last executing test programs: 1m31.336067892s ago: executing program 2 (id=269): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r2) 1m30.9999372s ago: executing program 2 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0) 1m30.973621071s ago: executing program 2 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 1m30.895232438s ago: executing program 2 (id=275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 1m30.597618312s ago: executing program 2 (id=281): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.394183429s ago: executing program 2 (id=289): socketpair(0x5, 0x20000000000001, 0xfffffffd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1m30.349153892s ago: executing program 32 (id=289): socketpair(0x5, 0x20000000000001, 0xfffffffd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1m9.943409985s ago: executing program 3 (id=657): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001100)=0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @loopback, 0x6}, {0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, r2, 0x31}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 1m9.741932991s ago: executing program 3 (id=659): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 1m9.699113805s ago: executing program 3 (id=660): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001840)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) dup(r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, 0x0, &(0x7f0000000780)='GPL\x00', 0x6000, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0884}, 0x94) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1m9.148563369s ago: executing program 3 (id=679): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000300)="9911", 0x2, 0x61) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fsopen(&(0x7f0000000240)='bpf\x00', 0x1) 1m8.880272282s ago: executing program 3 (id=675): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) syz_clone3(&(0x7f0000000a80)={0x280, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x1}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 1m8.342342575s ago: executing program 3 (id=682): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x2, 0x434, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5f}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x82, 0x160) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x39}, @local}, 0xc) 1m8.283847879s ago: executing program 33 (id=682): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x2, 0x434, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5f}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x82, 0x160) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x39}, @local}, 0xc) 4.964224808s ago: executing program 0 (id=1228): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0xee64, 0x10100, 0x2000000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x3}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 4.600117547s ago: executing program 0 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd24, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="e01a8b697690627843707142122a3bb5590eb6b6b7ce84073f4f7e4cc0f58e6a41684bb5862bf0fd726cc28f730d14693dcd6176d93d86442ca66fa4825a6eb625a4ad9c6c0a7bfada96be93761910", @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYRES16=r0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) connect$netlink(r3, &(0x7f00000029c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x22, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000080)=""/61) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.451939279s ago: executing program 5 (id=1231): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a080000000000000000000000000007020000f8ffffffb703000000000000b704000004000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x101091, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r3, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES8=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f00000004c0)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe5f, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r4, 0x0, 0x3}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000f2ff0000040000000a00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="020000000100"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 4.07234147s ago: executing program 6 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) fallocate(r1, 0x10, 0x160483b7, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x42000000) syz_clone3(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 3.518781425s ago: executing program 5 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x90}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2b}, 0x94) setitimer(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.344317239s ago: executing program 0 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180240000004000000004318d69d613f7cf1365a483966f61af078ddbe3aae567119a85b3086e40daf99a328eaff52ff0f1ce30da44f0cd6c2f2c1bbf578a4"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) 3.105550748s ago: executing program 6 (id=1241): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xfc, 0x8, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x101, 0xf}}) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a9841"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x31, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9be}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x4, 0x30, 0x4}, @map_idx={0x18, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf8}}, @tail_call, @jmp={0x5, 0x0, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0x400, 0x5d, &(0x7f00000012c0)=""/93, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x6, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.83579883s ago: executing program 1 (id=1242): creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) getgid() unshare(0x60000480) 2.773207405s ago: executing program 5 (id=1244): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x4040090) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r5, 0x20000) syz_clone(0x11700411, 0x0, 0x0, 0x0, 0x0, 0x0) 1.623994029s ago: executing program 0 (id=1246): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r0, 0x2007ffb) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x98) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r0, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 1.612363609s ago: executing program 6 (id=1247): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 1.464060141s ago: executing program 5 (id=1248): unshare(0x22020400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001240)='./file0\x00', 0x2) socket(0x400000000010, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffd, 0x2) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0x84080) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2000c1, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [{@smackfshat={'smackfshat', 0x3d, 'kfree\x00'}}, {@subj_type={'subj_type', 0x3d, '!*'}}, {@flag='sync'}]}}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@l2tp6={0xa, 0x0, 0xbbf0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x3, 0x1}, {&(0x7f0000000100)=""/115, 0x73}, 0x0, 0x4}, 0xa0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x4200, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000f04000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/56, 0x38, 0x0, &(0x7f0000000600)=""/113, 0x71}, &(0x7f00000007c0)=0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.404284276s ago: executing program 1 (id=1249): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000500)={0xc49b, 0x16, [{0x7, 0x1}, {0xb}, {0x5, 0x1}, {0xf, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0xa}, {0x9}, {0x8, 0x1}, {}, {0x5}, {0x9}, {0x7}, {0x8}, {0xd, 0x1}, {0x7, 0x1}, {0x9}, {0x4, 0x1}, {0xc, 0x1}, {0x4}, {0x2}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r4, 0x801054db, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) socket(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.23738555s ago: executing program 1 (id=1251): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x2, 0x18) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close(r2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x20402) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1.008343908s ago: executing program 6 (id=1252): write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00000ef000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000c00)=0x5, 0x206, 0x2) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 900.983607ms ago: executing program 0 (id=1253): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) recvfrom$packet(r5, &(0x7f0000000380)=""/173, 0xad, 0x12123, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r6) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$FIONCLEX(r2, 0x5450) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r10, 0x0, 0x40041) accept(r10, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000380)={[{@dots}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@dots}]}, 0x1, 0x255, &(0x7f0000000a40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) close_range(r1, 0xffffffffffffffff, 0x0) 764.013818ms ago: executing program 1 (id=1254): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x7, 0xd6, {0x7, 0x25, 0x1, 0x0, 0x10, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0xa3, 0x41, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80802, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 650.184547ms ago: executing program 4 (id=1255): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 560.339994ms ago: executing program 5 (id=1256): futex(0x0, 0x5, 0x10000000, 0x0, &(0x7f0000000000), 0x40000000) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") write$selinux_load(0xffffffffffffffff, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "5278ecc6fd82df21e7a70810cb3bdb488bb6b9a9ce0aa61e72b2e3fd94f21d68487c6d4713c76593c3de18d6912488006bf47e4c9d05b5a8ac29ef0d412c9253d6a5e11420e679eddcec3b88844420908a4ace99f5bdcc3129c95188e6f779dfac51efd1e66d2b6878f51b55f4c065b62ffca856bda7c8f24c79503eae4c991fee25c9ea034838935cb554b732379eadf9dc2e4e30c2ad157cbf076d6a55a9081eab5f8859a4e43df73615b4545d63989e175772f3ee597aef7731a082eb39d91526"}, 0xd2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r2, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r2}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 407.992937ms ago: executing program 4 (id=1257): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 387.185979ms ago: executing program 4 (id=1258): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffed8) close(r0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x96637ff9ce5afbb9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 324.676363ms ago: executing program 4 (id=1259): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x9, 0x6ed, 0x0, 0xffffffffffffffbe}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000780)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0x15, &(0x7f0000000280)=""/21, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1], &(0x7f0000000540)=[{0x3, 0x2, 0x5, 0xc}, {0x0, 0x3, 0xc, 0x1}, {0x2, 0x4, 0x5, 0x6}], 0x10, 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x1, 0x11, 0x7, 0xd5, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0xc3, [@broadcast, @loopback, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xc5, [@loopback, @broadcast, @remote]}]}}}}}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000002c0)=[0xffff, 0x4, 0x7fff]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x34}}, 0x0) r3 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r4, r7, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 256.264719ms ago: executing program 5 (id=1260): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="1555ffffffffffffbbbbbbbbbbbb86dd"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x20, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 198.113964ms ago: executing program 4 (id=1261): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) 176.399536ms ago: executing program 0 (id=1262): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x10, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c, 0x0, 0x0, 0x4000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdbeb9fc1d95c098b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8006, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000005840)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @flowinfo={{0x10, 0x29, 0xb, 0x7}}], 0x20}}], 0x1, 0x8800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x3e, &(0x7f00000001c0)=""/62, 0x0, 0x10, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x7, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @loopback, 0xffdfffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) 96.266232ms ago: executing program 1 (id=1263): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xa}, 0x0, 0x10000, 0x0, 0x9, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000600091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYBLOB='\b\x00', @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) listen(r3, 0x3) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x1f}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 88.320603ms ago: executing program 6 (id=1264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2001d8e, &(0x7f0000000180)={[{@abort}, {@data_journal}, {@noquota}, {@block_validity}, {@block_validity}, {@nombcache}]}, 0x1, 