last executing test programs: 35.235384547s ago: executing program 1 (id=120): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 35.093742847s ago: executing program 1 (id=123): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000030c0)=""/4110, 0x100e) 34.982509266s ago: executing program 1 (id=127): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f0000000080), 0x6, 0x1, &(0x7f00000001c0), 0x0, 0x0) 34.760059265s ago: executing program 1 (id=132): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[], 0x1, 0x1a0, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x200, 0x0) write$UHID_INPUT(r0, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) r2 = gettid() rt_sigqueueinfo(r2, 0x21, 0x0) 34.609565324s ago: executing program 1 (id=138): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="20010000000000000000000000000001000000006c00000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000feffffffffffffff00"/149], 0x126}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 32.559707337s ago: executing program 1 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x10d041, 0x0) write$rfkill(r3, 0x0, 0x0) 32.540099426s ago: executing program 32 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x10d041, 0x0) write$rfkill(r3, 0x0, 0x0) 25.069660247s ago: executing program 3 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r0, r1, &(0x7f0000000100)=0x8dff, 0x100000000010001) 25.050705018s ago: executing program 3 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x14a8}, 0x0, 0x20000000, 0x2}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 25.029871558s ago: executing program 3 (id=308): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r2, r3, 0x6, 0x0) 24.874644617s ago: executing program 3 (id=311): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 24.303106505s ago: executing program 3 (id=322): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) sysfs$2(0x2, 0x9, &(0x7f0000000380)=""/24) 24.195129204s ago: executing program 3 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 24.171370114s ago: executing program 33 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 4.028037966s ago: executing program 2 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r2, 0x0, 0x408cd, 0x3) write$binfmt_elf64(r4, 0x0, 0xfffffe3e) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.031616652s ago: executing program 0 (id=786): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000340)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @local}, "fbe308f4"}}}}, 0x0) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r3, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) 3.017643072s ago: executing program 2 (id=799): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.799165201s ago: executing program 0 (id=802): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) ftruncate(r2, 0xee72) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = fcntl$dupfd(r1, 0x0, r2) r5 = dup3(r0, r4, 0x80000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) 2.675321891s ago: executing program 0 (id=793): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000010201"], 0xfdda}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.35358894s ago: executing program 2 (id=796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) 2.166844719s ago: executing program 0 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r2, 0x0, 0x408cd, 0x3) write$binfmt_elf64(r4, 0x0, 0xfffffe3e) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.806884847s ago: executing program 2 (id=813): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.585776147s ago: executing program 6 (id=808): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) 1.579701357s ago: executing program 2 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x454, &(0x7f0000000940)="$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") r1 = open(0x0, 0x64842, 0x0) pwritev2(r1, 0x0, 0x0, 0x1200, 0x0, 0x3) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.528136976s ago: executing program 6 (id=809): ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) flistxattr(r1, 0x0, 0x0) 1.458818466s ago: executing program 6 (id=810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open$dir(0x0, 0x0, 0x2) mknodat$loop(r3, 0x0, 0x8000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.218171075s ago: executing program 0 (id=812): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="fd0f000043782d487a9f06ba0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000030000000800"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.217867825s ago: executing program 6 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet(0x2, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setreuid(0xee00, 0x0) 938.242704ms ago: executing program 2 (id=821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 906.469344ms ago: executing program 5 (id=824): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xef, 0x47b, &(0x7f0000000f00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r4) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 705.935533ms ago: executing program 5 (id=825): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 658.741633ms ago: executing program 4 (id=826): bpf$MAP_CREATE(0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0x3, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r1, 0xc17a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 581.744883ms ago: executing program 4 (id=827): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x303}, "053200", "1ec2c224d78682576ec2d9e13dad1018", "993161e3"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 544.236333ms ago: executing program 4 (id=828): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x7, 0x5, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x48) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000f5ffffffffff86dd60ecff80009c1101fe8000000000000000000000000000bbff02000000000000000000000000000100004e22009c90"], 0x0) 513.166923ms ago: executing program 4 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r3, r4) 438.375032ms ago: executing program 4 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 432.991952ms ago: executing program 5 (id=831): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/129, 0x81, 0x0, 0x0, 0x0) 395.377702ms ago: executing program 4 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 315.222442ms ago: executing program 0 (id=833): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 247.011731ms ago: executing program 5 (id=834): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 109.310411ms ago: executing program 6 (id=835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 85.106321ms ago: executing program 5 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 42.646111ms ago: executing program 6 (id=837): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) 0s ago: executing program 5 (id=838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) kernel console output (not intermixed with test programs): will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.571183][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.582052][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.589128][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.596311][ T3295] bridge_slave_0: entered allmulticast mode [ 26.602847][ T3295] bridge_slave_0: entered promiscuous mode [ 26.609951][ T3296] team0: Port device team_slave_1 added [ 26.616326][ T3303] team0: Port device team_slave_0 added [ 26.637521][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.644643][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.651857][ T3295] bridge_slave_1: entered allmulticast mode [ 26.658224][ T3295] bridge_slave_1: entered promiscuous mode [ 26.674943][ T3303] team0: Port device team_slave_1 added [ 26.686408][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.693362][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.719312][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.735967][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.745593][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.752614][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.778573][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.790148][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.797148][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.823048][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.838745][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.845721][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.871640][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.883756][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.912771][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.919849][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.945758][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.957323][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.964430][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.990369][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.012699][ T3295] team0: Port device team_slave_0 added [ 27.020628][ T3298] hsr_slave_0: entered promiscuous mode [ 27.026906][ T3298] hsr_slave_1: entered promiscuous mode [ 27.047372][ T3295] team0: Port device team_slave_1 added [ 27.065999][ T3297] hsr_slave_0: entered promiscuous mode [ 27.072160][ T3297] hsr_slave_1: entered promiscuous mode [ 27.078225][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.085866][ T3297] Cannot create hsr debugfs directory [ 27.112100][ T3296] hsr_slave_0: entered promiscuous mode [ 27.119125][ T3296] hsr_slave_1: entered promiscuous mode [ 27.125028][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.132636][ T3296] Cannot create hsr debugfs directory [ 27.143666][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.150692][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.176723][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.201555][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.208577][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.234635][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.247624][ T3303] hsr_slave_0: entered promiscuous mode [ 27.253839][ T3303] hsr_slave_1: entered promiscuous mode [ 27.260150][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.267750][ T3303] Cannot create hsr debugfs directory [ 27.354034][ T3295] hsr_slave_0: entered promiscuous mode [ 27.360296][ T3295] hsr_slave_1: entered promiscuous mode [ 27.366183][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.373737][ T3295] Cannot create hsr debugfs directory [ 27.463334][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.472131][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.487755][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.501512][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.534093][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.548859][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.557606][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.568851][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.593886][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.606552][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.615984][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.629704][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.660674][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.669289][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.687195][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.695830][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.723036][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.731704][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.748180][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.756468][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.772662][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.800063][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.816913][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.823997][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.834828][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.847584][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.854647][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.874329][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.889882][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.897029][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.909380][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.926204][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.933359][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.962193][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.981384][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.988567][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.998259][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.005447][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.031235][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.044144][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.054623][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.082390][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.097211][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.115559][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.122642][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.144179][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.154604][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.171894][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.180521][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.187685][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.218066][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.225243][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.236382][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.253864][ T3295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.264364][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.279050][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.286154][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.303668][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.338953][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.357824][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.414097][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.483796][ T3297] veth0_vlan: entered promiscuous mode [ 28.497453][ T3303] veth0_vlan: entered promiscuous mode [ 28.506945][ T3297] veth1_vlan: entered promiscuous mode [ 28.539509][ T3303] veth1_vlan: entered promiscuous mode [ 28.560742][ T3298] veth0_vlan: entered promiscuous mode [ 28.574657][ T3303] veth0_macvtap: entered promiscuous mode [ 28.586235][ T3297] veth0_macvtap: entered promiscuous mode [ 28.599686][ T3303] veth1_macvtap: entered promiscuous mode [ 28.610130][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.618122][ T3297] veth1_macvtap: entered promiscuous mode [ 28.625403][ T3298] veth1_vlan: entered promiscuous mode [ 28.644225][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.657207][ T3296] veth0_vlan: entered promiscuous mode [ 28.663401][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.673983][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.686706][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.694870][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.703686][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.712467][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.721354][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.734086][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.744653][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.756084][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.764408][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.773171][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.781982][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.790838][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.809187][ T3298] veth0_macvtap: entered promiscuous mode [ 28.816391][ T3296] veth1_vlan: entered promiscuous mode [ 28.828454][ T3298] veth1_macvtap: entered promiscuous mode [ 28.850687][ T3296] veth0_macvtap: entered promiscuous mode [ 28.857266][ T3295] veth0_vlan: entered promiscuous mode [ 28.873276][ T3296] veth1_macvtap: entered promiscuous mode [ 28.884515][ T3295] veth1_vlan: entered promiscuous mode [ 28.901054][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.911677][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.921584][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.932131][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.944821][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.947314][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.953487][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.977227][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.987073][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.997547][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.008853][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.016798][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.027262][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.037296][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.047734][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.057557][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.067985][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.078759][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.109336][ T3295] veth0_macvtap: entered promiscuous mode [ 29.141629][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.150453][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.159656][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162576][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 29.162592][ T29] audit: type=1400 audit(1736466752.716:131): avc: denied { create } for pid=3441 comm="syz.2.6" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.168669][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.202602][ T29] audit: type=1400 audit(1736466752.756:132): avc: denied { write } for pid=3441 comm="syz.2.6" name="file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.225788][ T29] audit: type=1400 audit(1736466752.756:133): avc: denied { open } for pid=3441 comm="syz.2.6" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.257027][ T3295] veth1_macvtap: entered promiscuous mode [ 29.267207][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.277697][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.287559][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.298077][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.307954][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.318395][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.328259][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.338725][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.349903][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.357751][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.368325][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.378387][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.388853][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.398705][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.409448][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.420447][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.429969][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.438732][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.447512][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.456325][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.468459][ T29] audit: type=1400 audit(1736466753.016:134): avc: denied { ioctl } for pid=3441 comm="syz.2.6" path="/1/file0" dev="tmpfs" ino=22 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.504740][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.515518][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.523668][ T29] audit: type=1400 audit(1736466753.076:135): avc: denied { unlink } for pid=3297 comm="syz-executor" name="file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.525411][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.558692][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.568924][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.579524][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.589404][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.591934][ T29] audit: type=1400 audit(1736466753.146:136): avc: denied { create } for pid=3446 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.600003][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.601521][ T3447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.622239][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.646543][ T29] audit: type=1400 audit(1736466753.206:137): avc: denied { create } for pid=3444 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.683731][ T3295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.692675][ T3295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.701524][ T3295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.710260][ T3295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.713483][ T29] audit: type=1400 audit(1736466753.236:138): avc: denied { connect } for pid=3444 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.738595][ T29] audit: type=1400 audit(1736466753.236:139): avc: denied { write } for pid=3444 comm="syz.3.7" path="socket:[3921]" dev="sockfs" ino=3921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.761762][ T29] audit: type=1400 audit(1736466753.276:140): avc: denied { bind } for pid=3446 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.800090][ T3454] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 29.806664][ T3454] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 29.814406][ T3454] vhci_hcd vhci_hcd.0: Device attached [ 29.856872][ T3455] vhci_hcd: connection closed [ 29.857044][ T3408] vhci_hcd: stop threads [ 29.866051][ T3408] vhci_hcd: release socket [ 29.870470][ T3408] vhci_hcd: disconnect device [ 29.887526][ T3465] loop0: detected capacity change from 0 to 256 [ 29.894122][ T3465] ======================================================= [ 29.894122][ T3465] WARNING: The mand mount option has been deprecated and [ 29.894122][ T3465] and is ignored by this kernel. Remove the mand [ 29.894122][ T3465] option from the mount to silence this warning. [ 29.894122][ T3465] ======================================================= [ 29.906872][ T3464] loop2: detected capacity change from 0 to 128 [ 29.949427][ T3464] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 29.976542][ T3465] FAT-fs (loop0): Directory bread(block 64) failed [ 30.002835][ T3465] FAT-fs (loop0): Directory bread(block 65) failed [ 30.012961][ T3465] FAT-fs (loop0): Directory bread(block 66) failed [ 30.019830][ T3465] FAT-fs (loop0): Directory bread(block 67) failed [ 30.026808][ T3470] syz.2.11: attempt to access beyond end of device [ 30.026808][ T3470] loop2: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 30.028011][ T3465] FAT-fs (loop0): Directory bread(block 68) failed [ 30.040074][ T3470] Buffer I/O error on dev loop2, logical block 216, lost async page write [ 30.055220][ T3470] syz.2.11: attempt to access beyond end of device [ 30.055220][ T3470] loop2: rw=2049, sector=217, nr_sectors = 1 limit=128 [ 30.055254][ T3470] Buffer I/O error on dev loop2, logical block 217, lost async page write [ 30.077308][ T3465] FAT-fs (loop0): Directory bread(block 69) failed [ 30.084350][ T3465] FAT-fs (loop0): Directory bread(block 70) failed [ 30.096801][ T3465] FAT-fs (loop0): Directory bread(block 71) failed [ 30.105522][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.109266][ T3465] FAT-fs (loop0): Directory bread(block 72) failed [ 30.122549][ T3465] FAT-fs (loop0): Directory bread(block 73) failed [ 30.178887][ T28] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 30.189518][ T3474] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 30.200639][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.208739][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.223369][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.230860][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.274961][ T3476] tipc: Started in network mode [ 30.280054][ T3476] tipc: Node identity 66719f459732, cluster identity 4711 [ 30.287423][ T3476] tipc: Enabled bearer , priority 7 [ 30.295851][ T3476] ªªªªªª: renamed from syzkaller0 [ 30.303891][ T3476] tipc: Disabling bearer [ 30.356071][ C0] hrtimer: interrupt took 33430 ns [ 30.407993][ T3484] loop3: detected capacity change from 0 to 512 [ 30.430612][ T3484] EXT4-fs: Ignoring removed oldalloc option [ 30.448590][ T3484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.461771][ T3484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.478570][ T3484] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 30.496433][ T3484] EXT4-fs (loop3): 1 truncate cleaned up [ 30.505804][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.585483][ T3484] loop3: detected capacity change from 512 to 64 [ 30.602498][ T3484] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 30.617409][ T3484] EXT4-fs (loop3): pa ffff8881068e1070: logic 0, phys. 65, len 64 [ 30.625379][ T3484] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 30.659077][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 30.672691][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.792769][ T3496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22'. [ 30.890105][ T3508] syz.0.28[3508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.890176][ T3508] syz.0.28[3508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.902300][ T3508] syz.0.28[3508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.916042][ T3508] Zero length message leads to an empty skb [ 30.986365][ T3512] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 31.044781][ T3515] netlink: 'syz.3.29': attribute type 10 has an invalid length. [ 31.052883][ T3515] syz_tun: entered promiscuous mode [ 31.062229][ T3515] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 31.122408][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.215669][ T3526] loop0: detected capacity change from 0 to 512 [ 31.228596][ T3526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.242409][ T3526] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.270149][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.282030][ T3519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.344230][ T3533] 9pnet: p9_errstr2errno: server reported unknown error [ 31.411819][ T3534] dccp_close: ABORT with 36 bytes unread [ 31.456674][ T3541] syz.3.42[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.456751][ T3541] syz.3.42[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.468529][ T3541] syz.3.42[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.558272][ T3551] netlink: 'syz.3.47': attribute type 7 has an invalid length. [ 31.577211][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 31.614878][ T3555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 31.653494][ T3558] loop0: detected capacity change from 0 to 1024 [ 31.690076][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.709913][ T3558] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 31.733734][ T3558] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 31.746082][ T3558] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.746082][ T3558] [ 31.755785][ T3558] EXT4-fs (loop0): Total free blocks count 0 [ 31.761787][ T3558] EXT4-fs (loop0): Free/Dirty block details [ 31.767801][ T3558] EXT4-fs (loop0): free_blocks=68451041280 [ 31.773634][ T3558] EXT4-fs (loop0): dirty_blocks=16 [ 31.778790][ T3558] EXT4-fs (loop0): Block reservation details [ 31.784853][ T3558] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 31.794740][ T3558] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 31.823980][ T3567] loop2: detected capacity change from 0 to 128 [ 31.837386][ T3558] syz.0.50 (3558) used greatest stack depth: 9976 bytes left [ 31.961774][ T3575] loop3: detected capacity change from 0 to 2048 [ 32.035519][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.096496][ T3579] bond1: entered promiscuous mode [ 32.101637][ T3579] bond1: entered allmulticast mode [ 32.107934][ T3579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.116634][ T3582] netlink: 96 bytes leftover after parsing attributes in process `syz.3.60'. [ 32.166480][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.252836][ T3469] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.265037][ T3469] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.279789][ T3469] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.299658][ T3595] loop3: detected capacity change from 0 to 512 [ 32.319976][ T3469] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.490846][ T3611] loop2: detected capacity change from 0 to 512 [ 32.518695][ T3611] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 32.547709][ T3611] EXT4-fs (loop2): invalid journal inode [ 32.713663][ T3631] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 32.728967][ T3635] loop1: detected capacity change from 0 to 128 [ 32.832100][ T3642] IPv4: Oversized IP packet from 127.202.26.0 [ 32.969164][ T3656] syz.3.92[3656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.969349][ T3656] syz.3.92[3656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.984617][ T3656] syz.3.92[3656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.362449][ T3670] netlink: 'syz.4.99': attribute type 11 has an invalid length. [ 33.466494][ T3676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.482066][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 33.528228][ T3676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.554545][ T3683] loop1: detected capacity change from 0 to 2048 [ 33.589274][ T3676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.602487][ T3683] loop1: p1 < > p4 [ 33.641169][ T3683] loop1: p4 size 8388608 extends beyond EOD, truncated [ 33.732023][ T3676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.757090][ T3700] pim6reg1: entered promiscuous mode [ 33.760412][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.762440][ T3700] pim6reg1: entered allmulticast mode [ 33.773610][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 33.852041][ T3713] syz.2.113[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.859907][ T3676] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.883572][ T3715] loop2: detected capacity change from 0 to 512 [ 33.897624][ T3676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.909594][ T3676] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.937008][ T3676] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.969112][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.986761][ T3719] loop0: detected capacity change from 0 to 764 [ 33.993646][ T3715] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.064653][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.098108][ T3731] loop2: detected capacity change from 0 to 512 [ 34.108309][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 34.124156][ T3731] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.121: corrupted in-inode xattr: invalid ea_ino [ 34.141231][ T3731] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.121: couldn't read orphan inode 15 (err -117) [ 34.153932][ T3731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.203617][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 34.203631][ T29] audit: type=1400 audit(1736466757.746:441): avc: denied { map } for pid=3728 comm="syz.2.121" path="/18/file0/file0/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.233435][ T29] audit: type=1400 audit(1736466757.746:442): avc: denied { execute } for pid=3728 comm="syz.2.121" path="/18/file0/file0/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.259568][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.314633][ T29] audit: type=1326 audit(1736466757.866:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.338343][ T29] audit: type=1326 audit(1736466757.866:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.361963][ T29] audit: type=1326 audit(1736466757.866:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.385267][ T29] audit: type=1326 audit(1736466757.866:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.409021][ T29] audit: type=1326 audit(1736466757.866:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.432789][ T29] audit: type=1326 audit(1736466757.866:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.456216][ T29] audit: type=1326 audit(1736466757.866:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.479772][ T29] audit: type=1326 audit(1736466757.866:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa020fb5d29 code=0x7ffc0000 [ 34.577542][ T3755] loop1: detected capacity change from 0 to 128 [ 34.612147][ T3765] loop2: detected capacity change from 0 to 512 [ 34.665585][ T3765] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.679642][ T3765] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.135: bg 0: block 248: padding at end of block bitmap is not set [ 34.738938][ T3765] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.135: Failed to acquire dquot type 1 [ 34.751145][ T3765] EXT4-fs (loop2): 1 truncate cleaned up [ 34.767530][ T3765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.783999][ T3765] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 34.822478][ T3765] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 34.846799][ T3765] syz.2.135 (3765) used greatest stack depth: 9576 bytes left [ 34.860765][ T3779] pim6reg1: entered promiscuous mode [ 34.866160][ T3779] pim6reg1: entered allmulticast mode [ 34.875814][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.099294][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 35.108269][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 35.110609][ T3815] loop3: detected capacity change from 0 to 1024 [ 35.147743][ T3820] IPv4: Oversized IP packet from 127.202.26.0 [ 35.151493][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.158695][ T3822] mmap: syz.2.154 (3822) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.333601][ T3836] capability: warning: `syz.2.161' uses deprecated v2 capabilities in a way that may be insecure [ 35.616372][ T3846] loop4: detected capacity change from 0 to 128 [ 35.645766][ T3846] syz.4.164: attempt to access beyond end of device [ 35.645766][ T3846] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.668733][ T3845] syz.4.164: attempt to access beyond end of device [ 35.668733][ T3845] loop4: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 35.682968][ T3845] syz.4.164: attempt to access beyond end of device [ 35.682968][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.696095][ T3845] syz.4.164: attempt to access beyond end of device [ 35.696095][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.709291][ T3845] syz.4.164: attempt to access beyond end of device [ 35.709291][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.722829][ T3845] syz.4.164: attempt to access beyond end of device [ 35.722829][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.736004][ T3845] syz.4.164: attempt to access beyond end of device [ 35.736004][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.749255][ T3845] syz.4.164: attempt to access beyond end of device [ 35.749255][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.762572][ T3845] syz.4.164: attempt to access beyond end of device [ 35.762572][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.775866][ T3845] syz.4.164: attempt to access beyond end of device [ 35.775866][ T3845] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 35.943901][ T3859] loop4: detected capacity change from 0 to 128 [ 36.313762][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.333434][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.396219][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.591606][ T3875] dccp_xmit_packet: Payload too large (65475) for featneg. [ 36.602639][ T3875] loop3: detected capacity change from 0 to 512 [ 36.609456][ T3875] journal_path: Lookup failure for './file0' [ 36.615496][ T3875] EXT4-fs: error: could not find journal device path [ 36.682723][ T3408] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.729254][ T3408] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.808359][ T3408] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.866937][ T3408] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.906989][ T3900] syzkaller0: entered allmulticast mode [ 36.921636][ T3900] syzkaller0 (unregistering): left allmulticast mode [ 36.986857][ T3408] bridge_slave_1: left allmulticast mode [ 36.992582][ T3408] bridge_slave_1: left promiscuous mode [ 36.998299][ T3408] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.006324][ T3408] bridge_slave_0: left allmulticast mode [ 37.012002][ T3408] bridge_slave_0: left promiscuous mode [ 37.017780][ T3408] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.127375][ T3408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.138101][ T3408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.152908][ T3408] bond0 (unregistering): Released all slaves [ 37.212184][ T3408] hsr_slave_0: left promiscuous mode [ 37.218733][ T3408] hsr_slave_1: left promiscuous mode [ 37.224911][ T3408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.232450][ T3408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.241469][ T3408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.248962][ T3408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.259702][ T3408] veth1_macvtap: left promiscuous mode [ 37.265276][ T3408] veth0_macvtap: left promiscuous mode [ 37.270838][ T3408] veth1_vlan: left promiscuous mode [ 37.276122][ T3408] veth0_vlan: left promiscuous mode [ 37.386891][ T3408] team0 (unregistering): Port device team_slave_1 removed [ 37.406707][ T3408] team0 (unregistering): Port device team_slave_0 removed [ 37.509550][ T3925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 37.546128][ T3890] chnl_net:caif_netlink_parms(): no params data found [ 37.743391][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.750728][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.801214][ T3942] program syz.2.