last executing test programs: 1m11.18250913s ago: executing program 3 (id=448): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x800000}, 0x18) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 1m11.11693767s ago: executing program 3 (id=452): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m11.066691361s ago: executing program 3 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1m11.025031991s ago: executing program 3 (id=456): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1m10.925333333s ago: executing program 3 (id=458): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="180800084000000000000000000000008510000003000000000000000000000000000000010000009500000000000000950085ff000000008df616204b4b68baf8a5b2beb6af8620059492c606000000000000009830"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m10.792774015s ago: executing program 0 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x0, 0xfffffffc, 0xe3}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) 1m10.764578425s ago: executing program 0 (id=464): r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x7, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendto(r3, &(0x7f0000001680)="9b", 0x1, 0x1c015, 0x0, 0x0) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 1m10.740490016s ago: executing program 0 (id=465): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1m10.676707537s ago: executing program 3 (id=466): r0 = getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x34020000) 1m10.676592697s ago: executing program 32 (id=466): r0 = getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x34020000) 1m10.594144698s ago: executing program 0 (id=469): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$eJzs3U1sHOUZB/D/+CNxTRQCpDRFQDahAQOpYzslNOLSxF4npv6obEciqipCSVJFsUoFRQLUQypVPRW1h6oHekPqpSckLnCpcmuvvfRQqeLcG+op6qFbzew6tmOv1wn+Ivx+1nrn45n3fd6d2Xnl8e684cus0WhUj3ucv/Dn7UyW3efs2GcffvR++fjljexJd14oPkn6ktSSniSHkt7RsdmZqQ4FXU8uJbmZFEn2pvm8IZdS/Db7luZvpvhjWW/lwj02jA1p8JW208cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsRsXo2NDQcJHJiekLr9Taq4YAb7eya6m8T6tRv4tPO9abFOUjfX2LQ30fOri0+tHy19E83px7vBqQPH1574FHD7z0SE/X4vbrJHw3/tcaDPmuN3zr3feuv7awcOXNTUrky+ZcfXpibmZi6sy5em1ibqZ2+tSpoRPnx+dq4xOT9bmLc/P1qdrobP3M/MxsbWD02drw6dMna/XBizMXps+NDU7WFxe++O2RoaFTtZcHf1A/Mzs3M33i5cG50fMTk5MT0+eqmHJ1GfNieSB+f2K+Nl8/M1WrXb22cOXkiozWOCTKoOFOLSmDRjoFjQyNjAwPj4wMn3rh9AsvDg31LC3oTrVg6A5Ztcntgzb7slnHLzvvg66NRm7yGRzuXVer/89kJjKdC3kltTV/RjOW2cxkqs36lsX+/9iJ+rr1Lu//F3v5Q0urH0vV/z/ZnHuyXf/fJpft+3kr7+a9XM9rWchCruTNFWv33kOJjcbarfrT35uvxU63eOXPudQznYnMZSYTmcqZakmttaSW0zmVUxnKqzmf8cyllvFMZDL1zOVi5jKfenVEjWY29ZzJfE+zjQMZzbOpZTinczonU0s9g7mYmVzIdM5lLGeqUq7mWvW6n1wnx9tBwxsJGlknaJ3+v7XgLvp/vqI2+xQO96zR6v/3dA4dGN2OhAAAAIBN982/Zf/Bh//6r6Q3T1TX2AEAAID7TfVxvcfLp95y6okU4xOT9aHVgW9vf24AAADA5iiq79gVSfpzuDm1+E2oNS4CAAAAAF9G1f//nyyf+supwyn8/Q8AAAD3m8732O8YURxPLTfKVbXLzcjLrYjWfX77xycm64OjM5MvDefp6i4D1TcNVpXWnQNJ9fWD53KkGXWkv/ncv7LEvjJqePCl4fTlaKshA0+VT08NrBE5UkY+l2eakc8sRvZlVeTJMhIA7ndH1+mPN9r/P5fjzYjjj1W3b+95bI0+eEjPCgC7RecxdjpGFN9ZHP6nzd//3bl6uPmRgsG8njeykMs5Xn3boPrEQavU3CyyVGr/so8hHO9wNaB/2QgvxxevBxzet+b1gP5lA70cX3VFoF3syTVfu2LT9wYAbI+jq/rhdfr/RqM5ter6//p///f7SCEA7Cq3R7Dfwok76+zdmaYCAC3te+l1dG9hQgAAAAAAAAAAAAAAAAAAAAAAAAAAAHAf2Mr7/3cl2dqRBb7AxI0kuyCNbZ74d2u3r1rVWn5jxzNcNrE3X7ycvm0Z4eLdH+3ZxYf6vU3s4EkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbVMk3Wst70r2Jj1DSU5sf1Zb58ZOJ7DDilu5lXeyf6fzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC437Tu/9+V5vMDzUXp6UqOJbmU5Ic7neNmurXTCeywZff/L/d5GkV6mrs9Re/o2OzMVLn7s7dc/9mHH71fPu6lnrKAsoYVg0u0ami/1UPVVv1jV966/vM3flYbO1sleXZ+fHJs6tzs95YCHy0+TmppPhYt5vuLonUUr2z5x2VLO9db1jJe1Tu2ut5vrLX17XqP/eV37du2ZCmNawtXRsqa5uuvzL/902vvLAt6OEeSpwaSgZU1/aR8tKnpSHrXq7f4vPh1sT9/yKVq/5dpFI2i3EUPVu3/2tVrC1cGX39j4XKbnA7kcJLLSd/Gczq8ek8sqo66rt6y1qEqqPx1sEN563qge3+j0SxxuE0bHqoOmf67akOtfRsqHV73VhtPtsnokTx913v66Q41tvy30dScKz4v/lmczz/yq2Xjf3SV+/9YNvLuLGOqyGVHSvs2H1tq+cjyFa/eGdn2XckW+E1+nO/e3v9dy87/rX21PeejZTVu2fuiaPZCLdX0wTt6pNbZp12WrTwPNqPa5Pn1PL96uw55Pt/hjLJJ7/+Vis+LD4qB/Cc3jP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsfkXSvdbyruRYkgNJHizna0ljM+rr6i82o5gN2rNqyY1trH336Lo9VdzKrbyT/TuaDgAAAAAAAACb5uzYZx9+9H75qP4f351vFZ8kfc3/9PckOVD8vnd0bHZmqkNBvcmlJDfL6b67y6HcLvuW5m+Wc4fuvi0AwMb8PwAA//9F2m9c") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1m10.47330846s ago: executing program 0 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m7.429654633s ago: executing program 0 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m7.429527344s ago: executing program 33 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 56.886509075s ago: executing program 6 (id=845): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 56.721730327s ago: executing program 6 (id=851): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 56.648653778s ago: executing program 6 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff97) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x14) write$cgroup_int(r2, &(0x7f0000000000)=0x91e, 0x12) 56.621733138s ago: executing program 6 (id=857): mount$9p_fd(0x0, 0x0, 0x0, 0x8080, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffec9, &(0x7f00000044c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007618980050015002c000000050001af09e8b707e11f3af62e0006000000050005000a00000005020400000000000900020073797a300000000012000300686173683a6e6f13231a161582dc84d1e09f630835e79c395209ca2c8a609ca0cb97196f03ad1e0990ad5a17e1ddd26bf7a408a1b2329d1f2aea7a5d63ccfb2acebcab3fe4d2fef8ac7183d91c8355fc162aa6b30f7c122f8b9ae425ce61ebbf1e35380dd85724f36a1ce9a5a38a1e"], 0x58}}, 0x800) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 56.50047372s ago: executing program 6 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 56.350828702s ago: executing program 1 (id=867): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syslog(0xa, 0x0, 0x0) 56.147238075s ago: executing program 1 (id=868): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x6c2ae3f4, 0x4, 0x3e2, 0x0, 0xfffffc00, 0x0, 0x0, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r0) 56.013960927s ago: executing program 6 (id=869): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 55.962890738s ago: executing program 34 (id=869): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 55.960602367s ago: executing program 1 (id=871): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 55.894220999s ago: executing program 1 (id=872): mount$9p_fd(0x0, 0x0, 0x0, 0x8080, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffec9, &(0x7f00000044c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007618980050015002c000000050001af09e8b707e11f3af62e0006000000050005000a00000005020400000000000900020073797a300000000012000300686173683a6e6f13231a161582dc84d1e09f630835e79c395209ca2c8a609ca0cb97196f03ad1e0990ad5a17e1ddd26bf7a408a1b2329d1f2aea7a5d63ccfb2acebcab3fe4d2fef8ac7183d91c8355fc162aa6b30f7c122f8b9ae425ce61ebbf1e35380dd85724f36a1ce9a5a38a1e"], 0x58}}, 0x800) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 55.735798251s ago: executing program 1 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 55.004700431s ago: executing program 1 (id=893): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xe712, 0xff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x14d}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x95, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x8, 0xd4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xcd, 0x5, 0x81}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.942557482s ago: executing program 35 (id=893): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xe712, 0xff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x14d}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x95, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x8, 0xd4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xcd, 0x5, 0x81}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.358477764s ago: executing program 4 (id=1797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) 21.358157474s ago: executing program 4 (id=1798): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)={'system_u:object_r:auth_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xe}, 0x47) 21.304403984s ago: executing program 4 (id=1800): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 21.282328795s ago: executing program 4 (id=1803): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x1000) 21.208445945s ago: executing program 4 (id=1804): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 21.172543676s ago: executing program 4 (id=1807): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) statx(0xffffffffffffffff, 0x0, 0x0, 0x408, 0x0) 21.143128817s ago: executing program 36 (id=1807): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) statx(0xffffffffffffffff, 0x0, 0x0, 0x408, 0x0) 2.08175762s ago: executing program 9 (id=2390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.998980251s ago: executing program 9 (id=2394): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) 1.921105952s ago: executing program 9 (id=2398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="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", 0x3b5}], 0x1}}], 0x1, 0x84004) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=']\r5.?', 0x5}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0xc4, 0xb7a, 0x7, 0x401, 0x4}, &(0x7f0000000000)=0x98) 1.820714684s ago: executing program 9 (id=2403): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.808488284s ago: executing program 7 (id=2405): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x200c92, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0, 0x36e, &(0x7f00000001c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x0, 0x2c, 0x3}], 0x18) 888.696927ms ago: executing program 7 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 829.222168ms ago: executing program 7 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44d", 0x36}], 0x1) r2 = socket(0x25, 0x801, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x300, 0x0, 0x0) 805.923058ms ago: executing program 7 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c000280080002400000000814000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 785.813388ms ago: executing program 9 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 716.78112ms ago: executing program 5 (id=2428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 645.95577ms ago: executing program 9 (id=2431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 640.701871ms ago: executing program 5 (id=2432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000002c0), 0x0) 621.422711ms ago: executing program 7 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 567.037911ms ago: executing program 5 (id=2434): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$vsock(0xffffffffffffff9c, 0x0, 0x8200, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105042, 0x1db) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 564.311371ms ago: executing program 7 (id=2435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 524.053432ms ago: executing program 5 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 492.801972ms ago: executing program 5 (id=2449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 399.810934ms ago: executing program 5 (id=2441): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usbip_server_init(0x2) io_setup(0x2, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x18, r1, &(0x7f0000000080)="f7", 0x1, 0x0, 0x0, 0x2}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) 204.571057ms ago: executing program 2 (id=2453): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 176.488257ms ago: executing program 2 (id=2454): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000d0ab00850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 160.218388ms ago: executing program 2 (id=2455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000000) 144.507498ms ago: executing program 2 (id=2456): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 108.127778ms ago: executing program 8 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) 107.507588ms ago: executing program 2 (id=2458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 100.177248ms ago: executing program 8 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 86.799279ms ago: executing program 2 (id=2460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 72.645228ms ago: executing program 8 (id=2461): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 590.43µs ago: executing program 8 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 264.95µs ago: executing program 8 (id=2463): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 0s ago: executing program 8 (id=2464): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000a, 0x13, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[], 0x32600) kernel console output (not intermixed with test programs): v0: Interface activated: batadv_slave_0 [ 56.806969][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.817592][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.827532][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.838089][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.847993][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.858492][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.868343][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.878819][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.889696][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.904027][ T5042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912903][ T5042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921685][ T5042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.930611][ T5042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.041877][ T5241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 57.086345][ T5245] wg2: entered promiscuous mode [ 57.091277][ T5245] wg2: entered allmulticast mode [ 57.105996][ T5247] loop4: detected capacity change from 0 to 512 [ 57.118477][ T5247] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.129979][ T5247] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.594: bad orphan inode 13 [ 57.140729][ T5247] ext4_test_bit(bit=12, block=18) = 1 [ 57.146259][ T5247] is_bad_inode(inode)=0 [ 57.150600][ T5247] NEXT_ORPHAN(inode)=2130706432 [ 57.155562][ T5247] max_ino=32 [ 57.158913][ T5247] i_nlink=1 [ 57.169435][ T5247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.188745][ T5247] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 57.215008][ T5247] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.594: bg 0: block 248: padding at end of block bitmap is not set [ 57.231004][ T5247] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.594: Failed to acquire dquot type 1 [ 57.250231][ T5247] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.254813][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 57.284282][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 57.296121][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.665425][ T5292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5292 comm=syz.2.607 [ 57.678139][ T5292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5292 comm=syz.2.607 [ 58.296673][ T5380] serio: Serial port ptm0 [ 58.676262][ T5441] netlink: 64 bytes leftover after parsing attributes in process `syz.6.629'. [ 58.763546][ T5452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.633'. [ 59.120193][ T5487] vlan2: entered allmulticast mode [ 59.125388][ T5487] bond0: entered allmulticast mode [ 59.130542][ T5487] bond_slave_0: entered allmulticast mode [ 59.136330][ T5487] bond_slave_1: entered allmulticast mode [ 59.239851][ T5499] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 59.869245][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.886540][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.020973][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 60.020991][ T29] audit: type=1400 audit(1746753819.488:993): avc: denied { create } for pid=5548 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.055968][ T29] audit: type=1400 audit(1746753819.498:994): avc: denied { write } for pid=5548 comm="syz.1.675" path="socket:[11202]" dev="sockfs" ino=11202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.280758][ T5573] tipc: Started in network mode [ 60.285940][ T5573] tipc: Node identity 4ed0d74b4408, cluster identity 4711 [ 60.293222][ T5573] tipc: Enabled bearer , priority 0 [ 60.302765][ T5573] tipc: Disabling bearer [ 60.388404][ T29] audit: type=1400 audit(1746753819.858:995): avc: denied { setopt } for pid=5580 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.658509][ T5604] loop5: detected capacity change from 0 to 1024 [ 60.686051][ T5604] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.697027][ T5604] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.720232][ T29] audit: type=1400 audit(1746753820.188:996): avc: denied { getopt } for pid=5607 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.753827][ T5604] JBD2: no valid journal superblock found [ 60.759732][ T5604] EXT4-fs (loop5): Could not load journal inode [ 60.803745][ T5614] tipc: Started in network mode [ 60.806044][ T5604] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.808666][ T5614] tipc: Node identity fe4cd82c15bf, cluster identity 4711 [ 60.825657][ T5614] tipc: Enabled bearer , priority 0 [ 60.874170][ T5614] tipc: Disabling bearer [ 60.973896][ T29] audit: type=1400 audit(1746753820.448:997): avc: denied { append } for pid=5628 comm="syz.2.712" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.043462][ T5635] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 61.050661][ T29] audit: type=1400 audit(1746753820.518:998): avc: denied { connect } for pid=5636 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.088632][ T29] audit: type=1400 audit(1746753820.558:999): avc: denied { watch } for pid=5638 comm="syz.5.716" path="/42/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 61.125765][ T29] audit: type=1400 audit(1746753820.598:1000): avc: denied { unmount } for pid=4771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.241070][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.724'. [ 61.250230][ T5656] tipc: Started in network mode [ 61.255212][ T5656] tipc: Node identity 8aa98719a0db, cluster identity 4711 [ 61.262545][ T5656] tipc: Enabled bearer , priority 0 [ 61.285927][ T5656] tipc: Disabling bearer [ 61.444623][ T5670] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.581757][ T5676] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.591746][ T5676] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.621750][ T5678] loop5: detected capacity change from 0 to 1024 [ 61.629179][ T5678] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.640249][ T5678] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.650628][ T5678] JBD2: no valid journal superblock found [ 61.656460][ T5678] EXT4-fs (loop5): Could not load journal inode [ 61.666554][ T5678] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 61.724980][ T5684] loop5: detected capacity change from 0 to 512 [ 61.734184][ T5684] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 61.742548][ T5684] EXT4-fs (loop5): Invalid default hash set in the superblock [ 61.808918][ T29] audit: type=1326 audit(1746753821.278:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.4.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 61.842272][ T29] audit: type=1326 audit(1746753821.278:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.4.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 62.221095][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 62.353197][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 62.455947][ T5740] loop1: detected capacity change from 0 to 512 [ 62.480804][ T5740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.503053][ T5740] EXT4-fs (loop1): 1 truncate cleaned up [ 62.513612][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.528968][ T5747] siw: device registration error -23 [ 62.541418][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.586344][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 62.596950][ T5752] veth0_macvtap: left promiscuous mode [ 62.609758][ T5757] netlink: 96 bytes leftover after parsing attributes in process `syz.5.768'. [ 62.867400][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 63.200398][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'. [ 63.238139][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.801'. [ 63.263001][ T5829] veth0_macvtap: left promiscuous mode [ 63.714538][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.725175][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.066911][ T5896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.825'. [ 64.434390][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.840'. [ 64.451216][ T5932] block device autoloading is deprecated and will be removed. [ 64.459608][ T5932] syz.2.841: attempt to access beyond end of device [ 64.459608][ T5932] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.561815][ T5941] random: crng reseeded on system resumption [ 64.743171][ T5956] syz.6.852: attempt to access beyond end of device [ 64.743171][ T5956] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.820625][ T5966] loop6: detected capacity change from 0 to 1024 [ 64.827841][ T5966] EXT4-fs: inline encryption not supported [ 64.835276][ T5966] EXT4-fs: Ignoring removed nobh option [ 64.840900][ T5966] EXT4-fs: Ignoring removed bh option [ 64.864414][ T5966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.051551][ T5992] loop2: detected capacity change from 0 to 512 [ 65.068453][ T5992] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.085084][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 65.085102][ T29] audit: type=1326 audit(1746753824.558:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.130666][ T29] audit: type=1326 audit(1746753824.588:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.132375][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.154269][ T29] audit: type=1326 audit(1746753824.588:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.165063][ T5992] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.866: bad orphan inode 13 [ 65.186623][ T29] audit: type=1326 audit(1746753824.588:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.220109][ T29] audit: type=1326 audit(1746753824.588:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.243597][ T29] audit: type=1326 audit(1746753824.588:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.244048][ T5992] ext4_test_bit(bit=12, block=18) = 1 [ 65.267186][ T29] audit: type=1326 audit(1746753824.588:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.272614][ T5992] is_bad_inode(inode)=0 [ 65.272625][ T5992] NEXT_ORPHAN(inode)=2130706432 [ 65.272633][ T5992] max_ino=32 [ 65.272641][ T5992] i_nlink=1 [ 65.276046][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.296035][ T29] audit: type=1326 audit(1746753824.588:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.347830][ T29] audit: type=1326 audit(1746753824.588:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.371417][ T29] audit: type=1326 audit(1746753824.588:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6987e969 code=0x7ffc0000 [ 65.409616][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.422536][ T5992] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.464107][ T5992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.866: bg 0: block 248: padding at end of block bitmap is not set [ 65.483392][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.514090][ T5992] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.866: Failed to acquire dquot type 1 [ 65.538306][ T6003] loop1: detected capacity change from 0 to 1024 [ 65.547877][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.560189][ T6003] EXT4-fs: inline encryption not supported [ 65.586701][ T6003] EXT4-fs: Ignoring removed nobh option [ 65.592895][ T6003] EXT4-fs: Ignoring removed bh option [ 65.604038][ T5992] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.627147][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.639030][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.668473][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.788108][ T37] bridge_slave_1: left allmulticast mode [ 65.793811][ T37] bridge_slave_1: left promiscuous mode [ 65.799565][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.817490][ T37] bridge_slave_0: left allmulticast mode [ 65.823244][ T37] bridge_slave_0: left promiscuous mode [ 65.828956][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.070699][ T4438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.083856][ T6033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6033 comm=syz.4.882 [ 66.096289][ T6033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6033 comm=syz.4.882 [ 66.116081][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.131546][ T37] bond_slave_0: left allmulticast mode [ 66.147797][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.167455][ T37] bond_slave_1: left allmulticast mode [ 66.181730][ T37] bond0 (unregistering): Released all slaves [ 66.230129][ T4438] bridge0: port 3(syz_tun) entered disabled state [ 66.261954][ T4438] syz_tun (unregistering): left allmulticast mode [ 66.268502][ T4438] syz_tun (unregistering): left promiscuous mode [ 66.275341][ T4438] bridge0: port 3(syz_tun) entered disabled state [ 66.305686][ T37] tipc: Left network mode [ 66.315081][ T37] hsr_slave_0: left promiscuous mode [ 66.320892][ T37] hsr_slave_1: left promiscuous mode [ 66.326701][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.334312][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.346264][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.353860][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.365069][ T37] veth1_macvtap: left promiscuous mode [ 66.371111][ T37] veth1_vlan: left promiscuous mode [ 66.376726][ T37] veth0_vlan: left promiscuous mode [ 66.536514][ T37] team0 (unregistering): Port device team_slave_1 removed [ 66.569366][ T37] team0 (unregistering): Port device team_slave_0 removed [ 66.785261][ T6004] chnl_net:caif_netlink_parms(): no params data found [ 66.934051][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.941169][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.988691][ T6004] bridge_slave_0: entered allmulticast mode [ 67.018012][ T6004] bridge_slave_0: entered promiscuous mode [ 67.066674][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.068951][ T6104] loop5: detected capacity change from 0 to 512 [ 67.074011][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.094099][ T6104] EXT4-fs: inline encryption not supported [ 67.115352][ T6004] bridge_slave_1: entered allmulticast mode [ 67.145299][ T6004] bridge_slave_1: entered promiscuous mode [ 67.178624][ T6104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.216521][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.269678][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.281913][ T6068] chnl_net:caif_netlink_parms(): no params data found [ 67.307383][ T6104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 67.358685][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.379657][ T6104] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.411237][ T6004] team0: Port device team_slave_0 added [ 67.424432][ T6004] team0: Port device team_slave_1 added [ 67.504637][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.545418][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.552473][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.578485][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.642799][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.650190][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.658759][ T4771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.661458][ T6123] bridge0: entered allmulticast mode [ 67.715473][ T6125] bridge_slave_1: left allmulticast mode [ 67.721172][ T6125] bridge_slave_1: left promiscuous mode [ 67.727081][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.791238][ T6125] bridge_slave_0: left allmulticast mode [ 67.797003][ T6125] bridge_slave_0: left promiscuous mode [ 67.802747][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.851750][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.865380][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.872393][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.898410][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.923255][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.930379][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.938982][ T6068] bridge_slave_0: entered allmulticast mode [ 67.945673][ T6068] bridge_slave_0: entered promiscuous mode [ 67.966505][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.973778][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.991822][ T6068] bridge_slave_1: entered allmulticast mode [ 68.003704][ T6068] bridge_slave_1: entered promiscuous mode [ 68.038648][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.082866][ T6004] hsr_slave_0: entered promiscuous mode [ 68.089101][ T6004] hsr_slave_1: entered promiscuous mode [ 68.095073][ T6004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.102682][ T6004] Cannot create hsr debugfs directory [ 68.112900][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.146268][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.204421][ T6147] loop5: detected capacity change from 0 to 2048 [ 68.263677][ T3604] loop5: p1 < > p4 [ 68.270569][ T6068] team0: Port device team_slave_0 added [ 68.276138][ T3604] loop5: p4 size 8388608 extends beyond EOD, truncated [ 68.283832][ T6159] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 68.292607][ T6068] team0: Port device team_slave_1 added [ 68.299491][ T6147] loop5: p1 < > p4 [ 68.304138][ T6147] loop5: p4 size 8388608 extends beyond EOD, truncated [ 68.306775][ T37] bridge_slave_1: left allmulticast mode [ 68.316789][ T37] bridge_slave_1: left promiscuous mode [ 68.318043][ T3006] loop5: p1 < > p4 [ 68.322664][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.327276][ T3006] loop5: p4 size 8388608 extends beyond EOD, truncated [ 68.341055][ T37] bridge_slave_0: left allmulticast mode [ 68.346848][ T37] bridge_slave_0: left promiscuous mode [ 68.352670][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.443235][ T6162] loop5: detected capacity change from 0 to 1024 [ 68.450007][ T6162] EXT4-fs: Ignoring removed nobh option [ 68.456023][ T6162] ext2: Unknown parameter 'dont_hash' [ 68.465835][ T6162] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.524635][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.535802][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.545668][ T37] bond0 (unregistering): Released all slaves [ 68.594382][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.601423][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.627476][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.715205][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.722231][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.748186][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.833659][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.841298][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.862465][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.869949][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.900087][ T37] veth1_macvtap: left promiscuous mode [ 68.914984][ T37] veth0_macvtap: left promiscuous mode [ 68.920726][ T37] veth1_vlan: left promiscuous mode [ 69.023815][ T37] team0 (unregistering): Port device team_slave_1 removed [ 69.036156][ T37] team0 (unregistering): Port device team_slave_0 removed [ 69.086083][ T6068] hsr_slave_0: entered promiscuous mode [ 69.092541][ T6068] hsr_slave_1: entered promiscuous mode [ 69.098685][ T6068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.107906][ T6068] Cannot create hsr debugfs directory [ 69.174757][ T6004] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.196144][ T6004] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.214780][ T6004] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.233127][ T6200] __nla_validate_parse: 3 callbacks suppressed [ 69.233223][ T6200] netlink: 76 bytes leftover after parsing attributes in process `syz.5.947'. [ 69.255138][ T6004] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.264774][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 69.350390][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.358841][ T6068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.386632][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.395606][ T6068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.406011][ T6068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.406138][ T6210] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 69.426390][ T6068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 69.442778][ T6212] loop5: detected capacity change from 0 to 164 [ 69.453142][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.460276][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.479026][ T6212] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.498661][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.505779][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.523617][ T6212] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.535741][ T6212] Symlink component flag not implemented [ 69.541600][ T6212] Symlink component flag not implemented [ 69.547944][ T6212] Symlink component flag not implemented (7) [ 69.554090][ T6212] Symlink component flag not implemented (116) [ 69.602541][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.640394][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.656046][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.663455][ T4016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.683540][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.690721][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.717327][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.746892][ T6068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.784981][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.960'. [ 69.847372][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.011438][ T6004] veth0_vlan: entered promiscuous mode [ 70.013138][ T1038] Process accounting resumed [ 70.062907][ T6004] veth1_vlan: entered promiscuous mode [ 70.109288][ T6004] veth0_macvtap: entered promiscuous mode [ 70.133817][ T6004] veth1_macvtap: entered promiscuous mode [ 70.169509][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.180182][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.190073][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.200621][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.210501][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.214288][ T6281] IPv4: Oversized IP packet from 127.202.26.0 [ 70.221074][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.242757][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.258759][ T6068] veth0_vlan: entered promiscuous mode [ 70.274487][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.285037][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.294908][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.305527][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.315383][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.325143][ T6285] loop2: detected capacity change from 0 to 764 [ 70.325811][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.343379][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.357352][ T6004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.366280][ T6004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.375202][ T6004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.382719][ T6285] iso9660: Unknown parameter '' [ 70.384024][ T6004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.400800][ T6068] veth1_vlan: entered promiscuous mode [ 70.417182][ T6068] veth0_macvtap: entered promiscuous mode [ 70.444539][ T6068] veth1_macvtap: entered promiscuous mode [ 70.475226][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.485734][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.495699][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.506206][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.516069][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.526573][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.536458][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.546943][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.562514][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.577835][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.588387][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.598253][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.608705][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.618570][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.629035][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.638924][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.649381][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.660075][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.667454][ T6291] netlink: 96 bytes leftover after parsing attributes in process `syz.7.870'. [ 70.682904][ T6068] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.691740][ T6068] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.700584][ T6068] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.709348][ T6068] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.824585][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 70.824601][ T29] audit: type=1400 audit(1746753830.298:1195): avc: denied { read } for pid=6306 comm="syz.7.976" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.871606][ T29] audit: type=1400 audit(1746753830.298:1196): avc: denied { open } for pid=6306 comm="syz.7.976" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.897492][ T29] audit: type=1400 audit(1746753830.338:1197): avc: denied { ioctl } for pid=6306 comm="syz.7.976" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.119563][ T6316] loop2: detected capacity change from 0 to 1024 [ 71.130984][ T6316] EXT4-fs: inline encryption not supported [ 71.139103][ T6316] EXT4-fs: Ignoring removed bh option [ 71.154958][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.199626][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.315604][ T6327] vhci_hcd: invalid port number 96 [ 71.320791][ T6327] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.391159][ T6335] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.401814][ T29] audit: type=1400 audit(1746753830.858:1198): avc: denied { mac_admin } for pid=6334 comm="syz.7.988" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.423106][ T29] audit: type=1400 audit(1746753830.878:1199): avc: denied { relabelto } for pid=6334 comm="syz.7.988" name="/" dev="ramfs" ino=13897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 71.449435][ T29] audit: type=1400 audit(1746753830.878:1200): avc: denied { associate } for pid=6334 comm="syz.7.988" name="/" dev="ramfs" ino=13897 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 72.206285][ T29] audit: type=1326 audit(1746753831.668:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 72.238071][ T29] audit: type=1326 audit(1746753831.668:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 72.261686][ T29] audit: type=1326 audit(1746753831.678:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 72.285200][ T29] audit: type=1326 audit(1746753831.678:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 72.563744][ T6379] loop5: detected capacity change from 0 to 2048 [ 72.570487][ T6379] EXT4-fs: Ignoring removed orlov option [ 72.602746][ T6380] netlink: 'syz.4.1006': attribute type 5 has an invalid length. [ 72.617320][ T6379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.684877][ T4771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.847464][ T6408] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1019'. [ 72.906873][ T6414] loop8: detected capacity change from 0 to 512 [ 72.913813][ T6414] EXT4-fs: inline encryption not supported [ 72.930361][ T6414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.961174][ T6414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.961259][ T6414] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.146679][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.328657][ T6451] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 73.917873][ T6479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1049'. [ 74.123067][ T6503] loop7: detected capacity change from 0 to 128 [ 74.140339][ T6503] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.169714][ T6505] loop4: detected capacity change from 0 to 2048 [ 74.196317][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1062'. [ 74.219602][ T6505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.260660][ T6503] syz.7.1060: attempt to access beyond end of device [ 