0x461, &(0x7f0000000c00)="$eJzs27tvHMUfAPDvrh+J8/jZvxAeeQDmJSweduyEkIIGBBIFSEg0oTS2E4VcYhQbiUQRGIRCiSLRI0ok/gIqaBBQIdFCjyJFKA2B6tDe7foeOTv25eyF3OcjbTyzO5ud7+3M3czOXQB9azz7J4nYExG/RsRoPdtaYLz+5+aNy3N/3bg8l0S1+uYfSa3cnzcuzxVFi/N255mJNCL9JIlDHa67dPHS2dlKZeFCnp9aPvfu1NLFS8+eOTd7euH0wvmZEyeOHZ1+/vjMcz2J8/9ZXQ9+sHj4wKtvXX197uTVt3/8eqCIvy2OHhlf7+AT1WqPL1euvU3pZLDEirApWR/IbtdQrf+PxkA0bt5ovPJxqZUDtlQ1t8bhlSpwF0ui7BoA5Sg+6LP5b7Ft3+ijfNdfrE+Asrhv5lv9yGCkeZmhtvltL41HxMmVv7/Ittia5xAAAC2+zcY/z3Qa/6VxX1O5/+VrQ2P5Wsq+iLgnIvZHxL0RtbL3R8QDm7x++yLJreOf9FpXgW1QNv57IV/bah3/FaO/GBvIc3tr8Q8lp85UFo7kr8lEDO3I8tPrXOO7l3/5bK1jzeO/bMuuX4wF83pcG9zRes787PLsncTc7PpHEQcHO8WfrK4EJBFxICIOdnmNM099dXitY7ePfx09WGeqfhnxZP3+r0Rb/IVk/fXJqZ1RWTgyVbSKW/3085U31oug6/h7ILv/uzq2/9X4x5Lm9dqlzV/jym+frjmnmeyq/Td2DOd/359dXr4wHTGcvFavdPP+mca5Rb4on8U/8Vjn/r8vGq/EoYjIGvGDEfFQRDyct91HIuLRiGSlLa7m+fUPLz3+TuvRnaupO2r/PZDFP992/8dai7Td/0ZiONr3dE4MnP3+m9b/sZEcH97I/T9WS03kezby/reRenXXmgEAAOC/J42IPZGkk6vpkXRysv4d/v2xK60sLi0/fWrxvfPz9d8IjMVQWjzpGm16HjqdT+uL/Exb/mj+3PjzgZFafnJusTJfdvDQ53bf0v/TWv/P/D5Qdu2ALef3WtC/mvp/UmY9gO3n8x/6l/4P/atD/x8pox7A9uv0+f9hCfUAtl9b/7fsB33E/B/6l/4P/WuoKe0LANA3lkbi9j+S75TYGd2cJXHXJCJt3nP8RL09/Qsq1k0i6bIXbDSxp+wAN58o+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//+277PE=") r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x5, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r2, &(0x7f0000000400)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x80, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r5, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="ee0429bd7000fcdbdf2508000000083d4f49c9000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 70.094084ms ago: executing program 1 (id=1265): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000bc0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) open(0x0, 0x64842, 0x389b0d52417bb201) open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="fb08", 0x2, 0x4000001, 0x0, 0x0) 28.045728ms ago: executing program 6 (id=1266): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sync() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10010, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r4 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x40001) 0s ago: executing program 4 (id=1267): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x20000314, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x3, 0x49341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0xfffffe7f, &(0x7f0000000600)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) kernel console output (not intermixed with test programs): atadv_slave_0 (retrying later): interface not active [ 74.768312][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.775366][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.801328][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.984348][ T6124] hsr_slave_0: entered promiscuous mode [ 75.002416][ T6689] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 75.013278][ T6124] hsr_slave_1: entered promiscuous mode [ 75.029009][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 75.034837][ T6124] Cannot create hsr debugfs directory [ 75.058940][ T6623] tipc: Enabled bearer , priority 0 [ 75.097743][ T6623] tipc: Disabling bearer [ 75.187121][ T6751] 9pnet_fd: Insufficient options for proto=fd [ 75.206903][ T6761] ref_ctr increment failed for inode: 0x3c9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810419d640 [ 75.222384][ T6777] loop4: detected capacity change from 0 to 1024 [ 75.228546][ T6760] uprobe: syz.0.715:6760 failed to unregister, leaking uprobe [ 75.241643][ T6751] loop5: detected capacity change from 0 to 2048 [ 75.262840][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.287943][ T6751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.314234][ T6751] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.374719][ T6751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.403857][ T6124] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.429745][ T6124] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.439072][ T6777] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.716: Allocating blocks 497-513 which overlap fs metadata [ 75.454145][ T6776] EXT4-fs (loop4): pa ffff8881072e7310: logic 1, phys. 321, len 12 [ 75.458910][ T6124] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.462094][ T6776] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 2 [ 75.487021][ T6124] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.538012][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.582898][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.609820][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.625033][ T6860] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 75.658747][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.665864][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.695671][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.702778][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.742473][ T6878] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.811456][ T6849] macvlan2: entered promiscuous mode [ 75.816996][ T6849] macvlan2: entered allmulticast mode [ 75.864875][ T6878] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.979927][ T6878] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.026546][ T6878] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.135541][ T4341] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.192212][ T4341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.271972][ T4341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.300582][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.401508][ T4341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.775910][ T6124] veth0_vlan: entered promiscuous mode [ 76.795693][ T6124] veth1_vlan: entered promiscuous mode [ 76.827940][ T6124] veth0_macvtap: entered promiscuous mode [ 76.853994][ T6124] veth1_macvtap: entered promiscuous mode [ 76.896427][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.935543][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.961415][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.001799][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.048856][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.095829][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.773401][ T7006] loop5: detected capacity change from 0 to 512 [ 77.785053][ T7006] netlink: 'syz.5.734': attribute type 4 has an invalid length. [ 77.817358][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.846378][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.855632][ T7016] loop1: detected capacity change from 0 to 128 [ 77.875948][ T7016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.879244][ T7019] pim6reg1: entered promiscuous mode [ 77.893338][ T7019] pim6reg1: entered allmulticast mode [ 77.905517][ T7016] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.112145][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.211266][ T7051] loop4: detected capacity change from 0 to 128 [ 78.254658][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 78.337379][ T10] hid_parser_main: 44 callbacks suppressed [ 78.337407][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.350786][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.358230][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.365938][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.373448][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.380837][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.388293][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.395724][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.403195][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.410611][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.427474][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz1] on syz0 [ 78.449671][ T7079] netlink: 3 bytes leftover after parsing attributes in process `syz.5.747'. [ 78.458934][ T7079] 0ªX¹¦À: renamed from caif0 [ 78.465857][ T7079] 0ªX¹¦À: entered allmulticast mode [ 78.471086][ T7079] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.665457][ T7094] loop4: detected capacity change from 0 to 512 [ 78.673042][ T7094] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 78.715449][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 78.715468][ T29] audit: type=1400 audit(1754527719.480:1317): avc: denied { write } for pid=7090 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.755754][ T7110] loop4: detected capacity change from 0 to 128 [ 78.771342][ T29] audit: type=1400 audit(1754527719.550:1318): avc: denied { block_suspend } for pid=7102 comm="syz.5.751" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.797654][ T7110] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.828155][ T7110] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.845849][ T29] audit: type=1400 audit(1754527719.550:1319): avc: denied { read } for pid=7090 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.879554][ T29] audit: type=1400 audit(1754527719.610:1320): avc: denied { mount } for pid=7109 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.912429][ T7121] loop5: detected capacity change from 0 to 512 [ 78.921782][ T29] audit: type=1400 audit(1754527719.700:1321): avc: denied { add_name } for pid=7109 comm="syz.4.752" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.944879][ T29] audit: type=1400 audit(1754527719.700:1322): avc: denied { create } for pid=7109 comm="syz.4.752" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.945331][ T7123] loop6: detected capacity change from 0 to 512 [ 78.967668][ T7121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.002314][ T7121] EXT4-fs (loop5): 1 truncate cleaned up [ 79.013646][ T7121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.029633][ T29] audit: type=1400 audit(1754527719.770:1323): avc: denied { read append open } for pid=7109 comm="syz.4.752" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.077367][ T29] audit: type=1400 audit(1754527719.770:1324): avc: denied { setattr } for pid=7109 comm="syz.4.752" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.086177][ T7123] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.124063][ T29] audit: type=1400 audit(1754527719.780:1325): avc: denied { map } for pid=7109 comm="syz.4.752" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.180281][ T29] audit: type=1400 audit(1754527719.780:1326): avc: denied { execute } for pid=7109 comm="syz.4.752" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.182995][ T7123] EXT4-fs (loop6): 1 truncate cleaned up [ 79.234098][ T7123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.274680][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.287910][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.338099][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.382792][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.762'. [ 79.392608][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.762'. [ 79.425256][ T7167] loop1: detected capacity change from 0 to 512 [ 79.437790][ T7167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.454668][ T7167] EXT4-fs (loop1): 1 truncate cleaned up [ 79.464752][ T7167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.593199][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.677967][ T7197] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.713516][ T7197] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.803224][ T7197] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.893275][ T7197] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.953003][ T554] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965806][ T143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.983837][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.992749][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.288416][ T7236] loop1: detected capacity change from 0 to 8192 [ 80.337926][ T7244] loop4: detected capacity change from 0 to 512 [ 80.356191][ T7244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.375170][ T7244] EXT4-fs (loop4): 1 truncate cleaned up [ 80.381799][ T7244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.521763][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.614505][ T7272] netlink: 324 bytes leftover after parsing attributes in process `syz.1.778'. [ 80.734683][ T7274] loop4: detected capacity change from 0 to 512 [ 80.764555][ T7274] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.792520][ T7274] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.779: Failed to acquire dquot type 1 [ 80.806255][ T7274] EXT4-fs (loop4): 1 truncate cleaned up [ 80.812681][ T7274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.944554][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.352645][ T7312] loop1: detected capacity change from 0 to 2048 [ 81.393272][ T7312] EXT4-fs (loop1): failed to initialize system zone (-117) [ 81.415904][ T7312] EXT4-fs (loop1): mount failed [ 81.685275][ T7334] loop4: detected capacity change from 0 to 512 [ 81.749102][ T7334] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.764996][ T7334] EXT4-fs (loop4): 1 truncate cleaned up [ 81.771242][ T7334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.067566][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.192713][ T23] IPVS: starting estimator thread 0... [ 82.290599][ T7383] IPVS: using max 1776 ests per chain, 88800 per kthread [ 82.348365][ T7397] netlink: 'syz.5.803': attribute type 1 has an invalid length. [ 82.442539][ T7390] macvlan2: entered promiscuous mode [ 82.447896][ T7390] macvlan2: entered allmulticast mode [ 82.597517][ T7431] netlink: 'syz.5.808': attribute type 10 has