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.812192][ T3890] bridge_slave_0: entered allmulticast mode [ 37.835624][ T3890] bridge_slave_0: entered promiscuous mode [ 37.858053][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.865279][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.886012][ T3890] bridge_slave_1: entered allmulticast mode [ 37.899525][ T3890] bridge_slave_1: entered promiscuous mode [ 38.005349][ T3890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.026612][ T3890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.155984][ T3890] team0: Port device team_slave_0 added [ 38.162891][ T3890] team0: Port device team_slave_1 added [ 38.224461][ T3890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.231542][ T3890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.257492][ T3890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.280542][ T3890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.287552][ T3890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.294533][ T3956] loop0: detected capacity change from 0 to 2048 [ 38.313484][ T3890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.350279][ T3890] hsr_slave_0: entered promiscuous mode [ 38.371986][ T3959] loop3: detected capacity change from 0 to 2048 [ 38.379156][ T3890] hsr_slave_1: entered promiscuous mode [ 38.380095][ T3956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.396976][ T3890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.406520][ T3890] Cannot create hsr debugfs directory [ 38.419048][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.443812][ T3956] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.479185][ T3959] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 38.491579][ T3959] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.491579][ T3959] [ 38.501325][ T3959] EXT4-fs (loop3): Total free blocks count 0 [ 38.507425][ T3959] EXT4-fs (loop3): Free/Dirty block details [ 38.513412][ T3959] EXT4-fs (loop3): free_blocks=0 [ 38.518590][ T3959] EXT4-fs (loop3): dirty_blocks=0 [ 38.523629][ T3959] EXT4-fs (loop3): Block reservation details [ 38.529675][ T3959] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 38.555462][ T3956] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.202: bg 0: block 345: padding at end of block bitmap is not set [ 38.581100][ T3956] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 38.593749][ T3956] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.593749][ T3956] [ 38.643507][ T3890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.651772][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.662143][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.663903][ T3890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.690033][ T3890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.705916][ T3890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.734058][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.741211][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.774572][ T3890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.785373][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.805144][ T3890] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.816767][ T3408] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.823874][ T3408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.842278][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.849380][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.913297][ T3976] netlink: 'syz.3.208': attribute type 13 has an invalid length. [ 38.936385][ T3980] loop4: detected capacity change from 0 to 128 [ 38.955804][ T3980] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.968400][ T3980] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.016601][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.026168][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.033347][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.073433][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.083489][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.118070][ T3976] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.127266][ T3976] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.136409][ T3976] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.145570][ T3976] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.169626][ T3890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.267459][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 39.267478][ T29] audit: type=1326 audit(1736466762.826:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.303572][ T29] audit: type=1326 audit(1736466762.826:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.326894][ T29] audit: type=1326 audit(1736466762.856:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.350287][ T29] audit: type=1326 audit(1736466762.856:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.373689][ T29] audit: type=1326 audit(1736466762.856:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.397399][ T29] audit: type=1326 audit(1736466762.856:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.420761][ T29] audit: type=1326 audit(1736466762.856:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.444259][ T29] audit: type=1326 audit(1736466762.856:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.467695][ T29] audit: type=1326 audit(1736466762.856:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.491219][ T29] audit: type=1326 audit(1736466762.856:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 39.555044][ T3890] veth0_vlan: entered promiscuous mode [ 39.563326][ T3890] veth1_vlan: entered promiscuous mode [ 39.575613][ T3890] veth0_macvtap: entered promiscuous mode [ 39.582939][ T3890] veth1_macvtap: entered promiscuous mode [ 39.592778][ T3890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.603318][ T3890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.613187][ T3890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.623623][ T3890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.634186][ T3890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.650902][ T3890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.661509][ T3890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.671403][ T3890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.681910][ T3890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.693756][ T3890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.693847][ T4014] serio: Serial port ttyS3 [ 39.702439][ T3890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.714339][ T3890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.723201][ T3890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.731953][ T3890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.798331][ T4017] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.944902][ T4035] netlink: 'syz.5.223': attribute type 1 has an invalid length. [ 40.131908][ T4045] loop5: detected capacity change from 0 to 2048 [ 40.195765][ T4045] Alternate GPT is invalid, using primary GPT. [ 40.202265][ T4045] loop5: p2 p3 p7 [ 40.261817][ T4051] loop0: detected capacity change from 0 to 512 [ 40.282820][ T4051] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.230: corrupted in-inode xattr: invalid ea_ino [ 40.299465][ T4051] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.230: couldn't read orphan inode 15 (err -117) [ 40.312231][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.349967][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.519436][ T4068] loop3: detected capacity change from 0 to 1024 [ 40.549541][ T4068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.556562][ T4075] loop0: detected capacity change from 0 to 256 [ 40.601456][ T4075] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 40.611627][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.634313][ T4077] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.642838][ T4077] netlink: 116 bytes leftover after parsing attributes in process `syz.3.240'. [ 40.659621][ T4077] smc: net device bond0 erased user defined pnetid SYZ0 [ 40.710985][ T4079] xt_hashlimit: max too large, truncated to 1048576 [ 40.724510][ T4079] No such timeout policy "syz1" [ 40.787874][ T4082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.243'. [ 41.097569][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 41.157943][ T4107] netlink: 64 bytes leftover after parsing attributes in process `syz.5.252'. [ 41.313833][ T4117] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 41.402593][ T4119] loop4: detected capacity change from 0 to 8192 [ 41.411821][ T4119] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.929125][ T4136] loop2: detected capacity change from 0 to 128 [ 41.937717][ T4136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 41.988794][ T4136] bio_check_eod: 317 callbacks suppressed [ 41.988814][ T4136] syz.2.264: attempt to access beyond end of device [ 41.988814][ T4136] loop2: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 42.008052][ T4136] Buffer I/O error on dev loop2, logical block 216, lost async page write [ 42.023543][ T4136] syz.2.264: attempt to access beyond end of device [ 42.023543][ T4136] loop2: rw=2049, sector=217, nr_sectors = 1 limit=128 [ 42.036950][ T4136] Buffer I/O error on dev loop2, logical block 217, lost async page write [ 42.139442][ T3418] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 42.657966][ T4174] tipc: Started in network mode [ 42.662934][ T4174] tipc: Node identity 8ed141e9ea51, cluster identity 4711 [ 42.670181][ T4174] tipc: Enabled bearer , priority 7 [ 42.677932][ T4174] ªªªªªª: renamed from syzkaller0 [ 42.684414][ T4174] tipc: Disabling bearer [ 42.815529][ T4178] loop3: detected capacity change from 0 to 512 [ 42.823400][ T4178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 42.832213][ T4178] EXT4-fs (loop3): 1 truncate cleaned up [ 42.838381][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.004696][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.054873][ T4182] loop3: detected capacity change from 0 to 8192 [ 43.067801][ T4182] syz.3.282: attempt to access beyond end of device [ 43.067801][ T4182] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.081231][ T4182] Buffer I/O error on dev loop3, logical block 57847, async page read [ 43.090435][ T4182] syz.3.282: attempt to access beyond end of device [ 43.090435][ T4182] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.103878][ T4182] Buffer I/O error on dev loop3, logical block 57847, async page read [ 43.113528][ T4182] syz.3.282: attempt to access beyond end of device [ 43.113528][ T4182] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.126943][ T4182] Buffer I/O error on dev loop3, logical block 57847, async page read [ 43.135944][ T4182] syz.3.282: attempt to access beyond end of device [ 43.135944][ T4182] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.149463][ T4182] Buffer I/O error on dev loop3, logical block 57847, async page read [ 43.201652][ T4190] bpf_get_probe_write_proto: 11 callbacks suppressed [ 43.201671][ T4190] syz.3.284[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.208769][ T4190] syz.3.284[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.220728][ T4190] syz.3.284[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.337378][ T4207] syzkaller0: entered allmulticast mode [ 43.358832][ T4207] syzkaller0 (unregistering): left allmulticast mode [ 43.573024][ T11] kworker/u8:0: attempt to access beyond end of device [ 43.573024][ T11] loop0: rw=1, sector=256, nr_sectors = 4 limit=256 [ 43.586456][ T11] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 43.594963][ T11] kworker/u8:0: attempt to access beyond end of device [ 43.594963][ T11] loop0: rw=1, sector=260, nr_sectors = 4 limit=256 [ 43.608327][ T11] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 43.630098][ T4235] loop0: detected capacity change from 0 to 256 [ 43.644708][ T4235] FAT-fs (loop0): IO charset euc-jp not found [ 44.291596][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 44.291614][ T29] audit: type=1326 audit(1736466767.846:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.321354][ T29] audit: type=1326 audit(1736466767.846:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.345106][ T29] audit: type=1326 audit(1736466767.846:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.368606][ T29] audit: type=1326 audit(1736466767.846:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.392069][ T29] audit: type=1326 audit(1736466767.846:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.415324][ T29] audit: type=1326 audit(1736466767.846:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.438911][ T29] audit: type=1326 audit(1736466767.846:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.447623][ T4251] loop3: detected capacity change from 0 to 512 [ 44.462177][ T29] audit: type=1326 