][T23916] read to 0xffff888106e4b254 of 4 bytes by task 23916 on cpu 0: [ 315.930880][T23916] ext4_do_writepages+0xea/0x21c0 [ 315.935941][T23916] ext4_writepages+0x176/0x300 [ 315.940752][T23916] do_writepages+0x1c6/0x310 [ 315.945376][T23916] file_write_and_wait_range+0x156/0x2c0 [ 315.951049][T23916] generic_buffers_fsync_noflush+0x45/0x120 [ 315.956998][T23916] ext4_sync_file+0x1ab/0x690 [ 315.961708][T23916] vfs_fsync_range+0x10d/0x130 [ 315.966501][T23916] ext4_buffered_write_iter+0x34f/0x3c0 [ 315.972089][T23916] ext4_file_write_iter+0xdbf/0xf00 [ 315.977320][T23916] iter_file_splice_write+0x5f2/0x970 [ 315.982751][T23916] direct_splice_actor+0x156/0x2a0 [ 315.987915][T23916] splice_direct_to_actor+0x312/0x680 [ 315.993351][T23916] do_splice_direct+0xda/0x150 [ 315.998161][T23916] do_sendfile+0x380/0x650 [ 316.002619][T23916] __x64_sys_sendfile64+0x105/0x150 [ 316.007859][T23916] x64_sys_call+0xb39/0x2fb0 [ 316.012483][T23916] do_syscall_64+0xd2/0x200 [ 316.017016][T23916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.022956][T23916] [ 316.025306][T23916] value changed: 0x02000021 -> 0x04000021 [ 316.031049][T23916] [ 316.033390][T23916] Reported by Kernel Concurrency Sanitizer on: [ 316.039563][T23916] CPU: 0 UID: 0 PID: 23916 Comm: syz.5.8285 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 316.052098][T23916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.062187][T23916] ================================================================== [ 316.161890][T21655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.169534][ T5993] dummy0: left promiscuous mode