an invalid length. [ 82.637069][ T7431] team0: Device hsr_slave_0 failed to register rx_handler [ 83.093834][ T7444] Falling back ldisc for ttyS3. [ 83.219198][ T7464] loop5: detected capacity change from 0 to 164 [ 83.249359][ T7464] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.254719][ T7468] $Hÿ: renamed from bond0 (while UP) [ 83.280835][ T7468] $Hÿ: entered promiscuous mode [ 83.285935][ T7468] bond_slave_0: entered promiscuous mode [ 83.291709][ T7468] bond_slave_1: entered promiscuous mode [ 83.375226][ T3382] hid_parser_main: 18 callbacks suppressed [ 83.375250][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.388640][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.446795][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.454304][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.461804][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.469211][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.476684][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.484152][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.491629][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.499092][ T3382] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.575092][ T3382] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 83.671689][ T7492] loop1: detected capacity change from 0 to 512 [ 83.678665][ T7492] EXT4-fs: Ignoring removed orlov option [ 83.733089][ T7492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.746028][ T7492] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.768626][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 83.768641][ T29] audit: type=1400 audit(1754527724.533:1562): avc: denied { mount } for pid=7477 comm="syz.1.818" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.796447][ T29] audit: type=1400 audit(1754527724.553:1563): avc: denied { add_name } for pid=7477 comm="syz.1.818" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.818466][ T29] audit: type=1400 audit(1754527724.553:1564): avc: denied { create } for pid=7477 comm="syz.1.818" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.900447][ T7497] fido_id[7497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.449415][ T7516] loop4: detected capacity change from 0 to 256 [ 84.495862][ T7516] FAT-fs (loop4): Directory bread(block 64) failed [ 84.504061][ T7516] FAT-fs (loop4): Directory bread(block 65) failed [ 84.520817][ T29] audit: type=1400 audit(1754527724.633:1565): avc: denied { read append open } for pid=7477 comm="syz.1.818" path="/149/bus/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.545860][ T29] audit: type=1400 audit(1754527724.683:1566): avc: denied { write } for pid=7489 comm="syz.4.821" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.567620][ T29] audit: type=1400 audit(1754527724.683:1567): avc: denied { connect } for pid=7489 comm="syz.4.821" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.589607][ T29] audit: type=1400 audit(1754527724.683:1568): avc: denied { name_connect } for pid=7489 comm="syz.4.821" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.611693][ T29] audit: type=1400 audit(1754527724.753:1569): avc: denied { bind } for pid=7495 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.631000][ T29] audit: type=1400 audit(1754527724.753:1570): avc: denied { listen } for pid=7495 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.650441][ T29] audit: type=1400 audit(1754527724.763:1571): avc: denied { write } for pid=7495 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.679412][ T7516] FAT-fs (loop4): Directory bread(block 66) failed [ 84.689147][ T7516] FAT-fs (loop4): Directory bread(block 67) failed [ 84.698190][ T7516] FAT-fs (loop4): Directory bread(block 68) failed [ 84.705272][ T7516] FAT-fs (loop4): Directory bread(block 69) failed [ 84.711854][ T7516] FAT-fs (loop4): Directory bread(block 70) failed [ 84.718420][ T7516] FAT-fs (loop4): Directory bread(block 71) failed [ 84.729418][ T7516] FAT-fs (loop4): Directory bread(block 72) failed [ 84.737730][ T7516] FAT-fs (loop4): Directory bread(block 73) failed [ 84.762755][ T7528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7528 comm=syz.0.827 [ 85.334424][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.472935][ T7548] loop6: detected capacity change from 0 to 1024 [ 85.473263][ T7548] EXT4-fs: Ignoring removed bh option [ 85.473305][ T7548] EXT4-fs: inline encryption not supported [ 85.481702][ T7548] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.487824][ T7548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 85.496050][ T7548] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.831: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.496206][ T7548] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.831: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.496365][ T7548] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.831: Failed to acquire dquot type 0 [ 85.496519][ T7548] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 85.496682][ T7548] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.831: mark_inode_dirty error [ 85.496856][ T7548] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 85.496894][ T7548] EXT4-fs (loop6): 1 orphan inode deleted [ 85.497417][ T7548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.502753][ T7548] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.831: lblock 0 mapped to illegal pblock 16 (length 1) [ 85.618784][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.634325][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 85.657706][ T7566] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.831: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.673744][ T7548] binfmt_misc: register: failed to install interpreter file ./file0 [ 85.697708][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.698242][ T7571] tipc: Enabled bearer , priority 0 [ 85.777063][ T7578] syzkaller0: entered promiscuous mode [ 85.782757][ T7578] syzkaller0: entered allmulticast mode [ 85.796880][ T7581] loop4: detected capacity change from 0 to 256 [ 85.816851][ T7571] tipc: Resetting bearer [ 85.838141][ T7570] tipc: Resetting bearer [ 85.851739][ T7570] tipc: Disabling bearer [ 85.875636][ T7583] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.952665][ T7583] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.012511][ T7583] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.083749][ T7583] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.163923][ T4341] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186409][ T4341] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.216179][ T4341] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.234414][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.840'. [ 86.255061][ T4341] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.328011][ T7647] tipc: Enabled bearer , priority 0 [ 86.335338][ T7647] syzkaller0: entered promiscuous mode [ 86.340914][ T7647] syzkaller0: entered allmulticast mode [ 86.352459][ T7647] tipc: Resetting bearer [ 86.360013][ T7646] tipc: Resetting bearer [ 86.367239][ T7646] tipc: Disabling bearer [ 86.414638][ T7659] loop4: detected capacity change from 0 to 512 [ 86.447577][ T7659] EXT4-fs: Ignoring removed oldalloc option [ 86.578436][ T7659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.603237][ T7659] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.618585][ T7659] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.842: Failed to acquire dquot type 1 [ 86.759106][ T7659] EXT4-fs (loop4): 1 truncate cleaned up [ 86.805407][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.310787][ T7769] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 88.349883][ T7769] team0: Device hsr_slave_0 failed to register rx_handler [ 88.579440][ T7789] netlink: 'syz.5.859': attribute type 10 has an invalid length. [ 90.816328][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 90.816345][ T29] audit: type=1400 audit(1754527731.596:1711): avc: denied { read } for pid=7858 comm="syz.1.862" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.897792][ T29] audit: type=1400 audit(1754527731.606:1712): avc: denied { open } for pid=7858 comm="syz.1.862" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.921204][ T29] audit: type=1400 audit(1754527731.606:1713): avc: denied { ioctl } for pid=7858 comm="syz.1.862" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.051048][ T29] audit: type=1400 audit(1754527731.756:1714): avc: denied { bind } for pid=7861 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.063093][ T7871] syzkaller0: entered promiscuous mode [ 91.070303][ T29] audit: type=1400 audit(1754527731.756:1715): avc: denied { connect } for pid=7861 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.075697][ T7871] syzkaller0: entered allmulticast mode [ 91.100744][ T29] audit: type=1400 audit(1754527731.756:1716): avc: denied { write } for pid=7861 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.120083][ T29] audit: type=1400 audit(1754527731.766:1717): avc: denied { mounton } for pid=7858 comm="syz.1.862" path="/158/file0" dev="tmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.238900][ T7876] wireguard0: entered promiscuous mode [ 91.244469][ T7876] wireguard0: entered allmulticast mode [ 91.256107][ T29] audit: type=1400 audit(1754527731.996:1718): avc: denied { ioctl } for pid=7874 comm="syz.1.865" path="socket:[14223]" dev="sockfs" ino=14223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.312951][ T7888] random: crng reseeded on system resumption [ 91.339686][ T29] audit: type=1400 audit(1754527732.097:1719): avc: denied { append } for pid=7874 comm="syz.1.865" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.362852][ T29] audit: type=1400 audit(1754527732.097:1720): avc: denied { open } for pid=7874 comm="syz.1.865" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.564871][ T7924] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 91.597394][ T7924] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.609665][ T7924] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 91.766231][ T7972] macvlan2: entered promiscuous mode [ 91.771580][ T7972] macvlan2: entered allmulticast mode [ 91.796207][ T7972] bond12: entered promiscuous mode [ 91.801693][ T7972] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.825985][ T7972] bond12: left promiscuous mode [ 92.052043][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.077496][ T7990] tipc: Enabled bearer , priority 0 [ 92.084830][ T7990] syzkaller0: entered promiscuous mode [ 92.090352][ T7990] syzkaller0: entered allmulticast mode [ 92.102945][ T7990] tipc: Resetting bearer [ 92.108983][ T7997] loop6: detected capacity change from 0 to 512 [ 92.318475][ T23] hid_parser_main: 17 callbacks suppressed [ 92.318498][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 92.356989][ T8005] loop5: detected capacity change from 0 to 1024 [ 92.369654][ T8005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.377700][ T7989] tipc: Resetting bearer [ 92.403133][ T8005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.416301][ T7989] tipc: Disabling bearer [ 92.427407][ T8005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.511364][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.567300][ T7997] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.875: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.593114][ T8014] fido_id[8014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.607581][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.617096][ T7997] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.875: Bad quota inode: 3, type: 0 [ 92.633482][ T7997] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.648877][ T7997] EXT4-fs (loop6): mount failed [ 92.649718][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'. [ 92.662795][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 92.671701][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'. [ 92.681489][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'. [ 92.853469][ T8039] tipc: Enabled bearer , priority 0 [ 92.861507][ T8039] syzkaller0: entered promiscuous mode [ 92.867063][ T8039] syzkaller0: entered allmulticast mode [ 93.000869][ T8047] tipc: Resetting bearer [ 93.013000][ T8038] tipc: Resetting bearer [ 93.024482][ T8038] tipc: Disabling bearer [ 93.139482][ T8051] block device autoloading is deprecated and will be removed. [ 93.414552][ T8074] tipc: Enabled bearer , priority 0 [ 93.424429][ T8074] syzkaller0: entered promiscuous mode [ 93.430054][ T8074] syzkaller0: entered allmulticast mode [ 93.439537][ T8079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8079 comm=syz.1.889 [ 93.453984][ T8074] tipc: Resetting bearer [ 93.461221][ T8073] tipc: Resetting bearer [ 93.468551][ T8073] tipc: Disabling bearer [ 93.570338][ T8086] loop4: detected capacity change from 0 to 512 [ 93.579346][ T8086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.582482][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 93.600362][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.891'. [ 93.628424][ T8090] loop5: detected capacity change from 0 to 1024 [ 93.637179][ T8090] EXT4-fs: Ignoring removed nobh option [ 93.642902][ T8090] EXT4-fs: Ignoring removed bh option [ 93.656390][ T8090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.732515][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.251133][ T8135] smc: net device bond0 applied user defined pnetid SYZ0 [ 94.290796][ T8141] tipc: Started in network mode [ 94.295768][ T8141] tipc: Node identity 729b22108f53, cluster