audit(1736466767.846:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.492124][ T29] audit: type=1326 audit(1736466767.846:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.515806][ T29] audit: type=1326 audit(1736466767.846:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbc67575d29 code=0x7ffc0000 [ 44.559247][ T4251] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.311: casefold flag without casefold feature [ 44.572160][ T4251] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.311: couldn't read orphan inode 15 (err -117) [ 44.588168][ T4251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.735434][ T4251] loop3: detected capacity change from 512 to 64 [ 44.744970][ T4251] syz.3.311: attempt to access beyond end of device [ 44.744970][ T4251] loop3: rw=2051, sector=256, nr_sectors = 2 limit=64 [ 44.773752][ T4251] EXT4-fs (loop3): discard request in group:0 block:127 count:1 failed with -5 [ 44.775302][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.316'. [ 44.792662][ T4251] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: IO failure [ 44.827945][ T4251] syz.3.311: attempt to access beyond end of device [ 44.827945][ T4251] loop3: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 44.856205][ T4251] EXT4-fs (loop3): discard request in group:0 block:254 count:1 failed with -5 [ 44.886456][ T4275] team0: Device ipvlan2 failed to register rx_handler [ 44.905535][ T4251] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: IO failure [ 44.925981][ T4251] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 19: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 44.940776][ T4251] EXT4-fs (loop3): pa ffff88810695b230: logic 0, phys. 65, len 64 [ 44.948677][ T4251] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 44.978791][ T3303] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 45.016663][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.034666][ T3303] bond0: (slave syz_tun): Releasing backup interface [ 45.188771][ T4299] program syz.4.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.229506][ T4304] tipc: New replicast peer: 255.255.255.255 [ 45.235884][ T4304] tipc: Enabled bearer , priority 10 [ 45.312134][ T4313] syz.4.336[4313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.312294][ T4313] syz.4.336[4313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.323862][ T4313] syz.4.336[4313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.355711][ T4313] netlink: 96 bytes leftover after parsing attributes in process `syz.4.336'. [ 45.387227][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 45.425883][ T4329] loop0: detected capacity change from 0 to 164 [ 45.466876][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.474128][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.495273][ T4297] bridge_slave_0: entered allmulticast mode [ 45.501786][ T4297] bridge_slave_0: entered promiscuous mode [ 45.511598][ T4337] loop2: detected capacity change from 0 to 512 [ 45.516068][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.524915][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.547262][ T4337] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.556249][ T4337] EXT4-fs (loop2): invalid journal inode [ 45.561965][ T4337] EXT4-fs (loop2): can't get journal size [ 45.569008][ T4297] bridge_slave_1: entered allmulticast mode [ 45.575539][ T4297] bridge_slave_1: entered promiscuous mode [ 45.578118][ T4337] EXT4-fs (loop2): 1 truncate cleaned up [ 45.604070][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.604478][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.614739][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.641584][ T11] bridge_slave_1: left allmulticast mode [ 45.647333][ T11] bridge_slave_1: left promiscuous mode [ 45.653112][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.679621][ T11] bridge_slave_0: left allmulticast mode [ 45.685381][ T11] bridge_slave_0: left promiscuous mode [ 45.691096][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.725295][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.750641][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.770978][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.781316][ T11] bond0 (unregistering): Released all slaves [ 45.804614][ T4350] loop2: detected capacity change from 0 to 512 [ 45.818884][ T4350] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 45.819495][ T4297] team0: Port device team_slave_0 added [ 45.832917][ T4346] loop2: detected capacity change from 0 to 256 [ 45.841095][ T11] tipc: Left network mode [ 45.848846][ T4297] team0: Port device team_slave_1 added [ 45.850755][ T4346] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 45.856023][ T4352] syz.5.349[4352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.864850][ T11] hsr_slave_0: left promiscuous mode [ 45.865822][ T4352] syz.5.349[4352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.881632][ T4346] Process accounting resumed [ 45.881901][ T4352] syz.5.349[4352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.897852][ T11] hsr_slave_1: left promiscuous mode [ 45.915001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.922811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.967228][ T11] team0 (unregistering): Port device team_slave_1 removed [ 45.978361][ T11] team0 (unregistering): Port device team_slave_0 removed [ 46.033772][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.040815][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.066787][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.082177][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.089250][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.115453][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.166363][ T4297] hsr_slave_0: entered promiscuous mode [ 46.182455][ T4297] hsr_slave_1: entered promiscuous mode [ 46.184234][ T4368] loop5: detected capacity change from 0 to 1024 [ 46.194916][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.202708][ T4297] Cannot create hsr debugfs directory [ 46.214716][ T4370] xfrm1: entered allmulticast mode [ 46.223401][ T4368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.228576][ T4372] loop2: detected capacity change from 0 to 1024 [ 46.242972][ T4372] EXT4-fs: Ignoring removed orlov option [ 46.250305][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 46.267363][ T4372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.309343][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.323364][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.355255][ T1068] tipc: Node number set to 4047740741 [ 46.382400][ T4384] wg2: entered promiscuous mode [ 46.387451][ T4384] wg2: entered allmulticast mode [ 46.393227][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 46.406818][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 46.416599][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 46.447314][ T4297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.456623][ T4297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.487701][ T4297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.502291][ T4297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.513833][ T4397] loop5: detected capacity change from 0 to 512 [ 46.525626][ T4397] EXT4-fs: Ignoring removed oldalloc option [ 46.546337][ T4397] /dev/loop5: Can't open blockdev [ 46.560509][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.570771][ T4400] capability: warning: `syz.4.369' uses 32-bit capabilities (legacy support in use) [ 46.596519][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.612087][ T3408] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.619201][ T3408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.629549][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.636639][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.816403][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.842483][ T4414] loop0: detected capacity change from 0 to 512 [ 46.915836][ T4414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.941147][ T4414] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.373: invalid block [ 46.954701][ T4414] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.373: invalid indirect mapped block 4294967295 (level 1) [ 46.973618][ T4414] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.373: invalid indirect mapped block 4294967295 (level 1) [ 47.032064][ T4414] EXT4-fs (loop0): 2 truncates cleaned up [ 47.039330][ T4414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.081576][ T4397] Set syz1 is full, maxelem 65536 reached [ 47.095787][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.173739][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 47.182891][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 47.198524][ T4427] wireguard0: entered promiscuous mode [ 47.204115][ T4427] wireguard0: entered allmulticast mode [ 47.237719][ T4297] veth0_vlan: entered promiscuous mode [ 47.241670][ T4437] loop0: detected capacity change from 0 to 512 [ 47.245988][ T4297] veth1_vlan: entered promiscuous mode [ 47.256153][ T4437] EXT4-fs: Ignoring removed oldalloc option [ 47.272740][ T4297] veth0_macvtap: entered promiscuous mode [ 47.278853][ T4437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.378: Parent and EA inode have the same ino 15 [ 47.280292][ T4297] veth1_macvtap: entered promiscuous mode [ 47.302829][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.309921][ T4437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.378: Parent and EA inode have the same ino 15 [ 47.313447][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.335870][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.343337][ T4437] EXT4-fs (loop0): 1 orphan inode deleted [ 47.346482][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.346508][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.353369][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.362110][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.363639][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.405652][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.416370][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.419254][ T4443] loop2: detected capacity change from 0 to 2048 [ 47.426249][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.443144][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.453046][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.463696][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.474812][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.487062][ T4297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.495853][ T4297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.504655][ T4297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.513538][ T4297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.540564][ T4447] loop4: detected capacity change from 0 to 1024 [ 47.547945][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.549939][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.581251][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.602276][ T4442] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 47.614833][ T4442] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.614833][ T4442] [ 47.624621][ T4442] EXT4-fs (loop2): Total free blocks count 0 [ 47.630713][ T4442] EXT4-fs (loop2): Free/Dirty block details [ 47.636733][ T4442] EXT4-fs (loop2): free_blocks=0 [ 47.641684][ T4442] EXT4-fs (loop2): dirty_blocks=0 [ 47.646778][ T4442] EXT4-fs (loop2): Block reservation details [ 47.652816][ T4442] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 47.676174][ T4456] loop0: detected capacity change from 0 to 8192 [ 47.684512][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.708650][ T4459] program syz.6.