74.260660][ T6503] loop7: rw=2049, sector=129, nr_sectors = 13 limit=128 [ 74.280639][ T6505] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.386851][ T37] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.478177][ T6523] loop8: detected capacity change from 0 to 512 [ 74.494917][ T6523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.556757][ T6523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.582288][ T6523] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.725711][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.820483][ T6536] loop5: detected capacity change from 0 to 2048 [ 74.885901][ T6536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.168118][ T6525] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1061: bg 0: block 345: padding at end of block bitmap is not set [ 75.216593][ T6525] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.217194][ T4771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.284532][ T6554] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 75.314027][ T6558] loop2: detected capacity change from 0 to 128 [ 75.500660][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.636198][ T6586] netlink: 'syz.4.1093': attribute type 13 has an invalid length. [ 75.672986][ T6583] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 75.693019][ T6583] SELinux: failed to load policy [ 75.749431][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.759841][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.786193][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1096'. [ 75.802163][ T6586] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.811330][ T6586] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.820368][ T6586] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.829298][ T6586] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.971597][ T6609] loop5: detected capacity change from 0 to 2048 [ 76.013843][ T6609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.038939][ T6609] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.131712][ T6624] loop7: detected capacity change from 0 to 2048 [ 76.169908][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 76.169924][ T29] audit: type=1400 audit(1746753835.638:1351): avc: denied { create } for pid=6626 comm="syz.8.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.196010][ T29] audit: type=1400 audit(1746753835.638:1352): avc: denied { ioctl } for pid=6626 comm="syz.8.1110" path="socket:[15632]" dev="sockfs" ino=15632 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.234924][ T6624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.247251][ T6624] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.487488][ T6647] loop8: detected capacity change from 0 to 512 [ 76.522452][ T29] audit: type=1326 audit(1746753835.968:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 76.546744][ T29] audit: type=1326 audit(1746753835.968:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 76.616381][ T6647] EXT4-fs (loop8): orphan cleanup on readonly fs [ 76.628501][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.646071][ T6647] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1116: bg 0: block 248: padding at end of block bitmap is not set [ 76.652470][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.694181][ T6647] Quota error (device loop8): write_blk: dquota write failed [ 76.701646][ T6647] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 76.711830][ T6647] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.1116: Failed to acquire dquot type 1 [ 76.724895][ T6634] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1100: bg 0: block 345: padding at end of block bitmap is not set [ 76.774843][ T6640] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 76.784489][ T6647] EXT4-fs (loop8): 1 truncate cleaned up [ 76.790980][ T6647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.805040][ T6634] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.847592][ T29] audit: type=1326 audit(1746753836.318:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 76.871991][ T29] audit: type=1326 audit(1746753836.318:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 76.896161][ T29] audit: type=1326 audit(1746753836.318:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 76.920134][ T29] audit: type=1326 audit(1746753836.318:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 77.041660][ T6646] EXT4-fs error (device loop8): ext4_lookup:1793: inode #2: comm syz.8.1116: deleted inode referenced: 12 [ 77.082411][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.115412][ T6652] loop8: detected capacity change from 0 to 128 [ 77.132679][ T6652] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.162595][ T6652] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.204493][ T4027] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.306304][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 77.319084][ T6660] ip6gre1: entered allmulticast mode [ 77.558700][ T6692] loop8: detected capacity change from 0 to 128 [ 77.577070][ T4771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.619880][ T6692] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.664141][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.674164][ T6692] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.767487][ T6068] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.893541][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 77.923243][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 78.078518][ T6748] loop4: detected capacity change from 0 to 2048 [ 78.124186][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.421760][ T6798] vhci_hcd: default hub control req: 4750 v004c i0000 l0 [ 78.471422][ T6800] syzkaller1: entered promiscuous mode [ 78.477047][ T6800] syzkaller1: entered allmulticast mode [ 78.496868][ T6748] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 78.509363][ T6748] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.509363][ T6748] [ 78.519166][ T6748] EXT4-fs (loop4): Total free blocks count 0 [ 78.525443][ T6748] EXT4-fs (loop4): Free/Dirty block details [ 78.528290][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1150'. [ 78.531430][ T6748] EXT4-fs (loop4): free_blocks=0 [ 78.531455][ T6748] EXT4-fs (loop4): dirty_blocks=0 [ 78.531470][ T6748] EXT4-fs (loop4): Block reservation details [ 78.556656][ T6748] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 78.677888][ T6818] loop7: detected capacity change from 0 to 512 [ 78.688713][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.705880][ T6818] EXT4-fs (loop7): orphan cleanup on readonly fs [ 78.732426][ T6818] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1158: bg 0: block 248: padding at end of block bitmap is not set [ 78.767354][ T6818] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1158: Failed to acquire dquot type 1 [ 78.806419][ T6818] EXT4-fs (loop7): 1 truncate cleaned up [ 78.825390][ T6818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.848935][ T6818] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.1158: deleted inode referenced: 12 [ 78.889274][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.903706][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 78.917272][ T6836] loop2: detected capacity change from 0 to 512 [ 78.918950][ T3385] kernel write not supported for file /316/attr/exec (pid: 3385 comm: kworker/0:3) [ 78.925876][ T6836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.998277][ T6836] EXT4-fs (loop2): 1 truncate cleaned up [ 79.014507][ T6845] loop7: detected capacity change from 0 to 164 [ 79.026529][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.067116][ T6845] syz.7.1171: attempt to access beyond end of device [ 79.067116][ T6845] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 79.105721][ T6845] syz.7.1171: attempt to access beyond end of device [ 79.105721][ T6845] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.129354][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.404902][ T6870] vhci_hcd: invalid port number 96 [ 79.410134][ T6870] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 79.700899][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1193'. [ 79.747506][ T6895] loop8: detected capacity change from 0 to 512 [ 79.760311][ T6895] EXT4-fs: Ignoring removed oldalloc option [ 79.801985][ T6895] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1192: Parent and EA inode have the same ino 15 [ 79.839883][ T6906] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1197'. [ 79.853701][ T6895] EXT4-fs (loop8): Remounting filesystem read-only [ 79.860282][ T6895] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 79.874722][ T6895] EXT4-fs (loop8): 1 orphan inode deleted [ 79.880997][ T6895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.918086][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.214834][ T6932] loop7: detected capacity change from 0 to 512 [ 80.228986][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 80.239902][ T6932] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 80.291330][ T6934] loop2: detected capacity change from 0 to 8192 [ 80.335449][ T6932] EXT4-fs (loop7): 1 truncate cleaned up [ 80.341821][ T6932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.380412][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.404757][ T6934] wg2: entered promiscuous mode [ 80.409708][ T6934] wg2: entered allmulticast mode [ 80.646078][ T6982] 9pnet_fd: Insufficient options for proto=fd [ 81.199309][ T7028] Illegal XDP return value 4294967274 on prog (id 1092) dev syz_tun, expect packet loss! [ 81.216772][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 81.216788][ T29] audit: type=1326 audit(1746753840.688:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.249214][ T29] audit: type=1326 audit(1746753840.718:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.272727][ T29] audit: type=1326 audit(1746753840.718:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.296792][ T29] audit: type=1326 audit(1746753840.718:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.320440][ T29] audit: type=1326 audit(1746753840.718:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.426531][ T29] audit: type=1326 audit(1746753840.828:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.433823][ T7034] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1254'. [ 81.450177][ T29] audit: type=1326 audit(1746753840.828:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.483231][ T29] audit: type=1326 audit(1746753840.828:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.506776][ T29] audit: type=1326 audit(1746753840.828:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.531027][ T29] audit: type=1326 audit(1746753840.828:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 81.826864][ T7059] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1264'. [ 81.990241][ T7081] Invalid ELF header magic: != ELF [ 82.059007][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1258'. [ 82.180670][ T7102] serio: Serial port ptm0 [ 82.304805][ T7121] capability: warning: `syz.5.1290' uses deprecated v2 capabilities in a way that may be insecure [ 82.343658][ T7125] smc: net device bond0 applied user defined pnetid SYZ2 [ 82.351349][ T7125] smc: net device bond0 erased user defined pnetid SYZ2 [ 82.396488][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1293'. [ 82.436695][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1293'. [ 82.573158][ T7152] netlink: 'syz.4.1304': attribute type 11 has an invalid length. [ 82.581048][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1304'. [ 82.714657][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.723663][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.148503][ T7185] ALSA: seq fatal error: cannot create timer (-19) [ 83.258224][ T7198] loop2: detected capacity change from 0 to 512 [ 83.285339][ T7198] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 83.293713][ T7198] System zones: 0-2, 18-18, 34-35 [ 83.299701][ T7198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.398851][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.981041][ T7237] SELinux: failed to load policy [ 84.278877][ T7267] loop7: detected capacity change from 0 to 512 [ 84.289347][ T7267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.325360][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.559872][ T36] Process accounting resumed [ 84.605861][ T7284] netlink: 'syz.2.1357': attribute type 4 has an invalid length. [ 84.700604][ T7288] loop2: detected capacity change from 0 to 1024 [ 84.708958][ T7288] EXT4-fs: Ignoring removed oldalloc option [ 84.715717][ T7288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.737958][ T7290] hub 2-0:1.0: USB hub found [ 84.743725][ T7288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.758106][ T7290] hub 2-0:1.0: 8 ports detected [ 84.797875][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.848984][ T7300] loop4: detected capacity change from 0 to 164 [ 84.886361][ T7300] syz.4.1364: attempt to access beyond end of device [ 84.886361][ T7300] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.906158][ T7300] syz.4.1364: attempt to access beyond end of device [ 84.906158][ T7300] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.119445][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 85.143129][ T3390] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.197465][ T7328] fido_id[7328]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.364185][ T7343] loop4: detected capacity change from 0 to 512 [ 85.373947][ T7343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.400264][ T7343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.420200][ T7343] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 85.434338][ T7347] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.438442][ T7343] EXT4-fs (loop4): 1 truncate cleaned up [ 85.451484][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.492713][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.514050][ T7347] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.635028][ T7347] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.668463][ T7366] ip6gre1: entered allmulticast mode [ 85.687501][ T7347] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.761102][ T7347] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.774204][ T7347] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787118][ T7347] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.799491][ T7347] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860276][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 85.869269][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 85.887121][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 85.910322][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 86.062488][ T7399] loop7: detected capacity change from 0 to 512 [ 86.069390][ T7399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.082717][ T7399] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.098543][ T7399] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 86.106730][ T7399] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 86.115374][ T7399] EXT4-fs (loop7): 1 truncate cleaned up [ 86.121572][ T7399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.150376][ T7399] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.180413][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.355999][ T7415] xt_connbytes: Forcing CT accounting to be enabled [ 86.363253][ T7415] Cannot find del_set index 1 as target [ 86.428788][ T7419] tipc: Started in network mode [ 86.433840][ T7419] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 86.444814][ T7419] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 86.453721][ T7419] tipc: Enabled bearer , priority 10 [ 86.935803][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 86.935820][ T29] audit: type=1400 audit(1746753846.408:1720): avc: denied { ioctl } for pid=7438 comm="syz.4.1421" path="socket:[17913]" dev="sockfs" ino=17913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.033557][ T29] audit: type=1326 audit(1746753846.498:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.057172][ T29] audit: type=1326 audit(1746753846.498:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.080971][ T29] audit: type=1326 audit(1746753846.498:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.104787][ T29] audit: type=1326 audit(1746753846.498:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.128511][ T29] audit: type=1326 audit(1746753846.498:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.152123][ T29] audit: type=1326 audit(1746753846.498:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.176339][ T29] audit: type=1326 audit(1746753846.498:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.199934][ T29] audit: type=1326 audit(1746753846.498:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.223469][ T29] audit: type=1326 audit(1746753846.498:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 87.462141][ T10] tipc: Node number set to 1 [ 87.478822][ T7471] syz_tun: entered allmulticast mode [ 87.486008][ T7470] syz_tun: left allmulticast mode [ 87.600270][ T7477] loop8: detected capacity change from 0 to 2048 [ 87.607048][ T7484] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 87.619283][ T7483] IPVS: stopping master sync thread 7484 ... [ 87.654903][ T3303] loop8: p1 < > p4 [ 87.659500][ T3303] loop8: p4 size 8388608 extends beyond EOD, truncated [ 87.681086][ T7477] loop8: p1 < > p4 [ 87.687022][ T7477] loop8: p4 size 8388608 extends beyond EOD, truncated [ 87.779676][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 87.791132][ T3994] udevd[3994]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 87.922278][ T7514] loop2: detected capacity change from 0 to 512 [ 87.947547][ T7514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.976079][ T7514] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.987977][ T7522] __nla_validate_parse: 7 callbacks suppressed [ 87.987993][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1456'. [ 88.004795][ T7522] netem: change failed [ 88.032830][ T7514] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 88.048362][ T7514] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 88.064777][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 88.071081][ T7514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.099317][ T7514] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.134618][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.221792][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.232507][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.319486][ T7547] ip6gre2: entered allmulticast mode [ 88.477039][ T7554] SELinux: failed to load policy [ 88.550564][ T7561] loop8: detected capacity change from 0 to 2048 [ 88.574482][ T7561] Alternate GPT is invalid, using primary GPT. [ 88.580816][ T7561] loop8: p1 p2 p3 [ 88.594993][ T3006] Alternate GPT is invalid, using primary GPT. [ 88.601442][ T3006] loop8: p1 p2 p3 [ 88.632897][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 88.643276][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.648506][ T3994] udevd[3994]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 88.670558][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.671344][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 88.691895][ T3994] udevd[3994]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 89.057923][ T7589] loop7: detected capacity change from 0 to 512 [ 89.084104][ T7589] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 89.115113][ T7589] EXT4-fs (loop7): 1 truncate cleaned up [ 89.121371][ T7589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.228921][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.367786][ T7609] sd 0:0:1:0: device reset [ 89.461224][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.483488][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.516871][ T7621] ip6gre2: entered allmulticast mode [ 89.524572][ T7620] SELinux: failed to load policy [ 89.604237][ T7629] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1500'. [ 89.694840][ T7639] loop4: detected capacity change from 0 to 1024 [ 89.701669][ T7639] EXT4-fs: Ignoring removed bh option [ 89.723787][ T7639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.825611][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.870449][ T7651] macsec1: entered allmulticast mode [ 89.875959][ T7651] macvlan0: entered allmulticast mode [ 89.881651][ T7651] veth1_vlan: entered allmulticast mode [ 89.935314][ T7651] macvlan0: left allmulticast mode [ 89.940514][ T7651] veth1_vlan: left allmulticast mode [ 90.391648][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1524'. [ 90.432946][ T7684] bridge_slave_1: left allmulticast mode [ 90.438812][ T7684] bridge_slave_1: left promiscuous mode [ 90.444565][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.484100][ T7684] bridge_slave_0: left allmulticast mode [ 90.490030][ T7684] bridge_slave_0: left promiscuous mode [ 90.496023][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.565841][ T7695] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1528'. [ 90.683041][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1530'. [ 90.849771][ T7714] loop4: detected capacity change from 0 to 164 [ 90.865495][ T7716] tls_set_device_offload: netdev not found [ 90.883055][ T7714] syz.4.1537: attempt to access beyond end of device [ 90.883055][ T7714] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.919266][ T7714] syz.4.1537: attempt to access beyond end of device [ 90.919266][ T7714] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.941291][ T7722] loop7: detected capacity change from 0 to 256 [ 90.948848][ T7722] FAT-fs (loop7): bogus number of FAT sectors [ 90.955210][ T7722] FAT-fs (loop7): Can't find a valid FAT filesystem [ 91.577916][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7785 comm=syz.2.1568 [ 91.891920][ T7809] xt_connbytes: Forcing CT accounting to be enabled [ 91.906802][ T7809] Cannot find set identified by id 0 to match [ 92.086761][ T7814] netlink: 'syz.5.1581': attribute type 178 has an invalid length. [ 92.239631][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 92.239649][ T29] audit: type=1326 audit(1746753851.708:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.269380][ T29] audit: type=1326 audit(1746753851.708:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.347950][ T7828] loop8: detected capacity change from 0 to 164 [ 92.352291][ T29] audit: type=1326 audit(1746753851.768:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.377827][ T29] audit: type=1326 audit(1746753851.768:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.401543][ T29] audit: type=1326 audit(1746753851.768:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.438074][ T29] audit: type=1326 audit(1746753851.768:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.461701][ T29] audit: type=1326 audit(1746753851.768:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.485265][ T29] audit: type=1326 audit(1746753851.768:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.508923][ T29] audit: type=1326 audit(1746753851.768:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.532488][ T29] audit: type=1326 audit(1746753851.768:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272bfde969 code=0x7ffc0000 [ 92.578309][ T7833] loop7: detected capacity change from 0 to 512 [ 92.607283][ T7828] syz.8.1587: attempt to access beyond end of device [ 92.607283][ T7828] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 92.633536][ T7828] syz.8.1587: attempt to access beyond end of device [ 92.633536][ T7828] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 92.663648][ T7833] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 92.679351][ T7839] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1592'. [ 92.713210][ T7833] EXT4-fs (loop7): 1 truncate cleaned up [ 92.784380][ T7833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.004546][ T7870] loop4: detected capacity change from 0 to 256 [ 93.079883][ T7870] FAT-fs (loop4): bogus number of FAT sectors [ 93.086064][ T7870] FAT-fs (loop4): Can't find a valid FAT filesystem [ 93.336617][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.729545][ T7916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.796296][ T7916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.846298][ T7916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.873804][ T1038] Process accounting resumed [ 93.925402][ T7916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.007208][ T7916] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.037154][ T7916] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.054667][ T7916] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.071414][ T7916] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.266456][ T7930] netlink: 'syz.8.1630': attribute type 21 has an invalid length. [ 94.285275][ T7930] netlink: 'syz.8.1630': attribute type 1 has an invalid length. [ 94.293214][ T7930] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1630'. [ 94.364864][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.376600][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.858370][ T7977] netlink: 'syz.5.1649': attribute type 4 has an invalid length. [ 94.888916][ T7977] netlink: 'syz.5.1649': attribute type 4 has an invalid length. [ 95.577833][ T8013] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1664'. [ 96.019629][ T3390] kernel read not supported for file inotify (pid: 3390 comm: kworker/0:4) [ 96.291961][ T8067] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 96.606307][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1691'. [ 96.649014][ T8082] loop8: detected capacity change from 0 to 128 [ 96.663034][ T8082] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.676472][ T8082] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.747900][ T8086] pim6reg1: entered promiscuous mode [ 96.753393][ T8086] pim6reg1: entered allmulticast mode [ 96.781240][ T6068] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.803933][ T8089] loop8: detected capacity change from 0 to 512 [ 96.824079][ T8089] EXT4-fs (loop8): 1 orphan inode deleted [ 96.830436][ T8089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.844081][ T8089] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.844476][ T4002] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 96.869178][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.086810][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1699'. [ 97.458882][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1712'. [ 97.470789][ T8130] loop8: detected capacity change from 0 to 512 [ 97.482485][ T8130] EXT4-fs: Ignoring removed orlov option [ 97.518009][ T8130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.541743][ T8136] SELinux: Context Ü is not valid (left unmapped). [ 97.549189][ T8130] EXT4-fs (loop8): orphan cleanup on readonly fs [ 97.557091][ T8130] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1712: bg 0: block 248: padding at end of block bitmap is not set [ 97.574992][ T8130] __quota_error: 197 callbacks suppressed [ 97.575007][ T8130] Quota error (device loop8): write_blk: dquota write failed [ 97.588263][ T8130] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 97.598990][ T8130] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.1712: Failed to acquire dquot type 1 [ 97.640290][ T8143] loop4: detected capacity change from 0 to 2048 [ 97.689622][ T8130] EXT4-fs (loop8): 1 truncate cleaned up [ 97.699097][ T8143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.718994][ T8130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.769561][ T8130] EXT4-fs: Ignoring removed orlov option [ 97.775748][ T8130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.792117][ T8130] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 97.806639][ T8143] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 97.818961][ T8143] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.818961][ T8143] [ 97.828826][ T8143] EXT4-fs (loop4): Total free blocks count 0 [ 97.834945][ T8143] EXT4-fs (loop4): Free/Dirty block details [ 97.840865][ T8143] EXT4-fs (loop4): free_blocks=0 [ 97.845860][ T8143] EXT4-fs (loop4): dirty_blocks=0 [ 97.850916][ T8143] EXT4-fs (loop4): Block reservation details [ 97.857050][ T8143] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 97.871033][ T8130] EXT4-fs error (device loop8): __ext4_remount:6738: comm syz.8.1712: Abort forced by user [ 97.887029][ T8151] tipc: Enabled bearer , priority 0 [ 97.893967][ T8130] EXT4-fs (loop8): Remounting filesystem read-only [ 97.900538][ T8130] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 97.910517][ T8151] tipc: Disabling bearer [ 97.919182][ T8130] ext4 filesystem being remounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.943048][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.955239][ T4528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.998920][ T29] audit: type=1326 audit(1746753857.468:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.044345][ T29] audit: type=1326 audit(1746753857.498:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.067879][ T29] audit: type=1326 audit(1746753857.498:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.091449][ T29] audit: type=1326 audit(1746753857.498:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.115001][ T29] audit: type=1326 audit(1746753857.498:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.138457][ T29] audit: type=1326 audit(1746753857.498:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.161805][ T29] audit: type=1326 audit(1746753857.498:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.185679][ T29] audit: type=1326 audit(1746753857.498:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa2b49ae969 code=0x7ffc0000 [ 98.214570][ T8169] loop8: detected capacity change from 0 to 512 [ 98.259010][ T8169] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1729: bg 0: block 35: padding at end of block bitmap is not set [ 98.282819][ T8169] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 98.294531][ T8169] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1729: invalid indirect mapped block 4294967295 (level 1) [ 98.313932][ T8169] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1729: invalid indirect mapped block 4294967295 (level 2) [ 98.328645][ T8169] EXT4-fs (loop8): 1 truncate cleaned up [ 98.336541][ T8169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.398574][ T8187] loop7: detected capacity change from 0 to 164 [ 98.401577][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.418748][ T8187] syz.7.1736: attempt to access beyond end of device [ 98.418748][ T8187] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 98.439700][ T8187] syz.7.1736: attempt to access beyond end of device [ 98.439700][ T8187] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 98.502155][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1740'. [ 98.535971][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1740'. [ 98.564655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812e27a200: rx timeout, send abort [ 98.573003][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812e27a200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.683413][ T8216] loop7: detected capacity change from 0 to 512 [ 98.693120][ T8216] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1749: bg 0: block 35: padding at end of block bitmap is not set [ 98.725441][ T8216] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 98.734821][ T8216] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1749: invalid indirect mapped block 4294967295 (level 1) [ 98.755126][ T8216] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1749: invalid indirect mapped block 4294967295 (level 2) [ 98.776874][ T8216] EXT4-fs (loop7): 1 truncate cleaned up [ 98.792783][ T8216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.858181][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.919718][ T8236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8236 comm=syz.8.1756 [ 99.032124][ T8242] netlink: 'syz.8.1761': attribute type 4 has an invalid length. [ 99.127936][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1766'. [ 99.136924][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1766'. [ 99.151943][ T8253] wireguard0: entered promiscuous mode [ 99.157522][ T8253] wireguard0: entered allmulticast mode [ 99.388087][ T8268] -1: renamed from syzkaller0 [ 99.483452][ T8274] random: crng reseeded on system resumption [ 99.675668][ T8283] pimreg: entered allmulticast mode [ 99.687787][ T8283] pimreg: left allmulticast mode [ 100.259870][ T8343] __nla_validate_parse: 1 callbacks suppressed [ 100.259890][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1806'. [ 100.623723][ T8347] chnl_net:caif_netlink_parms(): no params data found [ 100.752533][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.759706][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.776565][ T8347] bridge_slave_0: entered allmulticast mode [ 100.785496][ T8347] bridge_slave_0: entered promiscuous mode [ 100.793469][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.800621][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.800841][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1823'. [ 100.808146][ T8347] bridge_slave_1: entered allmulticast mode [ 100.823425][ T8347] bridge_slave_1: entered promiscuous mode [ 100.856118][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.872662][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.904294][ T8347] team0: Port device team_slave_0 added [ 100.911024][ T8347] team0: Port device team_slave_1 added [ 100.935383][ T8397] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1827'. [ 100.952426][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.959432][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.985427][ T8347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.025376][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.032410][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.058448][ T8347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.106166][ T8405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.153192][ T8347] hsr_slave_0: entered promiscuous mode [ 101.159423][ T8347] hsr_slave_1: entered promiscuous mode [ 101.165700][ T8347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.173427][ T8347] Cannot create hsr debugfs directory [ 101.207895][ T8411] syzkaller1: entered promiscuous mode [ 101.213549][ T8411] syzkaller1: entered allmulticast mode [ 101.335676][ T8419] ALSA: seq fatal error: cannot create timer (-19) [ 101.368106][ T8347] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.391211][ T8423] loop8: detected capacity change from 0 to 1024 [ 101.424188][ T8423] EXT4-fs (loop8): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 101.634669][ T8347] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.657564][ T8347] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.671451][ T8347] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.775664][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.794682][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.806143][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.813363][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.841576][ T8432] vhci_hcd: invalid port number 65 [ 101.846796][ T8432] vhci_hcd: invalid port number 65 [ 101.861105][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.868313][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.973716][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.239039][ T8469] loop7: detected capacity change from 0 to 512 [ 102.310527][ T8347] veth0_vlan: entered promiscuous mode [ 102.324318][ T8469] EXT4-fs: Ignoring removed orlov option [ 102.346693][ T8469] EXT4-fs: inline encryption not supported [ 102.362507][ T8347] veth1_vlan: entered promiscuous mode [ 102.388961][ T8469] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.1851: corrupted in-inode xattr: invalid ea_ino [ 102.402643][ T8347] veth0_macvtap: entered promiscuous mode [ 102.411802][ T8469] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1851: couldn't read orphan inode 15 (err -117) [ 102.425973][ T8469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.454369][ T8469] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1851: bg 0: block 411: padding at end of block bitmap is not set [ 102.480885][ T8347] veth1_macvtap: entered promiscuous mode [ 102.511098][ T8469] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 102.539296][ T8469] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1851: invalid indirect mapped block 234881024 (level 0) [ 102.572654][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.583191][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.593158][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.603833][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.613705][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.624214][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.634242][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.644761][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.655848][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.675189][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 102.675307][ T29] audit: type=1400 audit(1746753862.148:2172): avc: denied { unmount } for pid=6004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.713047][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.849533][ T29] audit: type=1400 audit(1746753862.318:2173): avc: denied { mount } for pid=8478 comm="syz.8.1854" name="/" dev="ramfs" ino=21748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.927081][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.937707][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.947855][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.958550][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.968491][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.979237][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.989294][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.999788][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.013362][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.042559][ T8347] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.051461][ T8347] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.060269][ T8347] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.069599][ T8347] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.164062][ T8494] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.1858'. [ 103.171585][ T29] audit: type=1400 audit(1746753862.608:2174): avc: denied { mounton } for pid=8347 comm="syz-executor" path="/root/syzkaller.5z2GFN/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 103.173268][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1858'. [ 103.206900][ T29] audit: type=1400 audit(1746753862.608:2175): avc: denied { mount } for pid=8347 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.229159][ T29] audit: type=1400 audit(1746753862.608:2176): avc: denied { mount } for pid=8347 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.251242][ T29] audit: type=1400 audit(1746753862.608:2177): avc: denied { mounton } for pid=8347 comm="syz-executor" path="/root/syzkaller.5z2GFN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.278078][ T29] audit: type=1400 audit(1746753862.608:2178): avc: denied { mounton } for pid=8347 comm="syz-executor" path="/root/syzkaller.5z2GFN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.305835][ T29] audit: type=1400 audit(1746753862.608:2179): avc: denied { mounton } for pid=8347 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.328834][ T29] audit: type=1400 audit(1746753862.608:2180): avc: denied { mount } for pid=8347 comm="syz-executor" name="/" dev="gadgetfs" ino=4572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.448962][ T29] audit: type=1400 audit(1746753862.728:2181): avc: denied { mount } for pid=8496 comm="syz.9.1808" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.581850][ T8522] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 103.643054][ T8530] smc: net device bond0 applied user defined pnetid SYZ2 [ 103.650483][ T8530] smc: net device bond0 erased user defined pnetid SYZ2 [ 103.708839][ T8454] syz.5.1848 (8454) used greatest stack depth: 7000 bytes left [ 103.750795][ T8539] SELinux: failed to load policy [ 103.817193][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1870'. [ 104.071007][ T8587] loop8: detected capacity change from 0 to 512 [ 104.099824][ T8587] EXT4-fs (loop8): orphan cleanup on readonly fs [ 104.116344][ T8587] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1880: bad orphan inode 13 [ 104.127845][ T8591] netem: incorrect gi model size [ 104.167901][ T8587] ext4_test_bit(bit=12, block=18) = 1 [ 104.173428][ T8587] is_bad_inode(inode)=0 [ 104.177670][ T8587] NEXT_ORPHAN(inode)=2130706432 [ 104.182671][ T8587] max_ino=32 [ 104.185902][ T8587] i_nlink=1 [ 104.212530][ T8587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.258127][ T8587] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 104.313875][ T8587] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.383226][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.481544][ T8617] loop8: detected capacity change from 0 to 2048 [ 104.592468][ T8617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.631496][ T8639] loop9: detected capacity change from 0 to 128 [ 104.664645][ T8617] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm wÞ£ÿ: bg 0: block 408: padding at end of block bitmap is not set [ 104.680253][ T8617] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.701932][ T4002] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 104.714287][ T4002] EXT4-fs (loop8): This should not happen!! Data will be lost [ 104.714287][ T4002] [ 104.718316][ T8646] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 104.724064][ T4002] EXT4-fs (loop8): Total free blocks count 0 [ 104.724080][ T4002] EXT4-fs (loop8): Free/Dirty block details [ 104.724091][ T4002] EXT4-fs (loop8): free_blocks=16 [ 104.731912][ T8646] FAT-fs (loop9): Filesystem has been set read-only [ 104.731950][ T8646] syz.9.1903: attempt to access beyond end of device [ 104.731950][ T8646] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 104.731991][ T8646] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 104.737996][ T4002] EXT4-fs (loop8): dirty_blocks=16 [ 104.743917][ T8646] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 104.745913][ T8646] syz.9.1903: attempt to access beyond end of device [ 104.745913][ T8646] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.748996][ T4002] EXT4-fs (loop8): Block reservation details [ 104.755615][ T8646] syz.9.1903: attempt to access beyond end of device [ 104.755615][ T8646] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.769248][ T4002] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 104.778620][ T8646] syz.9.1903: attempt to access beyond end of device [ 104.778620][ T8646] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.807579][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.829210][ T8639] syz.9.1903: attempt to access beyond end of device [ 104.829210][ T8639] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.865279][ T8646] syz.9.1903: attempt to access beyond end of device [ 104.865279][ T8646] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.878793][ T8639] syz.9.1903: attempt to access beyond end of device [ 104.878793][ T8639] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.925167][ T8639] syz.9.1903: attempt to access beyond end of device [ 104.925167][ T8639] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.947920][ T8653] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1910'. [ 104.981860][ T8639] syz.9.1903: attempt to access beyond end of device [ 104.981860][ T8639] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 105.087734][ T8670] loop9: detected capacity change from 0 to 1024 [ 105.106778][ T8672] loop8: detected capacity change from 0 to 512 [ 105.107017][ T8670] EXT4-fs: Ignoring removed bh option [ 105.121747][ T8672] EXT4-fs: inline encryption not supported [ 105.146806][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 105.155551][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.184318][ T8670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.197964][ T8680] fido_id[8680]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.199174][ T8672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.233903][ T8672] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.305903][ T8347] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.320845][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.441752][ T8705] tipc: New replicast peer: 255.255.255.255 [ 105.448083][ T8705] tipc: Enabled bearer , priority 10 [ 105.591183][ T8720] loop8: detected capacity change from 0 to 1024 [ 105.610451][ T8723] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1938'. [ 105.629937][ T8720] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.641095][ T8720] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.659660][ T8720] JBD2: no valid journal superblock found [ 105.665548][ T8720] EXT4-fs (loop8): Could not load journal inode [ 105.882602][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 105.937518][ T8744] IPVS: stopping master sync thread 8745 ... [ 105.945812][ T8745] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 106.072878][ T8755] loop9: detected capacity change from 0 to 512 [ 106.085766][ T8751] loop7: detected capacity change from 0 to 8192 [ 106.157409][ T8755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.232250][ T8755] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.366748][ T8771] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 106.386949][ T8347] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.403597][ T8771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.457712][ T8771] bond1: (slave veth5): Enslaving as an active interface with a down link [ 106.481235][ T8771] bond1: (slave dummy0): making interface the new active one [ 106.535065][ T8771] dummy0: entered promiscuous mode [ 106.570313][ T8771] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 106.582067][ T2969] tipc: Node number set to 3958626348 [ 106.858324][ T8825] SELinux: failed to load policy [ 107.062285][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1991'. [ 107.491033][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2003'. [ 107.769316][ T23] kernel write not supported for file /902/attr/sockcreate (pid: 23 comm: kworker/1:0) [ 107.800217][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 107.800231][ T29] audit: type=1400 audit(1746753867.268:2387): avc: denied { read } for pid=8899 comm="syz.7.2017" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.841930][ T29] audit: type=1400 audit(1746753867.308:2388): avc: denied { open } for pid=8899 comm="syz.7.2017" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.865875][ T29] audit: type=1400 audit(1746753867.308:2389): avc: denied { ioctl } for pid=8899 comm="syz.7.2017" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.894894][ T29] audit: type=1400 audit(1746753867.338:2390): avc: denied { write } for pid=8905 comm="syz.2.2019" name="vlan0" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.922112][ T8907] @: renamed from vlan0 (while UP) [ 107.985965][ T29] audit: type=1400 audit(1746753867.458:2391): avc: denied { getattr } for pid=8912 comm="syz.2.2021" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.011426][ T23] kernel write not supported for file /421/attr/exec (pid: 23 comm: kworker/1:0) [ 108.121140][ T29] audit: type=1400 audit(1746753867.588:2392): avc: denied { write } for pid=8930 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.294692][ T29] audit: type=1400 audit(1746753867.738:2393): avc: denied { bind } for pid=8951 comm="syz.7.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.351281][ T8949] tipc: Started in network mode [ 108.356420][ T8949] tipc: Node identity 7f000001, cluster identity 4711 [ 108.377649][ T8949] tipc: Enabled bearer , priority 10 [ 108.479705][ T29] audit: type=1400 audit(1746753867.948:2394): avc: denied { write } for pid=8960 comm="syz.9.2041" path="socket:[22445]" dev="sockfs" ino=22445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.570306][ T29] audit: type=1400 audit(1746753868.038:2395): avc: denied { listen } for pid=8963 comm="syz.9.2042" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 108.939102][ T8941] Set syz1 is full, maxelem 65536 reached [ 109.042695][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2055'. [ 109.073147][ T29] audit: type=1400 audit(1746753868.548:2396): avc: denied { bind } for pid=8994 comm="syz.8.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.184120][ T9003] tipc: Enabled bearer , priority 0 [ 109.201625][ T9003] tipc: Disabling bearer [ 109.210149][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2062'. [ 109.313976][ T9019] $Hÿ: renamed from bond0 (while UP) [ 109.337617][ T9019] $Hÿ: entered promiscuous mode [ 109.342791][ T9019] bond_slave_0: entered promiscuous mode [ 109.348620][ T9019] bond_slave_1: entered promiscuous mode [ 109.474725][ T9041] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2077'. [ 109.484849][ T9043] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 109.493950][ T23] tipc: Node number set to 2130706433 [ 109.561598][ T9039] loop8: detected capacity change from 0 to 8192 [ 109.622591][ T9054] 9pnet: p9_errstr2errno: server reported unknown error &ëŸjâáë=‹ùÆ«&B [ 109.942524][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.9.2096 [ 109.991839][ T9091] sch_fq: defrate 0 ignored. [ 110.264409][ T9109] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.749972][ T9165] xt_hashlimit: size too large, truncated to 1048576 [ 110.995237][ T9181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.245932][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.254940][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.149184][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2160'. [ 112.353420][ T9246] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 112.906781][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 112.906836][ T29] audit: type=1400 audit(1746753872.378:2526): avc: denied { read } for pid=9264 comm="syz.8.2176" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.971876][ T29] audit: type=1400 audit(1746753872.408:2527): avc: denied { open } for pid=9264 comm="syz.8.2176" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.995476][ T29] audit: type=1400 audit(1746753872.418:2528): avc: denied { ioctl } for pid=9264 comm="syz.8.2176" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.033733][ T29] audit: type=1400 audit(1746753872.508:2529): avc: denied { ioctl } for pid=9266 comm="syz.5.2177" path="socket:[24855]" dev="sockfs" ino=24855 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.167377][ T29] audit: type=1400 audit(1746753872.638:2530): avc: denied { setopt } for pid=9283 comm="syz.2.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.309954][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2188'. [ 113.385519][ T9304] loop9: detected capacity change from 0 to 512 [ 113.404815][ T9304] EXT4-fs (loop9): 1 orphan inode deleted [ 113.411837][ T9304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.422305][ T4031] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.434558][ T4031] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 1 [ 113.436544][ T9304] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.515804][ T29] audit: type=1400 audit(1746753872.988:2531): avc: denied { append } for pid=9302 comm="syz.9.2192" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.543469][ T9315] loop7: detected capacity change from 0 to 2048 [ 113.566480][ T8347] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.566791][ T9315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.601403][ T29] audit: type=1400 audit(1746753873.068:2532): avc: denied { write } for pid=9314 comm="syz.7.2196" path="/269/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.670807][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 113.727830][ T9315] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 113.740471][ T9315] EXT4-fs (loop7): This should not happen!! Data will be lost [ 113.740471][ T9315] [ 113.750230][ T9315] EXT4-fs (loop7): Total free blocks count 0 [ 113.756676][ T9315] EXT4-fs (loop7): Free/Dirty block details [ 113.762783][ T9315] EXT4-fs (loop7): free_blocks=0 [ 113.767993][ T9315] EXT4-fs (loop7): dirty_blocks=0 [ 113.773139][ T9315] EXT4-fs (loop7): Block reservation details [ 113.779185][ T9315] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 113.849977][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2206'. [ 113.870587][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.872153][ T9342] loop9: detected capacity change from 0 to 512 [ 113.886442][ T9342] EXT4-fs: Ignoring removed orlov option [ 113.892748][ T9342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.901758][ T9342] EXT4-fs (loop9): orphan cleanup on readonly fs [ 113.908782][ T9342] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2206: bg 0: block 248: padding at end of block bitmap is not set [ 113.923620][ T9342] Quota error (device loop9): write_blk: dquota write failed [ 113.931301][ T9342] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 113.941361][ T9342] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.2206: Failed to acquire dquot type 1 [ 113.953485][ T9342] EXT4-fs (loop9): 1 truncate cleaned up [ 113.959886][ T9342] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.976573][ T9342] EXT4-fs: Ignoring removed orlov option [ 113.982606][ T9342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.991236][ T9342] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 114.002560][ T9342] EXT4-fs error (device loop9): __ext4_remount:6738: comm syz.9.2206: Abort forced by user [ 114.013059][ T9342] EXT4-fs (loop9): Remounting filesystem read-only [ 114.019682][ T9342] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.028237][ T9342] ext4 filesystem being remounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.063597][ T8347] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.126973][ T9358] tipc: Enabling of bearer rejected, failed to enable media [ 114.195545][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 114.242672][ T9363] hsr_slave_1 (unregistering): left promiscuous mode [ 114.249600][ T9367] loop7: detected capacity change from 0 to 512 [ 114.273640][ T9365] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.280966][ T9367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.390795][ T9367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.412363][ T9367] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.472124][ T9367] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.527290][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.583934][ T9396] loop7: detected capacity change from 0 to 2048 [ 114.624770][ T9396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.654749][ T6004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.843705][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2243'. [ 114.885393][ T3390] kernel read not supported for file inotify (pid: 3390 comm: kworker/0:4) [ 114.890431][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2243'. [ 115.011652][ T9447] loop9: detected capacity change from 0 to 256 [ 115.124232][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 115.150844][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 115.219501][ T23] kernel read not supported for file inotify (pid: 23 comm: kworker/1:0) [ 115.266585][ T9470] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 115.274972][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.282272][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.293924][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.301065][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.308498][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.315697][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.327252][ T9470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.344051][ T4011] ------------[ cut here ]------------ [ 115.349755][ T4011] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 115.358072][ T4011] WARNING: CPU: 1 PID: 4011 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1f0/0x200 [ 115.368595][ T4011] Modules linked in: [ 115.372587][ T4011] CPU: 1 UID: 0 PID: 4011 Comm: kworker/u8:17 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 115.385431][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 115.395858][ T4011] Workqueue: bond0 bond_mii_monitor [ 115.401103][ T4011] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 115.407431][ T4011] Code: 15 50 d3 86 e8 21 1a 26 fd c6 05 4f f8 87 02 01 90 48 c7 c7 0c 1b 5a 86 48 c7 c6 18 04 46 86 ba 38 00 00 00 e8 01 46 d6 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 115.427265][ T4011] RSP: 0018:ffffc9000135fb70 EFLAGS: 00010246 [ 115.433516][ T4011] RAX: 1cf0cc35f9ddf300 RBX: ffff888118a2b000 RCX: ffff88810469c200 [ 115.441626][ T4011] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 115.449659][ T4011] RBP: 0000000000000000 R08: 0001c9000135f9ef R09: 0000000000000000 [ 115.457936][ T4011] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 115.466179][ T4011] R13: ffffffff85922c70 R14: ffffffff85922c70 R15: 0000000000000000 [ 115.474343][ T4011] FS: 0000000000000000(0000) GS:ffff8882aef50000(0000) knlGS:0000000000000000 [ 115.483354][ T4011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.490638][ T4011] CR2: 00007fbaca166f98 CR3: 0000000145700000 CR4: 00000000003506f0 [ 115.498918][ T4011] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 115.506984][ T4011] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 115.515583][ T4011] Call Trace: [ 115.519079][ T4011] [ 115.522250][ T4011] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 115.528056][ T4011] ethtool_op_get_link+0x15/0x50 [ 115.533068][ T4011] bond_check_dev_link+0x292/0x430 [ 115.538303][ T4011] bond_mii_monitor+0x2da/0x1770 [ 115.543317][ T4011] ? __list_add_valid_or_report+0x38/0xe0 [ 115.549195][ T4011] ? __pwq_activate_work+0x1ad/0x290 [ 115.554700][ T4011] ? _raw_spin_unlock+0x26/0x50 [ 115.559589][ T4011] ? pwq_dec_nr_in_flight+0x5fe/0x6d0 [ 115.565152][ T4011] ? sized_strscpy+0x121/0x1a0 [ 115.569964][ T4011] process_scheduled_works+0x4cb/0x9d0 [ 115.575523][ T4011] worker_thread+0x582/0x770 [ 115.580468][ T4011] kthread+0x486/0x510 [ 115.584826][ T4011] ? finish_task_switch+0xad/0x2b0 [ 115.589978][ T4011] ? __pfx_worker_thread+0x10/0x10 [ 115.595225][ T4011] ? __pfx_kthread+0x10/0x10 [ 115.599867][ T4011] ret_from_fork+0x4b/0x60 [ 115.604365][ T4011] ? __pfx_kthread+0x10/0x10 [ 115.608981][ T4011] ret_from_fork_asm+0x1a/0x30 [ 115.613880][ T4011] [ 115.616906][ T4011] ---[ end trace 0000000000000000 ]--- [ 115.723647][ T9491] netlink: 'syz.7.2271': attribute type 4 has an invalid length. [ 116.019256][ T9511] ALSA: seq fatal error: cannot create timer (-19) [ 116.165542][ T9528] pimreg: entered allmulticast mode [ 116.173060][ T9528] pimreg: left allmulticast mode [ 116.314816][ T9548] -1: renamed from syzkaller0 [ 116.381720][ T9558] pimreg: entered allmulticast mode [ 116.387742][ T9560] random: crng reseeded on system resumption [ 116.389274][ T9558] pimreg: left allmulticast mode [ 117.026044][ T9648] netlink: zone id is out of range [ 117.031418][ T9648] netlink: zone id is out of range [ 117.036920][ T9648] netlink: zone id is out of range [ 117.042227][ T9648] netlink: zone id is out of range [ 117.047435][ T9648] netlink: zone id is out of range [ 117.052695][ T9648] netlink: zone id is out of range [ 117.058045][ T9648] netlink: zone id is out of range [ 117.063344][ T9648] netlink: zone id is out of range [ 117.068819][ T9648] netlink: zone id is out of range [ 117.074129][ T9648] netlink: zone id is out of range [ 117.082964][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.117430][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.159048][ T9654] loop7: detected capacity change from 0 to 1024 [ 117.166103][ T9654] EXT4-fs: Ignoring removed bh option [ 117.171639][ T9654] EXT4-fs: inline encryption not supported [ 117.177766][ T9654] EXT4-fs: Ignoring removed i_version option [ 117.193478][ T9654] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.233295][ T9654] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.2344: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.254089][ T9654] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.2344: Failed to acquire dquot type 0 [ 117.287508][ T9654] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.2344: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.325668][ T9654] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2344: Invalid inode bitmap blk 0 in block_group 0 [ 117.345827][ T4011] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.372312][ T9654] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 117.381090][ T9654] EXT4-fs (loop7): 1 orphan inode deleted [ 117.389099][ T9654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.390001][ T4011] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 0 [ 117.417110][ T9654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.758750][ T4011] dummy0: left promiscuous mode [ 117.912800][ T9700] __nla_validate_parse: 10 callbacks suppressed [ 117.912820][ T9700] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2363'. [ 118.220535][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 118.229636][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 118.576952][ T9706] wireguard0: entered promiscuous mode [ 118.582522][ T9706] wireguard0: entered allmulticast mode [ 118.762374][ T9723] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 118.895327][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 118.895344][ T29] audit: type=1326 audit(1746753878.368:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 118.944236][ T29] audit: type=1326 audit(1746753878.398:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 118.967952][ T29] audit: type=1326 audit(1746753878.398:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 118.991559][ T29] audit: type=1326 audit(1746753878.398:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 119.015229][ T29] audit: type=1326 audit(1746753878.408:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 119.038913][ T29] audit: type=1326 audit(1746753878.408:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 119.062540][ T29] audit: type=1326 audit(1746753878.408:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 119.086223][ T29] audit: type=1326 audit(1746753878.408:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5d2ce969 code=0x7ffc0000 [ 119.124215][ T9740] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.131768][ T9740] smc: net device bond0 erased user defined pnetid SYZ2 [ 119.192602][ T9747] netlink: 'syz.2.2395': attribute type 4 has an invalid length. [ 119.192613][ T29] audit: type=1400 audit(1746753878.658:2629): avc: denied { create } for pid=9746 comm="syz.2.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.308316][ T29] audit: type=1326 audit(1746753878.758:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9739 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5c7e969 code=0x7ffc0000 [ 119.611770][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2402'. [ 119.635969][ T9791] loop7: detected capacity change from 0 to 256 [ 119.653289][ T9791] FAT-fs (loop7): bogus number of directory entries (17407) [ 119.660746][ T9791] FAT-fs (loop7): Can't find a valid FAT filesystem [ 119.802618][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2411'. [ 119.834151][ T9805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.841695][ T9805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.849771][ T9805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.857332][ T9805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.237464][ T9837] can0: slcan on ttyS3. [ 120.333399][ T9837] can0 (unregistered): slcan off ttyS3. [ 120.382269][ T9849] can0: slcan on ttyS3. [ 120.432431][ T9836] can0 (unregistered): slcan off ttyS3. [ 120.642207][ T9886] syzkaller1: entered promiscuous mode [ 120.647735][ T9886] syzkaller1: entered allmulticast mode [ 120.656361][ T9887] loop8: detected capacity change from 0 to 2048 [ 120.694949][ T9887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.706516][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2425'. [ 120.825429][ T9910] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.2431'. [ 120.834782][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2431'. [ 120.889739][ T6068] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.281629][ T9963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2456'. [ 121.420276][ T9980] loop8: detected capacity change from 0 to 128 [ 121.458155][ T9971] ================================================================== [ 121.466333][ T9971] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 121.474992][ T9971] [ 121.477353][ T9971] write to 0xffff8881040fe768 of 8 bytes by task 9977 on cpu 0: [ 121.485006][ T9971] shmem_file_splice_read+0x444/0x5d0 [ 121.490421][ T9971] splice_direct_to_actor+0x26c/0x680 [ 121.495815][ T9971] do_splice_direct+0xda/0x150 [ 121.500609][ T9971] do_sendfile+0x380/0x640 [ 121.505062][ T9971] __x64_sys_sendfile64+0x105/0x150 [ 121.510290][ T9971] x64_sys_call+0xb39/0x2fb0 [ 121.514998][ T9971] do_syscall_64+0xd0/0x1a0 [ 121.519564][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.525470][ T9971] [ 121.527803][ T9971] write to 0xffff8881040fe768 of 8 bytes by task 9971 on cpu 1: [ 121.535448][ T9971] shmem_file_splice_read+0x444/0x5d0 [ 121.541128][ T9971] splice_direct_to_actor+0x26c/0x680 [ 121.546527][ T9971] do_splice_direct+0xda/0x150 [ 121.551309][ T9971] do_sendfile+0x380/0x640 [ 121.555763][ T9971] __x64_sys_sendfile64+0x105/0x150 [ 121.561101][ T9971] x64_sys_call+0xb39/0x2fb0 [ 121.565719][ T9971] do_syscall_64+0xd0/0x1a0 [ 121.570249][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.576170][ T9971] [ 121.578514][ T9971] value changed: 0x0000000000001a8a -> 0x0000000000001a8e [ 121.585727][ T9971] [ 121.588065][ T9971] Reported by Kernel Concurrency Sanitizer on: [ 121.594340][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.2.2460 Tainted: G W 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 121.608356][ T9971] Tainted: [W]=WARN [ 121.612176][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.622332][ T9971] ================================================================== [ 121.634081][ T9981] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 121.642055][ T9981] FAT-fs (loop8): Filesystem has been set read-only [ 121.650352][ T9981] syz.8.2464: attempt to access beyond end of device [ 121.650352][ T9981] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 121.666301][ T9980] syz.8.2464: attempt to access beyond end of device [ 121.666301][ T9980] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.682127][ T9981] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 121.690008][ T9981] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 121.700146][ T9981] syz.8.2464: attempt to access beyond end of device [ 121.700146][ T9981] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.724795][ T9980] syz.8.2464: attempt to access beyond end of device [ 121.724795][ T9980] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.738348][ T9981] syz.8.2464: attempt to access beyond end of device [ 121.738348][ T9981] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.751887][ T9980] syz.8.2464: attempt to access beyond end of device [ 121.751887][ T9980] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.767113][ T9981] syz.8.2464: attempt to access beyond end of device [ 121.767113][ T9981] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.780901][ T9980] syz.8.2464: attempt to access beyond end of device [ 121.780901][ T9980] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.795641][ T9981] syz.8.2464: attempt to access beyond end of device [ 121.795641][ T9981] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128