identity 4711 [ 94.303160][ T8141] tipc: Enabled bearer , priority 0 [ 94.310862][ T8141] syzkaller0: entered promiscuous mode [ 94.316442][ T8141] syzkaller0: entered allmulticast mode [ 94.327060][ T8141] tipc: Resetting bearer [ 94.333005][ T8141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.341179][ T8141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.366286][ T8139] tipc: Resetting bearer [ 94.373723][ T8139] tipc: Disabling bearer [ 94.425047][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.441844][ T8149] tipc: Started in network mode [ 94.446879][ T8149] tipc: Node identity 0e45f2d62295, cluster identity 4711 [ 94.454239][ T8149] tipc: Enabled bearer , priority 0 [ 94.487549][ T8149] syzkaller0: entered promiscuous mode [ 94.493104][ T8149] syzkaller0: entered allmulticast mode [ 94.612677][ T8149] tipc: Resetting bearer [ 94.626928][ T8159] wireguard0: entered promiscuous mode [ 94.632448][ T8159] wireguard0: entered allmulticast mode [ 94.646707][ T8148] tipc: Resetting bearer [ 94.668192][ T8148] tipc: Disabling bearer [ 94.689473][ T8171] loop4: detected capacity change from 0 to 1024 [ 94.716535][ T8171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.729314][ T8171] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.744152][ T8171] random: crng reseeded on system resumption [ 94.783847][ T8182] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 94.848911][ T8182] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.872784][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.886768][ T8182] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 94.942288][ T8221] macvlan3: entered promiscuous mode [ 94.947749][ T8221] macvlan3: entered allmulticast mode [ 94.953896][ T8221] bond4: entered promiscuous mode [ 94.960896][ T8221] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 95.026488][ T8221] bond4: left promiscuous mode [ 95.046367][ T8235] tipc: Enabled bearer , priority 0 [ 95.053450][ T8225] syzkaller0: entered promiscuous mode [ 95.058997][ T8225] syzkaller0: entered allmulticast mode [ 95.070791][ T8225] tipc: Resetting bearer [ 95.077775][ T8224] tipc: Resetting bearer [ 95.091850][ T8224] tipc: Disabling bearer [ 95.125148][ T8242] loop1: detected capacity change from 0 to 128 [ 95.132371][ T8242] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.148048][ T8242] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.181621][ T37] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.315353][ T8257] veth1_macvtap: left promiscuous mode [ 95.321120][ T8257] macsec0: entered promiscuous mode [ 95.472180][ T8260] lo speed is unknown, defaulting to 1000 [ 95.478104][ T8260] lo speed is unknown, defaulting to 1000 [ 95.484200][ T8260] lo speed is unknown, defaulting to 1000 [ 95.490803][ T8260] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.498883][ T8260] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.510245][ T8260] lo speed is unknown, defaulting to 1000 [ 95.516824][ T8260] lo speed is unknown, defaulting to 1000 [ 95.523210][ T8260] lo speed is unknown, defaulting to 1000 [ 95.529588][ T8260] lo speed is unknown, defaulting to 1000 [ 95.536082][ T8260] lo speed is unknown, defaulting to 1000 [ 95.542687][ T8260] lo speed is unknown, defaulting to 1000 [ 95.549357][ T8260] lo speed is unknown, defaulting to 1000 [ 95.792116][ T8290] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.836295][ T8290] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.895872][ T8290] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.953600][ T8290] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.016536][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 96.016554][ T29] audit: type=1400 audit(1754527736.809:2099): avc: denied { ioctl } for pid=8291 comm="syz.0.913" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.115798][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182623][ T554] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.268396][ T29] audit: type=1326 audit(1754527736.929:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.5.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.291881][ T29] audit: type=1326 audit(1754527736.929:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.5.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.318629][ T554] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.326879][ T554] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.348517][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.915'. [ 96.366946][ T8317] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.438326][ T8322] wireguard0: entered promiscuous mode [ 96.443890][ T8322] wireguard0: entered allmulticast mode [ 96.464668][ T8330] loop5: detected capacity change from 0 to 1024 [ 96.558889][ T8330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.574620][ T8330] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.589347][ T8330] random: crng reseeded on system resumption [ 96.599363][ T8340] netlink: 'syz.6.918': attribute type 1 has an invalid length. [ 96.646291][ T8340] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.658220][ T8340] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 96.690741][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 96.706804][ T8340] gretap1: entered promiscuous mode [ 96.713985][ T8340] bond0: (slave gretap1): making interface the new active one [ 96.721654][ T8340] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 96.732033][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 96.734751][ T8340] macvlan2: entered promiscuous mode [ 96.746242][ T8340] macvlan2: entered allmulticast mode [ 96.761965][ T8340] bond0: entered promiscuous mode [ 96.767769][ T8340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.775644][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.786574][ T8340] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 96.798654][ T8340] bond0: left promiscuous mode [ 96.826267][ T29] audit: type=1326 audit(1754527737.619:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.849727][ T29] audit: type=1326 audit(1754527737.619:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.873294][ T29] audit: type=1326 audit(1754527737.619:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.897051][ T29] audit: type=1326 audit(1754527737.619:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.897090][ T29] audit: type=1326 audit(1754527737.619:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.897189][ T29] audit: type=1326 audit(1754527737.619:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 96.897220][ T29] audit: type=1326 audit(1754527737.619:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 97.009633][ T8411] loop6: detected capacity change from 0 to 128 [ 97.025062][ T8411] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.037531][ T8411] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.066659][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.122682][ T8431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.186873][ T8431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.233358][ T8455] loop6: detected capacity change from 0 to 1024 [ 97.240456][ T8455] EXT4-fs: Ignoring removed nobh option [ 97.246160][ T8455] EXT4-fs: Ignoring removed bh option [ 97.265646][ T8455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.283765][ T8431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.328058][ T8431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.405405][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.449718][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.467864][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.477947][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.695160][ T8490] loop5: detected capacity change from 0 to 128 [ 97.730744][ T8490] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.767117][ T8490] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.817493][ T37] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.186051][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.789926][ T8514] infiniband syz!: set active [ 98.794820][ T8514] infiniband syz!: added team_slave_0 [ 98.810625][ T8524] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.886406][ T8514] RDS/IB: syz!: added [ 98.890443][ T8514] smc: adding ib device syz! with port count 1 [ 98.912459][ T8514] smc: ib device syz! port 1 has pnetid [ 99.759282][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.944'. [ 99.768200][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.944'. [ 99.820457][ T8548] loop6: detected capacity change from 0 to 1024 [ 99.849264][ T8548] EXT4-fs: Ignoring removed nobh option [ 99.854932][ T8548] EXT4-fs: Ignoring removed bh option [ 99.869564][ T8552] sd 0:0:1:0: device reset [ 99.905808][ T8548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.093331][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.626260][ T8598] tipc: Enabling of bearer rejected, failed to enable media [ 100.937905][ T8608] loop6: detected capacity change from 0 to 164 [ 101.015540][ T8611] loop5: detected capacity change from 0 to 8192 [ 101.043332][ T8608] rock: directory entry would overflow storage [ 101.049650][ T8608] rock: sig=0x4f50, size=4, remaining=3 [ 101.055460][ T8608] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 101.082929][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 101.082947][ T29] audit: type=1400 audit(1754527741.881:2175): avc: denied { kexec_image_load } for pid=8623 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 101.114542][ T8617] netlink: 'syz.0.953': attribute type 39 has an invalid length. [ 101.126121][ T29] audit: type=1400 audit(1754527741.901:2176): avc: denied { unmount } for pid=6124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 101.158220][ T29] audit: type=1326 audit(1754527741.941:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9bd7febe9 code=0x0 [ 101.255410][ T29] audit: type=1326 audit(1754527742.052:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.278595][ T29] audit: type=1326 audit(1754527742.052:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.301585][ T29] audit: type=1326 audit(1754527742.052:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.324472][ T29] audit: type=1326 audit(1754527742.052:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.347433][ T29] audit: type=1326 audit(1754527742.052:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.370473][ T29] audit: type=1326 audit(1754527742.052:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9bd7fd550 code=0x7ffc0000 [ 101.393408][ T29] audit: type=1326 audit(1754527742.052:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bd7febe9 code=0x7ffc0000 [ 101.441969][ T8642] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 101.468326][ T8642] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.480105][ T8642] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 101.518785][ T8685] gretap1: entered promiscuous mode [ 101.526623][ T8685] bond1: (slave gretap1): making interface the new active one [ 101.534498][ T8685] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.676752][ T8691] netlink: 240 bytes leftover after parsing attributes in process `syz.1.959'. [ 101.690199][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 101.903029][ T37] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x16 [ 101.913956][ T8711] batadv_slave_0: entered promiscuous mode [ 101.921801][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 101.931065][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.943984][ T8711] batadv_slave_0 (unregistering): left promiscuous mode [ 101.951276][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.015963][ T8723] loop6: detected capacity change from 0 to 1024 [ 102.039211][ T8723] EXT4-fs: Ignoring removed nobh option [ 102.044883][ T8723] EXT4-fs: Ignoring removed bh option [ 102.083878][ T8723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.204944][ T8737] loop5: detected capacity change from 0 to 2048 [ 102.447923][ T4833] Alternate GPT is invalid, using primary GPT. [ 102.454434][ T4833] loop5: p2 p3 p7 [ 102.505656][ T8737] Alternate GPT is invalid, using primary GPT. [ 102.512084][ T8737] loop5: p2 p3 p7 [ 102.687358][ T8782] tipc: Enabled bearer , priority 0 [ 102.695984][ T8782] syzkaller0: entered promiscuous mode [ 102.701535][ T8782] syzkaller0: entered allmulticast mode [ 102.714056][ T8782] tipc: Resetting bearer [ 102.735045][ T8781] tipc: Resetting bearer [ 102.746741][ T8781] tipc: Disabling bearer [ 103.874345][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.902799][ T8797] loop4: detected capacity change from 0 to 1024 [ 103.937394][ T8800] loop5: detected capacity change from 0 to 512 [ 103.949015][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.963605][ T8800] EXT4-fs: Ignoring removed i_version option [ 103.986563][ T8800] EXT4-fs (loop5): 1 orphan inode deleted [ 103.986740][ T8797] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.970: Allocating blocks 465-513 which overlap fs metadata [ 104.010309][ T8810] netlink: 48 bytes leftover after parsing attributes in process `syz.6.971'. [ 104.019884][ T8797] EXT4-fs (loop4): pa ffff88810721a850: logic 256, phys. 369, len 9 [ 104.023989][ T8800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.028037][ T8797] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 104.044347][ T8813] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.071222][ T8797] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 