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.786566][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.802092][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 47.811086][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 47.822725][ T4465] tipc: Started in network mode [ 47.827791][ T4465] tipc: Node identity ac14140f, cluster identity 4711 [ 47.832974][ T4456] syz.0.382: attempt to access beyond end of device [ 47.832974][ T4456] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.834766][ T4465] tipc: New replicast peer: 255.255.255.255 [ 47.848031][ T4456] Buffer I/O error on dev loop0, logical block 57847, async page read [ 47.849350][ T4456] syz.0.382: attempt to access beyond end of device [ 47.849350][ T4456] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.854128][ T4465] tipc: Enabled bearer , priority 10 [ 47.862211][ T4456] Buffer I/O error on dev loop0, logical block 57847, async page read [ 47.897979][ T4456] syz.0.382: attempt to access beyond end of device [ 47.897979][ T4456] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.911467][ T4456] Buffer I/O error on dev loop0, logical block 57847, async page read [ 47.920606][ T4456] syz.0.382: attempt to access beyond end of device [ 47.920606][ T4456] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.933974][ T4456] Buffer I/O error on dev loop0, logical block 57847, async page read [ 47.942297][ T4467] wireguard0: entered promiscuous mode [ 47.947842][ T4467] wireguard0: entered allmulticast mode [ 48.129655][ T4481] loop6: detected capacity change from 0 to 512 [ 48.151028][ T4481] EXT4-fs: Ignoring removed oldalloc option [ 48.213731][ T4481] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.392: Parent and EA inode have the same ino 15 [ 48.293758][ T4481] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.392: Parent and EA inode have the same ino 15 [ 48.326334][ T4481] EXT4-fs (loop6): 1 orphan inode deleted [ 48.347973][ T4481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.467358][ T4297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.613953][ T4506] loop0: detected capacity change from 0 to 512 [ 48.644530][ T4506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.677969][ T4506] EXT4-fs (loop0): 1 truncate cleaned up [ 48.683990][ T4506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.758155][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.965122][ T3375] tipc: Node number set to 2886997007 [ 49.143653][ T4527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.161465][ T4527] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.410940][ T4537] gretap0: entered promiscuous mode [ 49.417751][ T4537] gretap0: left promiscuous mode [ 49.462286][ T29] kauditd_printk_skb: 986 callbacks suppressed [ 49.462305][ T29] audit: type=1400 audit(1736466773.016:2220): avc: denied { write } for pid=4536 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.503711][ T4541] bridge0: entered promiscuous mode [ 49.509161][ T4541] macvlan2: entered promiscuous mode [ 49.516015][ T4541] bridge0: port 3(macvlan2) entered blocking state [ 49.522549][ T4541] bridge0: port 3(macvlan2) entered disabled state [ 49.529312][ T4541] macvlan2: entered allmulticast mode [ 49.534806][ T4541] bridge0: entered allmulticast mode [ 49.540665][ T4541] macvlan2: left allmulticast mode [ 49.545906][ T4541] bridge0: left allmulticast mode [ 49.551474][ T4541] bridge0: left promiscuous mode [ 49.603323][ T29] audit: type=1400 audit(1736466773.156:2221): avc: denied { bind } for pid=4544 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.623467][ T29] audit: type=1400 audit(1736466773.156:2222): avc: denied { setopt } for pid=4544 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.689028][ T4553] process 'syz.0.422' launched '/dev/fd/3' with NULL argv: empty string added [ 49.698557][ T29] audit: type=1400 audit(1736466773.256:2223): avc: denied { execute_no_trans } for pid=4552 comm="syz.0.422" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.832215][ T4564] loop6: detected capacity change from 0 to 512 [ 49.847312][ T4564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.859881][ T4564] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.899855][ T4297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.920840][ T4570] __nla_validate_parse: 4 callbacks suppressed [ 49.920858][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 49.978089][ T29] audit: type=1400 audit(1736466773.536:2224): avc: denied { mount } for pid=4577 comm="syz.6.430" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.021940][ T4583] netlink: 96 bytes leftover after parsing attributes in process `syz.0.431'. [ 50.052145][ T29] audit: type=1326 audit(1736466773.606:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 50.076315][ T29] audit: type=1326 audit(1736466773.606:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 50.099854][ T29] audit: type=1326 audit(1736466773.606:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 50.123222][ T29] audit: type=1326 audit(1736466773.606:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 50.146613][ T29] audit: type=1326 audit(1736466773.606:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 50.197820][ T4590] syzkaller0: entered allmulticast mode [ 50.206367][ T4590] syzkaller0 (unregistering): left allmulticast mode [ 50.487410][ T4613] pim6reg1: entered promiscuous mode [ 50.492777][ T4613] pim6reg1: entered allmulticast mode [ 50.774036][ T4629] program syz.2.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.818468][ T4633] loop5: detected capacity change from 0 to 512 [ 50.841588][ T4633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.864665][ T4633] EXT4-fs (loop5): 1 truncate cleaned up [ 50.873310][ T4633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.047737][ T4659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.084131][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.117315][ T4666] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 51.163118][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 51.199454][ T4666] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 51.207533][ T4666] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 51.230417][ T4682] syz.4.476[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.230484][ T4682] syz.4.476[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.242068][ T4682] syz.4.476[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.247134][ T4684] loop2: detected capacity change from 0 to 1024 [ 51.275374][ T4666] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 51.290788][ T4666] bond2 (unregistering): Released all slaves [ 51.291399][ T4684] EXT4-fs: Ignoring removed oldalloc option [ 51.306376][ T4684] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 51.353946][ T4684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.504762][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.508671][ T4702] loop5: detected capacity change from 0 to 512 [ 51.523900][ T4704] ALSA: seq fatal error: cannot create timer (-22) [ 51.547423][ T4702] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 51.662433][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 51.671362][ T4726] netlink: 84 bytes leftover after parsing attributes in process `syz.5.493'. [ 51.687093][ T4724] loop6: detected capacity change from 0 to 512 [ 51.720504][ T4724] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.748854][ T4724] EXT4-fs (loop6): mount failed [ 52.498258][ T4770] loop0: detected capacity change from 0 to 128 [ 52.506773][ T4770] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 52.547155][ T4770] syz.0.512: attempt to access beyond end of device [ 52.547155][ T4770] loop0: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 52.560670][ T4770] Buffer I/O error on dev loop0, logical block 216, lost async page write [ 52.571324][ T4770] syz.0.512: attempt to access beyond end of device [ 52.571324][ T4770] loop0: rw=2049, sector=217, nr_sectors = 1 limit=128 [ 52.584767][ T4770] Buffer I/O error on dev loop0, logical block 217, lost async page write [ 52.606860][ T4774] loop5: detected capacity change from 0 to 128 [ 52.680258][ T4773] loop4: detected capacity change from 0 to 8192 [ 52.687278][ T4774] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.700833][ T4774] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.764728][ T3408] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 52.787612][ T3890] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.839214][ T4789] loop5: detected capacity change from 0 to 256 [ 52.856883][ T4791] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 52.868557][ T4789] FAT-fs (loop5): Directory bread(block 64) failed [ 52.877472][ T4789] FAT-fs (loop5): Directory bread(block 65) failed [ 52.885301][ T4789] FAT-fs (loop5): Directory bread(block 66) failed [ 52.891905][ T4789] FAT-fs (loop5): Directory bread(block 67) failed [ 52.894730][ T4791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.898534][ T4789] FAT-fs (loop5): Directory bread(block 68) failed [ 52.911919][ T4789] FAT-fs (loop5): Directory bread(block 69) failed [ 52.918517][ T4789] FAT-fs (loop5): Directory bread(block 70) failed [ 52.925330][ T4789] FAT-fs (loop5): Directory bread(block 71) failed [ 52.932187][ T4789] FAT-fs (loop5): Directory bread(block 72) failed [ 52.938790][ T4789] FAT-fs (loop5): Directory bread(block 73) failed [ 52.950305][ T4797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.957666][ T4797] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 52.969596][ T4797] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 53.031760][ T4805] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 53.038373][ T4805] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.046214][ T4805] vhci_hcd vhci_hcd.0: Device attached [ 53.084739][ T4808] vhci_hcd: connection closed [ 53.088560][ T1286] vhci_hcd: stop threads [ 53.097781][ T1286] vhci_hcd: release socket [ 53.102477][ T1286] vhci_hcd: disconnect device [ 53.220948][ T4827] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.532'. [ 53.230059][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 53.571220][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 53.666726][ T4862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.546'. [ 53.719743][ T4868] syz.2.547[4868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.719817][ T4868] syz.2.547[4868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.741644][ T4866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.560'. [ 53.764737][ T4868] syz.2.547[4868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.803886][ T4875] serio: Serial port ptm0 [ 53.824573][ T4873] pim6reg1: entered promiscuous mode [ 53.830024][ T4873] pim6reg1: entered allmulticast mode [ 53.940602][ T4884] loop2: detected capacity change from 0 to 512 [ 53.947593][ T4884] EXT4-fs (loop2): #blocks per group too big: 65280 [ 53.960560][ T4886] loop6: detected capacity change from 0 to 1024 [ 53.967472][ T4886] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.978461][ T4886] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.989249][ T4886] JBD2: no valid journal superblock found [ 53.995005][ T4886] EXT4-fs (loop6): Could not load journal inode [ 54.028827][ T4888] loop5: detected capacity change from 0 to 1024 [ 54.041455][ T4890] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.054114][ T4890] bridge0: entered promiscuous mode [ 54.060559][ T4888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.080387][ T4890] bridge_slave_1: left allmulticast mode [ 54.080703][ T4888] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.086160][ T4890] bridge_slave_1: left promiscuous mode [ 54.102261][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.111221][ T4890] bridge_slave_0: left allmulticast mode [ 54.116985][ T4890] bridge_slave_0: left promiscuous mode [ 54.122693][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.126226][ T4888] syz.5.559[4888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.129778][ T4888] syz.5.559[4888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.142219][ T4888] syz.5.559[4888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.159799][ T4890] bridge0 (unregistering): left promiscuous mode [ 54.183382][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.291603][ T4906] loop0: detected capacity change from 0 to 128 [ 54.299585][ T4906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.312235][ T4906] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.363895][ T4911] loop6: detected capacity change from 0 to 1024 [ 54.371156][ T4911] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.397217][ T4911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.409915][ T4911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.469654][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 54.469685][ T29] audit: type=1326 audit(1736466778.026:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc139f8cce7 code=0x7ffc0000 [ 54.499222][ T29] audit: type=1326 audit(1736466778.026:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc139f31f29 code=0x7ffc0000 [ 54.522840][ T29] audit: type=1326 audit(1736466778.036:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 54.546106][ T29] audit: type=1326 audit(1736466778.056:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc139f8cce7 code=0x7ffc0000 [ 54.569468][ T29] audit: type=1326 audit(1736466778.056:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc139f31f29 code=0x7ffc0000 [ 54.592937][ T29] audit: type=1326 audit(1736466778.056:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 54.616238][ T29] audit: type=1326 audit(1736466778.056:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc139f8cce7 code=0x7ffc0000 [ 54.639872][ T29] audit: type=1326 audit(1736466778.056:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc139f31f29 code=0x7ffc0000 [ 54.663263][ T29] audit: type=1326 