104.108222][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.120477][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.280916][ T8835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.360208][ T8842] Invalid logical block size (2) [ 104.366235][ T8835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.436119][ T8849] hub 9-0:1.0: USB hub found [ 104.441216][ T8849] hub 9-0:1.0: 8 ports detected [ 104.840824][ T8835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.901201][ T8835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.968524][ T4341] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.992285][ T4341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.059822][ T4341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.068035][ T4341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.126687][ T8871] loop6: detected capacity change from 0 to 1024 [ 105.198376][ T8871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.230376][ T8879] loop4: detected capacity change from 0 to 512 [ 105.252969][ T8879] EXT4-fs: Ignoring removed bh option [ 105.262087][ T8886] loop5: detected capacity change from 0 to 1024 [ 105.272718][ T8879] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.273257][ T8886] EXT4-fs: Ignoring removed nobh option [ 105.286574][ T8886] EXT4-fs: Ignoring removed bh option [ 105.294070][ T8879] EXT4-fs (loop4): 1 truncate cleaned up [ 105.301107][ T8879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.303798][ T8886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.379175][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.568355][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.575620][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.613417][ T8912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.623108][ T8912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.647690][ T8912] gretap1: left promiscuous mode [ 105.653880][ T554] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.662975][ T554] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.672133][ T554] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.680701][ T554] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.803482][ T8916] loop4: detected capacity change from 0 to 8192 [ 105.970563][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.996804][ T8926] netlink: 132 bytes leftover after parsing attributes in process `syz.6.990'. [ 106.059729][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.070451][ T8932] 9pnet_fd: Insufficient options for proto=fd [ 106.453151][ T8952] hub 9-0:1.0: USB hub found [ 106.458201][ T8952] hub 9-0:1.0: 8 ports detected [ 107.163916][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 107.163934][ T29] audit: type=1400 audit(1754527747.964:2326): avc: denied { write } for pid=8988 comm="syz.6.998" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.200878][ T8987] tipc: Enabled bearer , priority 0 [ 107.231693][ T8987] syzkaller0: entered promiscuous mode [ 107.237235][ T8987] syzkaller0: entered allmulticast mode [ 107.273921][ T8987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.320108][ T8987] tipc: Resetting bearer [ 107.325897][ T8987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.355749][ T29] audit: type=1400 audit(1754527748.155:2327): avc: denied { write } for pid=9014 comm="syz.5.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.380120][ T9017] loop6: detected capacity change from 0 to 1024 [ 107.393550][ T8985] tipc: Resetting bearer [ 107.419182][ T9017] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 107.420279][ T8985] tipc: Disabling bearer [ 107.488177][ T9017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.498168][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1003'. [ 107.538463][ T29] audit: type=1400 audit(1754527748.335:2328): avc: denied { append } for pid=9015 comm="syz.6.1002" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.654526][ T9040] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.677262][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.744219][ T9047] ------------[ cut here ]------------ [ 107.749891][ T9047] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1) [ 107.766926][ T9047] WARNING: CPU: 1 PID: 9047 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 107.777348][ T9047] Modules linked in: [ 107.781389][ T9047] CPU: 1 UID: 0 PID: 9047 Comm: syz.6.1006 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 107.793549][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.803756][ T9047] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 107.810196][ T9047] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 a2 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 107.830406][ T9047] RSP: 0018:ffffc90010b6f440 EFLAGS: 00010292 [ 107.836506][ T9047] RAX: 0f0212a378729d00 RBX: ffff88812c3af8b8 RCX: 0000000000080000 [ 107.845071][ T9047] RDX: ffffc900031a6000 RSI: 000000000000ae28 RDI: 000000000000ae29 [ 107.853200][ T9047] RBP: 0000000000000010 R08: 0001c90010b6f27f R09: 0000000000000000 [ 107.861227][ T9047] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88812c3af878 [ 107.869317][ T9047] R13: ffff888109770000 R14: ffff888109770000 R15: ffff88812c3af8b0 [ 107.877332][ T9047] FS: 00007fb9bc25f6c0(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 107.886357][ T9047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.893031][ T9047] CR2: 0000200000213030 CR3: 000000011f6aa000 CR4: 00000000003506f0 [ 107.901075][ T9047] Call Trace: [ 107.904459][ T9047] [ 107.907412][ T9047] reg_set_min_max+0x1eb/0x260 [ 107.912290][ T9047] check_cond_jmp_op+0x1080/0x16e0 [ 107.917536][ T9047] do_check+0x332a/0x7a10 [ 107.921985][ T9047] do_check_common+0xc3a/0x1290 [ 107.926989][ T9047] bpf_check+0x942b/0xd9e0 [ 107.931452][ T9047] ? __rcu_read_unlock+0x4f/0x70 [ 107.936435][ T9047] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 107.942480][ T9047] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 107.948280][ T9047] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 107.954239][ T9047] ? pcpu_block_update+0x232/0x3b0 [ 107.959466][ T9047] ? pcpu_block_refresh_hint+0x157/0x170 [ 107.965133][ T9047] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 107.971243][ T9047] ? css_rstat_updated+0xb7/0x240 [ 107.976349][ T9047] ? __rcu_read_unlock+0x4f/0x70 [ 107.981328][ T9047] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 107.987158][ T9047] ? should_fail_ex+0x30/0x280 [ 107.992047][ T9047] ? selinux_bpf_prog_load+0x36/0xf0 [ 107.997727][ T9047] ? should_failslab+0x8c/0xb0 [ 108.002562][ T9047] ? __kmalloc_cache_noprof+0x189/0x320 [ 108.006365][ T29] audit: type=1400 audit(1754527748.805:2329): avc: denied { read } for pid=9046 comm="syz.6.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.008232][ T9047] ? selinux_bpf_prog_load+0xbf/0xf0 [ 108.032827][ T9047] ? security_bpf_prog_load+0x2c/0xa0 [ 108.038324][ T9047] bpf_prog_load+0xedd/0x1070 [ 108.043068][ T9047] ? security_bpf+0x2b/0x90 [ 108.047673][ T9047] __sys_bpf+0x462/0x7b0 [ 108.052013][ T9047] __x64_sys_bpf+0x41/0x50 [ 108.056591][ T9047] x64_sys_call+0x2aea/0x2ff0 [ 108.061396][ T9047] do_syscall_64+0xd2/0x200 [ 108.065935][ T9047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.072100][ T9047] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.077892][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.083832][ T9047] RIP: 0033:0x7fb9bd7febe9 [ 108.088420][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.108137][ T9047] RSP: 002b:00007fb9bc25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.116645][ T9047] RAX: ffffffffffffffda RBX: 00007fb9bda25fa0 RCX: 00007fb9bd7febe9 [ 108.124669][ T9047] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 108.132734][ T9047] RBP: 00007fb9bd881e19 R08: 0000000000000000 R09: 0000000000000000 [ 108.140791][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.148819][ T9047] R13: 00007fb9bda26038 R14: 00007fb9bda25fa0 R15: 00007ffc99c3a6e8 [ 108.156837][ T9047] [ 108.160351][ T9047] ---[ end trace 0000000000000000 ]--- [ 108.390546][ T29] audit: type=1400 audit(1754527749.195:2330): avc: denied { write } for pid=9062 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.430790][ T29] audit: type=1326 audit(1754527749.225:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.1.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8917fdebe9 code=0x7ffc0000 [ 108.454389][ T29] audit: type=1326 audit(1754527749.225:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.1.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8917fdebe9 code=0x7ffc0000 [ 108.478151][ T29] audit: type=1326 audit(1754527749.225:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.1.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8917fdebe9 code=0x7ffc0000 [ 108.501928][ T29] audit: type=1326 audit(1754527749.225:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.1.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8917fdebe9 code=0x7ffc0000 [ 108.525375][ T29] audit: type=1326 audit(1754527749.225:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.1.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8917fdebe9 code=0x7ffc0000 [ 108.549770][ T9067] loop5: detected capacity change from 0 to 1024 [ 108.558624][ T9069] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 108.569208][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 108.599863][ T9067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.634738][ T9067] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.647488][ T9069] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.658985][ T9069] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 108.694048][ T9127] netlink: 'syz.6.1013': attribute type 1 has an invalid length. [ 108.749015][ T9127] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.773027][ T9127] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.798481][ T9170] macvlan2: entered promiscuous mode [ 108.803841][ T9170] macvlan2: entered allmulticast mode [ 108.821031][ T9170] bond1: entered promiscuous mode [ 108.831896][ T9170] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.852509][ T9170] bond1: left promiscuous mode [ 108.983400][ T9184] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1016'. [ 109.353374][ T9190] lo speed is unknown, defaulting to 1000 [ 109.359235][ T9190] lo speed is unknown, defaulting to 1000 [ 109.365484][ T9190] lo speed is unknown, defaulting to 1000 [ 109.372496][ T9190] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.386760][ T9190] lo speed is unknown, defaulting to 1000 [ 109.393286][ T9190] lo speed is unknown, defaulting to 1000 [ 109.399879][ T9190] lo speed is unknown, defaulting to 1000 [ 109.406070][ T9190] lo speed is unknown, defaulting to 1000 [ 109.412242][ T9190] lo speed is unknown, defaulting to 1000 [ 109.418790][ T9190] lo speed is unknown, defaulting to 1000 [ 109.425122][ T9190] lo speed is unknown, defaulting to 1000 [ 109.577845][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.621006][ T9219] loop5: detected capacity change from 0 to 1024 [ 109.629432][ T9219] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 109.653846][ T9221] bridge_slave_0: left allmulticast mode [ 109.659625][ T9221] bridge_slave_0: left promiscuous mode [ 109.665415][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.674999][ T9221] bridge_slave_1: left allmulticast mode [ 109.680733][ T9221] bridge_slave_1: left promiscuous mode [ 109.686450][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.696702][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.711708][ T9221] bond0: (slave bond_slave_0): Releasing backup interface [ 109.733600][ T9221] bond0: (slave bond_slave_1): Releasing backup interface [ 109.759282][ T9221] team0: Failed to send options change via netlink (err -105) [ 109.805427][ T9221] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 109.815059][ T9221] team0: Port device team_slave_0 removed [ 109.853609][ T9221] team0: Failed to send options change via netlink (err -105) [ 109.877155][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.887687][ T9221] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 109.899421][ T9221] team0: Port device team_slave_1 removed [ 109.906345][ T9221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.913779][ T9221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.945907][ T9221] bond1: (slave gretap1): Releasing active interface [ 109.986832][ T9223] team0: Mode changed to "random" [ 110.019780][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'. [ 110.045611][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 110.288006][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1025'. [ 110.297074][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 110.312125][ T9275] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 110.320436][ T9275] bridge0: port 3(team0) entered blocking state [ 110.326873][ T9275] bridge0: port 3(team0) entered disabled state [ 110.334343][ T9275] team0: entered allmulticast mode [ 110.339579][ T9275] team_slave_0: entered allmulticast mode [ 110.345367][ T9275] team_slave_1: entered allmulticast mode [ 110.355640][ T9275] team0: entered promiscuous mode [ 110.360797][ T9275] team_slave_0: entered promiscuous mode [ 110.366588][ T9275] team_slave_1: entered promiscuous mode [ 110.374579][ T9275] bridge0: port 3(team0) entered blocking state [ 110.380929][ T9275] bridge0: port 3(team0) entered forwarding state [ 110.428363][ T9282] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 110.455358][ T9282] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.468517][ T9282] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 110.506045][ T9324] macvlan2: entered promiscuous mode [ 110.511479][ T9324] macvlan2: entered allmulticast mode [ 110.519680][ T9324] bond13: entered promiscuous mode [ 110.525601][ T9324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.534980][ T9324] bond13: left promiscuous mode [ 110.613650][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 110.624682][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 110.647394][ T9332] vlan2: entered promiscuous mode [ 110.652704][ T9332] batadv0: entered promiscuous mode [ 111.077938][ T9345] lo speed is unknown, defaulting to 1000 [ 111.083838][ T9345] lo speed is unknown, defaulting to 1000 [ 111.090077][ T9345] lo speed is unknown, defaulting to 1000 [ 111.097464][ T9345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.117431][ T9345] lo speed is unknown, defaulting to 1000 [ 111.124003][ T9345] lo speed is unknown, defaulting to 1000 [ 111.130437][ T9345] lo speed is unknown, defaulting to 1000 [ 111.136798][ T9345] lo speed is unknown, defaulting to 1000 [ 111.143271][ T9345] lo speed is unknown, defaulting to 1000 [ 111.149795][ T9345] lo speed is unknown, defaulting to 1000 [ 111.156204][ T9345] lo speed is unknown, defaulting to 1000 [ 111.355671][ T9374] blktrace: Concurrent blktraces are not allowed on loop2 [ 111.374843][ T9377] loop5: detected capacity change from 0 to 512 [ 111.388984][ T9377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.429741][ T9377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9377 comm=syz.5.1035 [ 111.648535][ T9387] capability: warning: `wÞ£ÿ' uses deprecated v2 capabilities in a way that may be insecure [ 111.729963][ T9396] __nla_validate_parse: 1 callbacks suppressed [ 111.729980][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 111.884977][ T9341] syz.6.1032 (9341) used greatest stack depth: 7096 bytes left [ 111.927164][ T9401] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.012946][ T9397] Set syz1 is full, maxelem 65536 reached [ 112.073436][ T9404] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 112.133618][ T9404] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.145036][ T9404] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 112.186709][ T9447] macvlan3: entered promiscuous mode [ 112.192227][ T9447] macvlan3: entered allmulticast mode [ 112.198484][ T9447] bond6: entered promiscuous mode [ 112.203839][ T9447] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 112.215743][ T9447] bond6: left promiscuous mode [ 112.261565][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.527949][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1044'. [ 112.563059][ T9469] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 112.576624][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1044'. [ 112.588661][ T9469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.921492][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 112.921512][ T29] audit: type=1326 audit(1754527753.717:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.040204][ T29] audit: type=1326 audit(1754527753.757:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.063747][ T29] audit: type=1326 audit(1754527753.757:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.087247][ T29] audit: type=1326 audit(1754527753.757:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.110681][ T29] audit: type=1326 audit(1754527753.757:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.133989][ T29] audit: type=1326 audit(1754527753.757:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.157471][ T29] audit: type=1326 audit(1754527753.757:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.180802][ T29] audit: type=1326 audit(1754527753.757:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.204263][ T29] audit: type=1326 audit(1754527753.757:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.227693][ T29] audit: type=1326 audit(1754527753.757:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 113.378257][ T9529] netlink: 'syz.5.1051': attribute type 10 has an invalid length. [ 113.407156][ T9529] futex_wake_op: syz.5.1051 tries to shift op by -1; fix this program [ 113.427871][ T9529] netlink: 'syz.5.1051': attribute type 10 has an invalid length. [ 113.446043][ T9529] team0: Port device dummy0 removed [ 113.467457][ T9529] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.578542][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'. [ 113.613083][ T9540] team_slave_0: entered promiscuous mode [ 113.618854][ T9540] team_slave_1: entered promiscuous mode [ 113.639255][ T9540] macvtap0: entered promiscuous mode [ 113.644610][ T9540] team0: entered promiscuous mode [ 113.650005][ T9540] macvtap0: entered allmulticast mode [ 113.655456][ T9540] team0: entered allmulticast mode [ 113.660576][ T9540] team_slave_0: entered allmulticast mode [ 113.666342][ T9540] team_slave_1: entered allmulticast mode [ 113.694952][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'. [ 113.742794][ T9540] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 113.772022][ T9547] team0: left allmulticast mode [ 113.777078][ T9547] team_slave_0: left allmulticast mode [ 113.782589][ T9547] team_slave_1: left allmulticast mode [ 113.788220][ T9547] team0: left promiscuous mode [ 113.793223][ T9547] team_slave_0: left promiscuous mode [ 113.798642][ T9547] team_slave_1: left promiscuous mode [ 113.832768][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.856780][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.412968][ T9575] netlink: 2056 bytes leftover after parsing attributes in process `syz.4.1061'. [ 115.603359][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 115.617358][ T9606] macvtap0: entered promiscuous mode [ 115.622700][ T9606] team0: entered promiscuous mode [ 115.627933][ T9606] team_slave_0: entered promiscuous mode [ 115.633938][ T9606] team_slave_1: entered promiscuous mode [ 115.639705][ T9606] macvtap0: entered allmulticast mode [ 115.645138][ T9606] team0: entered allmulticast mode [ 115.650263][ T9606] team_slave_0: entered allmulticast mode [ 115.656191][ T9606] team_slave_1: entered allmulticast mode [ 115.663271][ T9606] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 115.663494][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 115.682353][ T9610] team0: left allmulticast mode [ 115.687323][ T9610] team_slave_0: left allmulticast mode [ 115.692832][ T9610] team_slave_1: left allmulticast mode [ 115.698387][ T9610] team0: left promiscuous mode [ 115.703198][ T9610] team_slave_0: left promiscuous mode [ 115.708674][ T9610] team_slave_1: left promiscuous mode [ 115.751657][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 115.762144][ T9615] tipc: Enabling of bearer rejected, failed to enable media [ 116.485359][ T9647] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 116.488881][ T9649] tipc: Enabled bearer , priority 0 [ 116.513080][ T9647] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1082'. [ 116.519220][ T9649] syzkaller0: entered promiscuous mode [ 116.527615][ T9649] syzkaller0: entered allmulticast mode [ 116.538826][ T9647] hsr_slave_0: left promiscuous mode [ 116.549236][ T9647] hsr_slave_1: left promiscuous mode [ 116.562152][ T9649] tipc: Resetting bearer [ 116.570279][ T9646] tipc: Resetting bearer [ 116.578707][ T9646] tipc: Disabling bearer [ 116.592633][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.637887][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.647963][ T9664] loop4: detected capacity change from 0 to 512 [ 116.698374][ T9664] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 116.726944][ T9664] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.756921][ T9664] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1083: Block bitmap for bg 0 marked uninitialized [ 116.797331][ T4266] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 116.808345][ T4266] CPU: 1 UID: 0 PID: 4266 Comm: syz-executor Tainted: G W 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 116.808389][ T4266] Tainted: [W]=WARN [ 116.808474][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.808489][ T4266] Call Trace: [ 116.808495][ T4266] [ 116.808503][ T4266] __dump_stack+0x1d/0x30 [ 116.808587][ T4266] dump_stack_lvl+0xe8/0x140 [ 116.808608][ T4266] dump_stack+0x15/0x1b [ 116.808623][ T4266] dump_header+0x81/0x220 [ 116.808660][ T4266] oom_kill_process+0x342/0x400 [ 116.808702][ T4266] out_of_memory+0x979/0xb80 [ 116.808735][ T4266] try_charge_memcg+0x5e6/0x9e0 [ 116.808773][ T4266] charge_memcg+0x51/0xc0 [ 116.808819][ T4266] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 116.808848][ T4266] __read_swap_cache_async+0x1df/0x350 [ 116.808894][ T4266] swap_cluster_readahead+0x277/0x3e0 [ 116.808992][ T4266] swapin_readahead+0xde/0x6f0 [ 116.809035][ T4266] ? __filemap_get_folio+0x4f7/0x6b0 [ 116.809148][ T4266] ? swap_cache_get_folio+0x77/0x200 [ 116.809185][ T4266] do_swap_page+0x301/0x2430 [ 116.809224][ T4266] ? finish_task_switch+0xad/0x2b0 [ 116.809250][ T4266] ? __pfx_default_wake_function+0x10/0x10 [ 116.809280][ T4266] handle_mm_fault+0x9a5/0x2c20 [ 116.809395][ T4266] do_user_addr_fault+0x636/0x1090 [ 116.809440][ T4266] ? fpregs_restore_userregs+0xe2/0x1d0 [ 116.809507][ T4266] ? switch_fpu_return+0xe/0x20 [ 116.809579][ T4266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.809611][ T4266] exc_page_fault+0x62/0xa0 [ 116.809662][ T4266] asm_exc_page_fault+0x26/0x30 [ 116.809684][ T4266] RIP: 0033:0x7fda009e1465 [ 116.809698][ T4266] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 116.809720][ T4266] RSP: 002b:00007ffd90521df8 EFLAGS: 00010246 [ 116.809811][ T4266] RAX: 0000000000000000 RBX: 00000000000001ae RCX: 00007fda009e1463 [ 116.809829][ T4266] RDX: 00007ffd90521e10 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.809845][ T4266] RBP: 00007ffd90521e7c R08: 000000002f826d53 R09: 0000000000000000 [ 116.809861][ T4266] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 116.809877][ T4266] R13: 00000000000927c0 R14: 000000000001c515 R15: 00007ffd90521ed0 [ 116.809902][ T4266] [ 116.809910][ T4266] memory: usage 307200kB, limit 307200kB, failcnt 200 [ 116.907104][ T9664] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 116.912235][ T4266] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 116.912255][ T4266] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 116.933597][ T9664] EXT4-fs (loop4): 1 orphan inode deleted [ 116.937968][ T4266] Memory cgroup stats for [ 116.945249][ T9664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.948409][ T4266] /syz5: [ 117.071506][ T9672] __nla_validate_parse: 1 callbacks suppressed [ 117.071527][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'. [ 117.110023][ T4266] cache 0 [ 117.112992][ T4266] rss 0 [ 117.115805][ T4266] shmem 0 [ 117.118835][ T4266] mapped_file 0 [ 117.122339][ T4266] dirty 0 [ 117.125447][ T4266] writeback 0 [ 117.128763][ T4266] workingset_refault_anon 53 [ 117.133382][ T4266] workingset_refault_file 0 [ 117.137885][ T4266] swap 364544 [ 117.141284][ T4266] swapcached 0 [ 117.144698][ T4266] pgpgin 66238 [ 117.148161][ T4266] pgpgout 66235 [ 117.151685][ T4266] pgfault 79094 [ 117.155176][ T4266] pgmajfault 26 [ 117.158636][ T4266] inactive_anon 0 [ 117.162268][ T4266] active_anon 0 [ 117.165762][ T4266] inactive_file 12288 [ 117.169770][ T4266] active_file 0 [ 117.173296][ T4266] unevictable 0 [ 117.176764][ T4266] hierarchical_memory_limit 314572800 [ 117.182139][ T4266] hierarchical_memsw_limit 9223372036854771712 [ 117.188339][ T4266] total_cache 0 [ 117.191808][ T4266] total_rss 0 [ 117.195169][ T4266] total_shmem 0 [ 117.198632][ T4266] total_mapped_file 0 [ 117.202621][ T4266] total_dirty 0 [ 117.206108][ T4266] total_writeback 0 [ 117.209925][ T4266] total_workingset_refault_anon 53 [ 117.215069][ T4266] total_workingset_refault_file 0 [ 117.220092][ T4266] total_swap 364544 [ 117.223929][ T4266] total_swapcached 0 [ 117.227853][ T4266] total_pgpgin 66238 [ 117.231757][ T4266] total_pgpgout 66235 [ 117.236193][ T4266] total_pgfault 79094 [ 117.240279][ T4266] total_pgmajfault 26 [ 117.244278][ T4266] total_inactive_anon 0 [ 117.248433][ T4266] total_active_anon 0 [ 117.252418][ T4266] total_inactive_file 12288 [ 117.256943][ T4266] total_active_file 0 [ 117.261002][ T4266] total_unevictable 0 [ 117.265012][ T4266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1074,pid=9627,uid=0 [ 117.279703][ T4266] Memory cgroup out of memory: Killed process 9627 (syz.5.1074) total-vm:95812kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 117.339866][ T9664] netlink: 'syz.4.1083': attribute type 4 has an invalid length. [ 117.394371][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.738603][ T9628] syz.5.1074 (9628) used greatest stack depth: 7032 bytes left [ 118.226767][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 118.226785][ T29] audit: type=1326 audit(1754527759.030:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.322537][ T29] audit: type=1326 audit(1754527759.040:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.346176][ T29] audit: type=1326 audit(1754527759.040:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.369614][ T29] audit: type=1326 audit(1754527759.040:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.393199][ T29] audit: type=1326 audit(1754527759.040:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.416534][ T29] audit: type=1326 audit(1754527759.040:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.439986][ T29] audit: type=1326 audit(1754527759.040:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.463478][ T29] audit: type=1326 audit(1754527759.040:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.486944][ T29] audit: type=1326 audit(1754527759.040:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.510475][ T29] audit: type=1326 audit(1754527759.040:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f440d3bebe9 code=0x7ffc0000 [ 118.564458][ T9708] lo speed is unknown, defaulting to 1000 [ 118.570540][ T9708] lo speed is unknown, defaulting to 1000 [ 118.580683][ T9708] lo speed is unknown, defaulting to 1000 [ 118.590240][ T9708] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 118.614205][ T9708] lo speed is unknown, defaulting to 1000 [ 118.626089][ T9708] lo speed is unknown, defaulting to 1000 [ 118.632448][ T9712] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1093'. [ 118.651491][ T9712] 0ªX¹¦À: renamed from caif0 [ 118.658514][ T9712] 0ªX¹¦À: entered allmulticast mode [ 118.663913][ T9712] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 118.681646][ T9708] lo speed is unknown, defaulting to 1000 [ 118.687828][ T9708] lo speed is unknown, defaulting to 1000 [ 118.695705][ T9708] lo speed is unknown, defaulting to 1000 [ 118.701895][ T9708] lo speed is unknown, defaulting to 1000 [ 118.815459][ T9722] loop4: detected capacity change from 0 to 256 [ 118.841771][ T9722] vfat: Unknown parameter 'shor†name' [ 118.971332][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1099'. [ 119.174301][ T9742] lo speed is unknown, defaulting to 1000 [ 119.410451][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.421970][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.437774][ T9768] loop6: detected capacity change from 0 to 512 [ 119.786656][ T9768] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 119.878899][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1102'. [ 119.951544][ T9780] veth0_to_team: entered promiscuous mode [ 119.959490][ T9783] netlink: 'syz.5.1103': attribute type 1 has an invalid length. [ 120.033503][ T9783] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 120.046429][ T9783] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 120.069109][ T9776] macvlan2: entered promiscuous mode [ 120.074496][ T9776] macvlan2: entered allmulticast mode [ 120.146671][ T9776] bond3: entered promiscuous mode [ 120.152064][ T9776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.160323][ T9776] bond3: left promiscuous mode [ 120.174136][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 120.769857][ T9860] team0: left allmulticast mode [ 120.774832][ T9860] team_slave_0: left allmulticast mode [ 120.780356][ T9860] team_slave_1: left allmulticast mode [ 120.785865][ T9860] team0: left promiscuous mode [ 120.790642][ T9860] team_slave_0: left promiscuous mode [ 120.796236][ T9860] team_slave_1: left promiscuous mode [ 120.801831][ T9860] bridge0: port 3(team0) entered disabled state [ 121.075550][ T9860] bridge_slave_0: left allmulticast mode [ 121.081283][ T9860] bridge_slave_0: left promiscuous mode [ 121.087078][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.096685][ T9860] bridge_slave_1: left allmulticast mode [ 121.102457][ T9860] bridge_slave_1: left promiscuous mode [ 121.108399][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.118963][ T9860] bond0: (slave bond_slave_0): Releasing backup interface [ 121.129441][ T9860] bond0: (slave bond_slave_1): Releasing backup interface [ 121.142042][ T9860] team0: Failed to send options change via netlink (err -105) [ 121.150041][ T9860] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 121.159729][ T9860] team0: Port device team_slave_0 removed [ 121.169526][ T9860] team0: Failed to send options change via netlink (err -105) [ 121.177444][ T9860] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 121.187149][ T9860] team0: Port device team_slave_1 removed [ 121.208363][ T9860] bond1: (slave gretap1): Releasing active interface [ 121.224029][ T9865] team0: Mode changed to "random" [ 121.229507][ T9871] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1111'. [ 121.420674][ T9879] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 121.691140][ T9887] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 121.704389][ T9889] loop4: detected capacity change from 0 to 512 [ 121.769597][ T9889] EXT4-fs (loop4): too many log groups per flexible block group [ 121.777445][ T9889] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 121.784481][ T9889] EXT4-fs (loop4): mount failed [ 121.792061][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 121.869393][ T9910] loop4: detected capacity change from 0 to 2048 [ 121.884034][ T9910] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 121.910167][ T9911] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.019497][ T9928] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 122.056514][ T9919] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.068841][ T9919] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 122.119819][ T9928] macvlan2: entered promiscuous mode [ 122.125272][ T9928] macvlan2: entered allmulticast mode [ 122.131415][ T9928] bond2: entered promiscuous mode [ 122.136882][ T9928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.147968][ T9928] bond2: left promiscuous mode [ 122.322834][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 122.425146][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 123.268611][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 123.268630][ T29] audit: type=1400 audit(1754527764.073:3481): avc: denied { load_policy } for pid=10002 comm="syz.1.1129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.325464][T10003] SELinux: failed to load policy [ 123.361349][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 123.386674][ T29] audit: type=1400 audit(1754527764.193:3482): avc: denied { bind } for pid=10005 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.412419][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 123.498144][T10023] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 123.527849][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.554476][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1133'. [ 123.604263][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.625827][T10016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.663852][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 123.709943][ T29] audit: type=1400 audit(1754527764.523:3483): avc: denied { lock } for pid=10068 comm="syz.4.1136" path="socket:[18132]" dev="sockfs" ino=18132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 123.813947][T10073] netlink: 'syz.5.1137': attribute type 13 has an invalid length. [ 123.857861][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.865137][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.963706][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.973641][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.982518][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.992127][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.049088][ T29] audit: type=1400 audit(1754527764.853:3484): avc: denied { block_suspend } for pid=10075 comm="syz.5.1138" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.183830][T10081] loop6: detected capacity change from 0 to 8192 [ 124.209787][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1139'. [ 124.224621][T10081] vlan2: entered promiscuous mode [ 124.229797][T10081] team0: entered promiscuous mode [ 124.234912][T10081] team_slave_0: entered promiscuous mode [ 124.240858][T10081] team_slave_1: entered promiscuous mode [ 124.261427][T10092] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1139'. [ 124.277625][T10092] 0·: renamed from hsr0 (while UP) [ 124.287327][T10092] 0·: entered allmulticast mode [ 124.292316][T10092] hsr_slave_0: entered allmulticast mode [ 124.298148][T10092] hsr_slave_1: entered allmulticast mode [ 124.306209][T10092] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 124.398467][ T29] audit: type=1400 audit(1754527765.203:3485): avc: denied { write } for pid=10101 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.571979][ T29] audit: type=1400 audit(1754527765.373:3486): avc: denied { name_bind } for pid=10111 comm="syz.1.1147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.725632][ T29] audit: type=1326 audit(1754527765.533:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 124.749291][ T29] audit: type=1326 audit(1754527765.533:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 124.772802][ T29] audit: type=1326 audit(1754527765.533:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 124.796339][ T29] audit: type=1326 audit(1754527765.533:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f81304febe9 code=0x7ffc0000 [ 125.215402][T10129] loop5: detected capacity change from 0 to 164 [ 125.240489][T10129] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.583050][T10141] lo speed is unknown, defaulting to 1000 [ 125.794981][T10178] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 125.813557][T10178] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 126.005019][T10188] netlink: 'syz.6.1160': attribute type 10 has an invalid length. [ 126.027483][T10188] team0: entered allmulticast mode [ 126.027500][T10188] team_slave_0: entered allmulticast mode [ 126.027513][T10188] team_slave_1: entered allmulticast mode [ 126.031843][T10188] bridge0: port 3(team0) entered blocking state [ 126.050570][T10188] bridge0: port 3(team0) entered disabled state [ 126.093613][T10188] bridge0: port 3(team0) entered blocking state [ 126.099951][T10188] bridge0: port 3(team0) entered forwarding state [ 126.123805][T10169] lo speed is unknown, defaulting to 1000 [ 126.250332][T10231] syzkaller1: entered promiscuous mode [ 126.255886][T10231] syzkaller1: entered allmulticast mode [ 126.356323][T10213] sctp: [Deprecated]: syz.6.1162 (pid 10213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.356323][T10213] Use struct sctp_sack_info instead [ 126.676534][T10244] macsec0: left promiscuous mode [ 126.705361][T10244] gretap1: left promiscuous mode [ 126.737432][ T554] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.792272][ T554] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.810484][ T554] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.843612][ T554] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.930786][T10269] 9pnet_fd: Insufficient options for proto=fd [ 126.963691][T10269] random: crng reseeded on system resumption [ 126.984133][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.002888][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.025176][T10274] loop6: detected capacity change from 0 to 512 [ 127.055939][T10274] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 127.072197][T10282] block device autoloading is deprecated and will be removed. [ 127.299863][T10292] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 127.318590][T10292] ipvlan0: entered allmulticast mode [ 127.323929][T10292] veth0_vlan: entered allmulticast mode [ 127.340118][T10292] team0: Device ipvlan0 failed to enter team mode [ 127.346604][T10292] team0: Device ipvlan0 failed to enter team mode [ 127.625928][T10310] syz.6.1180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.763098][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.772718][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.869116][T10332] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 127.981281][T10334] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 127.993322][T10334] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 128.206791][T10386] loop4: detected capacity change from 0 to 512 [ 128.230040][T10332] macvlan2: entered promiscuous mode [ 128.235404][T10332] macvlan2: entered allmulticast mode [ 128.308415][T10332] bond14: entered promiscuous mode [ 128.344839][T10332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.393893][T10332] bond14: left promiscuous mode [ 128.406412][T10374] lo speed is unknown, defaulting to 1000 [ 128.429893][T10390] siw: device registration error -23 [ 128.560568][T10385] lo speed is unknown, defaulting to 1000 [ 128.594431][T10424] loop0: detected capacity change from 0 to 512 [ 128.612618][T10424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 128.635509][T10424] System zones: 1-12 [ 128.645683][T10424] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.1187: Directory hole found for htree index block 0 [ 128.684669][T10424] EXT4-fs (loop0): Remounting filesystem read-only [ 128.705378][T10424] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 128.714005][T10424] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 128.726078][T10424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.819254][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.879949][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.893150][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.905255][T10459] loop0: detected capacity change from 0 to 512 [ 128.920719][T10459] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 128.945999][T10459] __nla_validate_parse: 3 callbacks suppressed [ 128.946019][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 129.599710][T10512] loop4: detected capacity change from 0 to 1024 [ 129.632575][T10512] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 129.642762][T10522] loop5: detected capacity change from 0 to 2048 [ 129.658877][T10522] EXT4-fs: Ignoring removed nobh option [ 129.664549][T10512] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 129.676653][T10521] loop0: detected capacity change