audit(1736466778.056:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc139f95d29 code=0x7ffc0000 [ 54.686509][ T29] audit: type=1326 audit(1736466778.056:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc139f8cce7 code=0x7ffc0000 [ 54.714887][ T4923] loop6: detected capacity change from 0 to 1024 [ 54.723067][ T4923] EXT4-fs: Ignoring removed nobh option [ 54.728783][ T4923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.736256][ T4923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.746675][ T4923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.801815][ T4926] loop4: detected capacity change from 0 to 128 [ 54.808368][ T4920] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.827075][ T4926] syz.4.574: attempt to access beyond end of device [ 54.827075][ T4926] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 54.842628][ T4930] loop2: detected capacity change from 0 to 512 [ 54.851423][ T4926] syz.4.574: attempt to access beyond end of device [ 54.851423][ T4926] loop4: rw=2049, sector=169, nr_sectors = 4 limit=128 [ 54.866698][ T4930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.882900][ T4930] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.894719][ T4297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.929935][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.017701][ T4943] syz.4.581[4943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.151634][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.216037][ T4966] __nla_validate_parse: 1 callbacks suppressed [ 55.216051][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'. [ 55.378021][ T4965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.442318][ T4977] bond2: entered promiscuous mode [ 55.447572][ T4977] bond2: entered allmulticast mode [ 55.458149][ T4977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.469166][ T4980] netlink: 96 bytes leftover after parsing attributes in process `syz.0.595'. [ 55.627480][ T4989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.649756][ T4991] 9pnet: p9_errstr2errno: server reported unknown error [ 55.661541][ T4992] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 55.672706][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.680406][ T4992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.688242][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.695729][ T4992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.715161][ T4989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.786945][ T4989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.841878][ T4999] loop2: detected capacity change from 0 to 512 [ 55.848725][ T4999] EXT4-fs: Ignoring removed oldalloc option [ 55.854669][ T4999] EXT4-fs: Ignoring removed i_version option [ 55.863054][ T4989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.884180][ T4999] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.605: corrupted xattr block 95: invalid header [ 55.900493][ T4999] EXT4-fs (loop2): Remounting filesystem read-only [ 55.907188][ T4999] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 55.918652][ T4999] EXT4-fs (loop2): 1 orphan inode deleted [ 55.925000][ T4999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.938964][ T4999] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 55.954582][ T4989] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.958436][ T4999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.974471][ T4989] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.988516][ T4989] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.002475][ T4989] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.134051][ T5026] Cannot find add_set index 0 as target [ 56.179080][ T5028] netlink: 340 bytes leftover after parsing attributes in process `syz.4.616'. [ 56.533224][ T5048] loop4: detected capacity change from 0 to 1024 [ 56.545966][ T5048] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.557009][ T5048] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.557289][ T5052] loop5: detected capacity change from 0 to 1024 [ 56.569950][ T5048] JBD2: no valid journal superblock found [ 56.578790][ T5048] EXT4-fs (loop4): Could not load journal inode [ 56.579434][ T5052] EXT4-fs: Ignoring removed nobh option [ 56.590970][ T5052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.616447][ T5052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.639396][ T5052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.702093][ T5044] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.766276][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.490016][ T5077] loop2: detected capacity change from 0 to 512 [ 57.498044][ T5077] EXT4-fs: Ignoring removed oldalloc option [ 57.504583][ T5077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.515863][ T5079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.636'. [ 57.615561][ T5077] EXT4-fs (loop2): 1 truncate cleaned up [ 57.621681][ T5077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.657136][ T5090] loop0: detected capacity change from 0 to 512 [ 57.685249][ T5077] loop2: detected capacity change from 512 to 64 [ 57.693841][ T5090] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.640: casefold flag without casefold feature [ 57.712290][ T5077] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 57.715153][ T5090] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.640: couldn't read orphan inode 15 (err -117) [ 57.727004][ T5077] EXT4-fs (loop2): pa ffff88810695b5b0: logic 0, phys. 65, len 64 [ 57.746626][ T5077] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 57.759176][ T5090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.799595][ T3297] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -12) [ 57.818268][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.910300][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.034934][ T5113] 9pnet: p9_errstr2errno: server reported unknown error [ 58.150463][ T5120] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 58.161413][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.168950][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.181706][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.189249][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.304641][ T5127] loop5: detected capacity change from 0 to 512 [ 58.311227][ T5127] EXT4-fs: Ignoring removed oldalloc option [ 58.318904][ T5127] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.333252][ T5127] EXT4-fs (loop5): 1 truncate cleaned up [ 58.339348][ T5127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.405209][ T5127] loop5: detected capacity change from 512 to 64 [ 58.414491][ T5127] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 58.429242][ T5127] EXT4-fs (loop5): pa ffff8881068e1150: logic 0, phys. 65, len 64 [ 58.437405][ T5127] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 58.466368][ T3890] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -12) [ 58.480602][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.503200][ T5136] bridge0: entered promiscuous mode [ 58.511270][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 58.520522][ T5136] bridge_slave_1: left allmulticast mode [ 58.526486][ T5136] bridge_slave_1: left promiscuous mode [ 58.532209][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.540170][ T5136] bridge_slave_0: left allmulticast mode [ 58.546079][ T5136] bridge_slave_0: left promiscuous mode [ 58.551822][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.564930][ T5136] bridge0 (unregistering): left promiscuous mode [ 59.014303][ T5162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 59.106832][ T5172] bridge0: entered promiscuous mode [ 59.113961][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 59.123823][ T5172] bridge_slave_1: left allmulticast mode [ 59.129580][ T5172] bridge_slave_1: left promiscuous mode [ 59.135315][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.143715][ T5172] bridge_slave_0: left allmulticast mode [ 59.149540][ T5172] bridge_slave_0: left promiscuous mode [ 59.155206][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.167423][ T5172] bridge0 (unregistering): left promiscuous mode [ 59.211610][ T5178] bond1: entered promiscuous mode [ 59.217012][ T5178] bond1: entered allmulticast mode [ 59.222330][ T5178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.570600][ T5185] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 59.581246][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.588734][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.596467][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.603931][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.106336][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 60.106354][ T29] audit: type=1326 audit(1736466783.666:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.163088][ T29] audit: type=1326 audit(1736466783.666:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.186542][ T29] audit: type=1326 audit(1736466783.696:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.209919][ T29] audit: type=1326 audit(1736466783.696:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.233323][ T29] audit: type=1326 audit(1736466783.696:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.256654][ T29] audit: type=1326 audit(1736466783.696:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.280368][ T29] audit: type=1326 audit(1736466783.696:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.303697][ T29] audit: type=1326 audit(1736466783.696:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.327066][ T29] audit: type=1326 audit(1736466783.696:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.350488][ T29] audit: type=1326 audit(1736466783.696:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ac4f55d29 code=0x7ffc0000 [ 60.466025][ T5209] loop0: detected capacity change from 0 to 512 [ 60.495389][ T5209] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.689: corrupted in-inode xattr: invalid ea_ino [ 60.519610][ T5209] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.689: couldn't read orphan inode 15 (err -117) [ 60.560941][ T5209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.595893][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 60.645393][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.721918][ T5216] bpf_get_probe_write_proto: 5 callbacks suppressed [ 60.721939][ T5216] syz.2.691[5216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.729714][ T5216] syz.2.691[5216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.741260][ T5216] syz.2.691[5216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.788970][ T5216] loop2: detected capacity change from 0 to 764 [ 60.812583][ T5221] syzkaller0: entered allmulticast mode [ 60.837079][ T5218] IPv4: Oversized IP packet from 127.202.26.0 [ 60.870439][ T5221] syzkaller0 (unregistering): left allmulticast mode [ 60.918993][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 61.198472][ T5254] loop5: detected capacity change from 0 to 2048 [ 61.228001][ T5254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.244876][ T5254] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.279548][ T5254] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.707: bg 0: block 345: padding at end of block bitmap is not set [ 61.309315][ T5254] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 61.321901][ T5254] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.321901][ T5254] [ 61.372394][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.513671][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.523145][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.867465][ T5275] pim6reg1: entered promiscuous mode [ 61.872843][ T5275] pim6reg1: entered allmulticast mode [ 62.069097][ T5279] loop0: detected capacity change from 0 to 512 [ 62.097851][ T5279] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 62.248183][ T5290] ALSA: seq fatal error: cannot create timer (-22) [ 62.317342][ T5293] netlink: 'syz.6.724': attribute type 1 has an invalid length. [ 62.354858][ T5299] netlink: 'syz.2.726': attribute type 13 has an invalid length. [ 62.366850][ T5297] loop5: detected capacity change from 0 to 512 [ 62.396382][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.724'. [ 62.432250][ T5297] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.476682][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.484036][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.626923][ T5299] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.635937][ T5299] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.644899][ T5299] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.653914][ T5299] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.674574][ T5293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.683411][ T5293] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 62.693850][ T5304] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 62.711367][ T5304] bond1 (unregistering): Released all slaves [ 62.741601][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 62.751619][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 62.796438][ T5323] syzkaller0: entered allmulticast mode [ 62.803873][ T5323] syzkaller0 (unregistering): left allmulticast mode [ 62.838479][ T5329] loop6: detected capacity change from 0 to 512 [ 62.848579][ T5329] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 62.954068][ T5333] loop5: detected capacity change from 0 to 2048 [ 63.025012][ T5333] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 63.037391][ T5333] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.037391][ T5333] [ 63.047234][ T5333] EXT4-fs (loop5): Total free blocks count 0 [ 63.053771][ T5333] EXT4-fs (loop5): Free/Dirty block details [ 63.059761][ T5333] EXT4-fs (loop5): free_blocks=0 [ 63.064724][ T5333] EXT4-fs (loop5): dirty_blocks=0 [ 63.069884][ T5333] EXT4-fs (loop5): Block reservation details [ 63.075901][ T5333] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 63.233132][ T5350] loop4: detected capacity change from 0 to 1024 [ 63.240175][ T5350] EXT4-fs: Ignoring removed orlov option [ 63.246788][ T5355] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 63.254941][ T5353] netlink: 'syz.6.746': attribute type 13 has an invalid length. [ 63.273696][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 63.467695][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.475107][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.749466][ T5353] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.758737][ T5353] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.767681][ T5353] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.776676][ T5353] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.869174][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.896574][ T5355] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 63.920009][ T5358] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 63.966046][ T5358] bond2 (unregistering): Released all slaves [ 63.977700][ T5378] loop6: detected capacity change from 0 to 2048 [ 64.000659][ T5379] loop0: detected capacity change from 0 to 128 [ 64.013742][ T5380] syzkaller0: entered allmulticast mode [ 64.014377][ T5378] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.037890][ T5380] syzkaller0 (unregistering): left allmulticast mode [ 64.064848][ T5378] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.750: bg 0: block 345: padding at end of block bitmap is not set [ 64.079676][ T5378] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 64.085281][ T5379] syz.0.760: attempt to access beyond end of device [ 64.085281][ T5379] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 64.092157][ T5378] EXT4-fs (loop6): This should not happen!! Data will be lost [ 64.092157][ T5378] [ 64.178976][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 64.228257][ T5390] syzkaller0: entered allmulticast mode [ 64.237017][ T5390] syzkaller0 (unregistering): left allmulticast mode [ 64.250517][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 64.292938][ T5399] loop0: detected capacity change from 0 to 2048 [ 64.296041][ T5402] loop5: detected capacity change from 0 to 128 [ 64.373441][ T5406] syz.5.769: attempt to access beyond end of device [ 64.373441][ T5406] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 64.390447][ T5399] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 64.402976][ T5399] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.402976][ T5399] [ 64.412755][ T5399] EXT4-fs (loop0): Total free blocks count 0 [ 64.418949][ T5399] EXT4-fs (loop0): Free/Dirty block details [ 64.424944][ T5399] EXT4-fs (loop0): free_blocks=0 [ 64.426350][ T5402] syz.5.769: attempt to access beyond end of device [ 64.426350][ T5402] loop5: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 64.430025][ T5399] EXT4-fs (loop0): dirty_blocks=0 [ 64.448559][ T5399] EXT4-fs (loop0): Block reservation details [ 64.454629][ T5399] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 64.717692][ T5426] loop2: detected capacity change from 0 to 2048 [ 64.739104][ T5426] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.761639][ T5426] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.765: bg 0: block 345: padding at end of block bitmap is not set [ 64.777072][ T5426] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 64.789613][ T5426] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.789613][ T5426] [ 64.895017][ T5432] syzkaller0: entered allmulticast mode [ 64.909700][ T5432] syzkaller0 (unregistering): left allmulticast mode [ 64.917522][ T5439] loop0: detected capacity change from 0 to 1024 [ 64.924409][ T5439] EXT4-fs: Ignoring removed orlov option [ 64.932066][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 64.941614][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 65.058253][ T5446] netlink: 'syz.4.774': attribute type 13 has an invalid length. [ 65.329060][ T5446] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.337510][ T5446] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.346023][ T5446] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.354545][ T5446] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.415233][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 65.415247][ T29] audit: type=1326 audit(1736466788.966:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.460742][ T29] audit: type=1326 audit(1736466788.976:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.484319][ T29] audit: type=1326 audit(1736466788.976:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.507854][ T29] audit: type=1326 audit(1736466788.976:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.531219][ T29] audit: type=1326 audit(1736466788.976:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.554609][ T29] audit: type=1326 audit(1736466788.976:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.577980][ T29] audit: type=1326 audit(1736466788.976:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.601549][ T29] audit: type=1326 audit(1736466788.976:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.624884][ T29] audit: type=1326 audit(1736466788.976:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.648236][ T29] audit: type=1326 audit(1736466788.976:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.6.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a07415d29 code=0x7ffc0000 [ 65.679122][ T5467] __nla_validate_parse: 2 callbacks suppressed [ 65.679142][ T5467] netlink: 96 bytes leftover after parsing attributes in process `syz.5.778'. [ 65.777715][ T5469] loop4: detected capacity change from 0 to 512 [ 65.789056][ T5469] journal_path: Lookup failure for './file0' [ 65.795144][ T5469] EXT4-fs: error: could not find journal device path [ 66.780526][ T5509] xt_hashlimit: max too large, truncated to 1048576 [ 66.795781][ T5509] No such timeout policy "syz1" [ 66.959185][ T5511] loop6: detected capacity change from 0 to 2048 [ 67.018691][ T5511] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 67.031301][ T5511] EXT4-fs (loop6): This should not happen!! Data will be lost [ 67.031301][ T5511] [ 67.040985][ T5511] EXT4-fs (loop6): Total free blocks count 0 [ 67.047045][ T5511] EXT4-fs (loop6): Free/Dirty block details [ 67.052981][ T5511] EXT4-fs (loop6): free_blocks=0 [ 67.057941][ T5511] EXT4-fs (loop6): dirty_blocks=0 [ 67.062969][ T5511] EXT4-fs (loop6): Block reservation details [ 67.068973][ T5511] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 67.570144][ T5539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 67.579142][ T5539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 67.719656][ T5549] loop2: detected capacity change from 0 to 512 [ 67.736333][ T5549] EXT4-fs: Ignoring removed oldalloc option [ 67.753216][ T5549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.819: Parent and EA inode have the same ino 15 [ 67.768032][ T5549] EXT4-fs (loop2): 1 orphan inode deleted [ 67.943722][ T5558] loop4: detected capacity change from 0 to 2048 [ 67.993610][ T5558] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 68.006156][ T5558] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.006156][ T5558] [ 68.015827][ T5558] EXT4-fs (loop4): Total free blocks count 0 [ 68.021819][ T5558] EXT4-fs (loop4): Free/Dirty block details [ 68.027741][ T5558] EXT4-fs (loop4): free_blocks=0 [ 68.032684][ T5558] EXT4-fs (loop4): dirty_blocks=0 [ 68.037743][ T5558] EXT4-fs (loop4): Block reservation details [ 68.043746][ T5558] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 68.269896][ T5549] Set syz1 is full, maxelem 65536 reached [ 68.351939][ T5580] program syz.4.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.381801][ T5582] loop5: detected capacity change from 0 to 512 [ 68.395436][ T3297] EXT4-fs unmount: 19 callbacks suppressed [ 68.395455][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.410559][ T5582] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 68.429581][ T5582] EXT4-fs (loop5): invalid journal inode [ 68.438109][ T5584] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 68.441604][ T5582] EXT4-fs (loop5): can't get journal size [ 68.471799][ T5584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.480712][ T5582] EXT4-fs (loop5): 1 truncate cleaned up [ 68.487338][ T5582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.502311][ T5584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.515799][ T5584] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 68.527572][ T5584] bond3: (slave vcan1): Error -95 calling set_mac_address [ 68.580563][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.647659][ T5594] loop4: detected capacity change from 0 to 164 [ 69.213643][ T5618] syz.5.836[5618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.213699][ T5618] syz.5.836[5618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.239643][ T5618] syz.5.836[5618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.320681][ T5622] loop5: detected capacity change from 0 to 1024 [ 69.345390][ T5622] EXT4-fs: Ignoring removed orlov option [ 69.372961][ T5622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.455696][ T5622] ================================================================== [ 69.463831][ T5622] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 69.472317][ T5622] [ 69.474654][ T5622] read-write to 0xffff8881069cb338 of 4 bytes by task 5624 on cpu 1: [ 69.482876][ T5622] __writeback_single_inode+0x1f4/0x850 [ 69.488461][ T5622] writeback_single_inode+0x16c/0x3f0 [ 69.493954][ T5622] sync_inode_metadata+0x5c/0x90 [ 69.498952][ T5622] generic_buffers_fsync_noflush+0xd8/0x120 [ 69.505053][ T5622] ext4_sync_file+0x1ff/0x6c0 [ 69.509779][ T5622] vfs_fsync_range+0x116/0x130 [ 69.514575][ T5622] ext4_buffered_write_iter+0x326/0x370 [ 69.520199][ T5622] ext4_file_write_iter+0x383/0xf20 [ 69.525462][ T5622] iter_file_splice_write+0x5f1/0x980 [ 69.530882][ T5622] direct_splice_actor+0x160/0x2c0 [ 69.536153][ T5622] splice_direct_to_actor+0x302/0x670 [ 69.541564][ T5622] do_splice_direct+0xd7/0x150 [ 69.546360][ T5622] do_sendfile+0x398/0x660 [ 69.550805][ T5622] __x64_sys_sendfile64+0x110/0x150 [ 69.556027][ T5622] x64_sys_call+0xfbd/0x2dc0 [ 69.560644][ T5622] do_syscall_64+0xc9/0x1c0 [ 69.565170][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.571202][ T5622] [ 69.573546][ T5622] read to 0xffff8881069cb338 of 4 bytes by task 5622 on cpu 0: [ 69.581203][ T5622] __mark_inode_dirty+0x198/0x7e0 [ 69.586249][ T5622] ext4_write_inline_data_end+0x584/0x7b0 [ 69.592004][ T5622] ext4_write_end+0x3eb/0x770 [ 69.596695][ T5622] generic_perform_write+0x33c/0x4a0 [ 69.602003][ T5622] ext4_buffered_write_iter+0x1ea/0x370 [ 69.607576][ T5622] ext4_file_write_iter+0x383/0xf20 [ 69.612815][ T5622] iter_file_splice_write+0x5f1/0x980 [ 69.618234][ T5622] direct_splice_actor+0x160/0x2c0 [ 69.623399][ T5622] splice_direct_to_actor+0x302/0x670 [ 69.628795][ T5622] do_splice_direct+0xd7/0x150 [ 69.633584][ T5622] do_sendfile+0x398/0x660 [ 69.638012][ T5622] __x64_sys_sendfile64+0x110/0x150 [ 69.643227][ T5622] x64_sys_call+0xfbd/0x2dc0 [ 69.647839][ T5622] do_syscall_64+0xc9/0x1c0 [ 69.652369][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.658321][ T5622] [ 69.660660][ T5622] value changed: 0x0000003a -> 0x00000002 [ 69.666410][ T5622] [ 69.668738][ T5622] Reported by Kernel Concurrency Sanitizer on: [ 69.674923][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz.5.838 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 69.685533][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.695618][ T5622] ================================================================== [ 70.232912][ T3890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.