from 0 to 512 [ 129.684138][T10512] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 129.702400][T10522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.714647][T10521] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1195: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 129.715516][T10512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.749217][T10521] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1195: Bad quota inode: 3, type: 0 [ 129.777645][T10522] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 129.789021][T10521] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 129.806152][T10522] SELinux: failed to load policy [ 129.815923][T10521] EXT4-fs (loop0): mount failed [ 129.842622][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.874612][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.932161][T10544] loop0: detected capacity change from 0 to 1024 [ 129.955878][T10544] EXT4-fs: Ignoring removed orlov option [ 130.117185][T10544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.905298][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 130.905314][ T29] audit: type=1400 audit(1754527771.706:3579): avc: denied { create } for pid=10565 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.981409][ T29] audit: type=1326 audit(1754527771.776:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.005046][ T29] audit: type=1326 audit(1754527771.776:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.028618][ T29] audit: type=1326 audit(1754527771.776:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.119419][ T29] audit: type=1326 audit(1754527771.796:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.142996][ T29] audit: type=1326 audit(1754527771.796:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.166558][ T29] audit: type=1326 audit(1754527771.836:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.190084][ T29] audit: type=1326 audit(1754527771.836:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.213604][ T29] audit: type=1326 audit(1754527771.846:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.237303][ T29] audit: type=1326 audit(1754527771.846:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 131.297180][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.435805][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.453746][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.530450][T10588] loop5: detected capacity change from 0 to 512 [ 131.664457][T10596] lo speed is unknown, defaulting to 1000 [ 131.812616][T10588] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 131.836910][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1205'. [ 132.183455][T10623] lo speed is unknown, defaulting to 1000 [ 132.289668][T10648] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 132.331354][T10686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 132.337969][T10686] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 132.345723][T10686] vhci_hcd vhci_hcd.0: Device attached [ 132.351981][T10648] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 132.368033][T10648] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 132.421765][T10693] macvlan2: entered promiscuous mode [ 132.427419][T10693] macvlan2: entered allmulticast mode [ 132.441439][T10693] bond15: entered promiscuous mode [ 132.448932][T10693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.475758][T10693] bond15: left promiscuous mode [ 132.665431][ T36] usb 4-1: SetAddress Request (2) to port 0 [ 132.683691][ T36] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 133.219795][T10795] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.518267][T10820] loop6: detected capacity change from 0 to 128 [ 133.808848][T10857] syz.6.1217: attempt to access beyond end of device [ 133.808848][T10857] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 133.830865][T10857] syz.6.1217: attempt to access beyond end of device [ 133.830865][T10857] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 133.859682][T10857] syz.6.1217: attempt to access beyond end of device [ 133.859682][T10857] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 133.878792][T10857] syz.6.1217: attempt to access beyond end of device [ 133.878792][T10857] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 133.900076][T10857] syz.6.1217: attempt to access beyond end of device [ 133.900076][T10857] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 133.923052][T10857] syz.6.1217: attempt to access beyond end of device [ 133.923052][T10857] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 133.951256][T10857] syz.6.1217: attempt to access beyond end of device [ 133.951256][T10857] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 133.971579][T10857] syz.6.1217: attempt to access beyond end of device [ 133.971579][T10857] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 133.990572][T10857] syz.6.1217: attempt to access beyond end of device [ 133.990572][T10857] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 134.007911][T10857] syz.6.1217: attempt to access beyond end of device [ 134.007911][T10857] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 134.189929][T10795] syz.4.1216 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 134.204571][T10795] CPU: 1 UID: 0 PID: 10795 Comm: syz.4.1216 Tainted: G W 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 134.204613][T10795] Tainted: [W]=WARN [ 134.204620][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.204633][T10795] Call Trace: [ 134.204640][T10795] [ 134.204648][T10795] __dump_stack+0x1d/0x30 [ 134.204751][T10795] dump_stack_lvl+0xe8/0x140 [ 134.204776][T10795] dump_stack+0x15/0x1b [ 134.204862][T10795] dump_header+0x81/0x220 [ 134.204908][T10795] oom_kill_process+0x342/0x400 [ 134.204956][T10795] out_of_memory+0x979/0xb80 [ 134.205006][T10795] try_charge_memcg+0x5e6/0x9e0 [ 134.205060][T10795] obj_cgroup_charge_pages+0xa6/0x150 [ 134.205112][T10795] __memcg_kmem_charge_page+0x9f/0x170 [ 134.205194][T10795] __alloc_frozen_pages_noprof+0x188/0x360 [ 134.205259][T10795] alloc_pages_mpol+0xb3/0x250 [ 134.205304][T10795] alloc_pages_noprof+0x90/0x130 [ 134.205349][T10795] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 134.205482][T10795] __kvmalloc_node_noprof+0x30f/0x4e0 [ 134.205524][T10795] ? ip_set_alloc+0x1f/0x30 [ 134.205560][T10795] ? ip_set_alloc+0x1f/0x30 [ 134.205658][T10795] ? hash_netiface_create+0x21b/0x740 [ 134.205716][T10795] ? __kmalloc_cache_noprof+0x189/0x320 [ 134.205754][T10795] ip_set_alloc+0x1f/0x30 [ 134.205851][T10795] hash_netiface_create+0x282/0x740 [ 134.205890][T10795] ? __pfx_hash_netiface_create+0x10/0x10 [ 134.205938][T10795] ip_set_create+0x3cc/0x960 [ 134.205996][T10795] ? __nla_parse+0x40/0x60 [ 134.206027][T10795] nfnetlink_rcv_msg+0x4c3/0x590 [ 134.206149][T10795] netlink_rcv_skb+0x123/0x220 [ 134.206232][T10795] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 134.206354][T10795] nfnetlink_rcv+0x16b/0x1690 [ 134.206459][T10795] ? next_uptodate_folio+0x815/0x890 [ 134.206561][T10795] ? shmem_get_folio_gfp+0x92a/0xd60 [ 134.206607][T10795] ? percpu_counter_add_batch+0xb6/0x130 [ 134.206663][T10795] ? css_rstat_updated+0xb7/0x240 [ 134.206724][T10795] ? shmem_fault+0xf6/0x250 [ 134.206751][T10795] ? count_memcg_events+0x167/0x230 [ 134.206790][T10795] ? __rcu_read_unlock+0x4f/0x70 [ 134.206895][T10795] ? handle_mm_fault+0x21dd/0x2c20 [ 134.206928][T10795] ? should_fail_ex+0x30/0x280 [ 134.206973][T10795] ? selinux_nlmsg_lookup+0x99/0x890 [ 134.207004][T10795] ? __rcu_read_unlock+0x34/0x70 [ 134.207063][T10795] ? __netlink_lookup+0x266/0x2a0 [ 134.207091][T10795] netlink_unicast+0x5bd/0x690 [ 134.207207][T10795] netlink_sendmsg+0x58b/0x6b0 [ 134.207287][T10795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.207323][T10795] __sock_sendmsg+0x142/0x180 [ 134.207348][T10795] ____sys_sendmsg+0x31e/0x4e0 [ 134.207399][T10795] ___sys_sendmsg+0x17b/0x1d0 [ 134.207525][T10795] __x64_sys_sendmsg+0xd4/0x160 [ 134.207578][T10795] x64_sys_call+0x191e/0x2ff0 [ 134.207647][T10795] do_syscall_64+0xd2/0x200 [ 134.207674][T10795] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.207697][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.207718][T10795] RIP: 0033:0x7f81304febe9 [ 134.207751][T10795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.207788][T10795] RSP: 002b:00007f812ef5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.207808][T10795] RAX: ffffffffffffffda RBX: 00007f8130725fa0 RCX: 00007f81304febe9 [ 134.207824][T10795] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 134.207841][T10795] RBP: 00007f8130581e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.207859][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.207871][T10795] R13: 00007f8130726038 R14: 00007f8130725fa0 R15: 00007fff7ea2a218 [ 134.207933][T10795] [ 134.207970][T10795] memory: usage 307068kB, limit 307200kB, failcnt 290 [ 134.575230][T10795] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 134.583240][T10795] kmem: usage 304152kB, limit 9007199254740988kB, failcnt 0 [ 134.590625][T10795] Memory cgroup stats for /syz4: [ 134.591170][T10795] cache 3076096 [ 134.599641][T10795] rss 24576 [ 134.602759][T10795] shmem 2932736 [ 134.606275][T10795] mapped_file 28672 [ 134.610106][T10795] dirty 12288 [ 134.613410][T10795] writeback 0 [ 134.616866][T10795] workingset_refault_anon 65 [ 134.621657][T10795] workingset_refault_file 140 [ 134.626430][T10795] swap 491520 [ 134.629791][T10795] swapcached 28672 [ 134.633554][T10795] pgpgin 130558 [ 134.637121][T10795] pgpgout 129799 [ 134.640797][T10795] pgfault 136907 [ 134.644378][T10795] pgmajfault 49 [ 134.647845][T10795] inactive_anon 2953216 [ 134.651988][T10795] active_anon 0 [ 134.655465][T10795] inactive_file 81920 [ 134.659440][T10795] active_file 0 [ 134.662914][T10795] unevictable 0 [ 134.666456][T10795] hierarchical_memory_limit 314572800 [ 134.671865][T10795] hierarchical_memsw_limit 9223372036854771712 [ 134.678030][T10795] total_cache 3076096 [ 134.682022][T10795] total_rss 24576 [ 134.685682][T10795] total_shmem 2932736 [ 134.689656][T10795] total_mapped_file 28672 [ 134.694051][T10795] total_dirty 12288 [ 134.698005][T10795] total_writeback 0 [ 134.701868][T10795] total_workingset_refault_anon 65 [ 134.707215][T10795] total_workingset_refault_file 140 [ 134.712418][T10795] total_swap 491520 [ 134.716316][T10795] total_swapcached 28672 [ 134.720570][T10795] total_pgpgin 130558 [ 134.724577][T10795] total_pgpgout 129799 [ 134.728634][T10795] total_pgfault 136907 [ 134.732744][T10795] total_pgmajfault 49 [ 134.736750][T10795] total_inactive_anon 2953216 [ 134.741415][T10795] total_active_anon 0 [ 134.745462][T10795] total_inactive_file 81920 [ 134.749953][T10795] total_active_file 0 [ 134.753922][T10795] total_unevictable 0 [ 134.757979][T10795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1216,pid=10792,uid=0 [ 134.772672][T10795] Memory cgroup out of memory: Killed process 10792 (syz.4.1216) total-vm:95812kB, anon-rss:1072kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 134.791188][T10691] vhci_hcd: connection reset by peer [ 134.801923][ T37] vhci_hcd: stop threads [ 134.806281][ T37] vhci_hcd: release socket [ 134.810812][ T37] vhci_hcd: disconnect device [ 134.872593][T10899] loop6: detected capacity change from 0 to 2048 [ 134.882144][T10899] EXT4-fs: Ignoring removed bh option [ 134.906032][T10899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.936771][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.977190][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.987775][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.002318][T10902] loop0: detected capacity change from 0 to 512 [ 135.013887][T10902] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 135.023061][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 135.054635][T10920] 9pnet_fd: Insufficient options for proto=fd [ 135.116019][ T10] Process accounting resumed [ 135.320853][T10925] hsr0: entered promiscuous mode [ 135.328043][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 135.337237][T10925] hsr_slave_0: left promiscuous mode [ 135.343124][T10925] hsr_slave_1: left promiscuous mode [ 135.351559][T10925] hsr0 (unregistering): left promiscuous mode [ 136.042091][T10923] Process accounting resumed [ 136.102798][T10947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10947 comm=syz.0.1230 [ 136.140440][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 136.140456][ T29] audit: type=1326 audit(1754527776.949:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.170718][ T29] audit: type=1326 audit(1754527776.949:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.189598][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 136.194375][ T29] audit: type=1326 audit(1754527776.949:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.226702][ T29] audit: type=1326 audit(1754527776.949:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.250353][ T29] audit: type=1326 audit(1754527776.949:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.251209][T10955] loop4: detected capacity change from 0 to 1024 [ 136.274089][ T29] audit: type=1326 audit(1754527776.949:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.287005][T10955] EXT4-fs: Ignoring removed orlov option [ 136.303834][ T29] audit: type=1326 audit(1754527776.949:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.303875][ T29] audit: type=1326 audit(1754527776.949:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.333194][T10955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.375531][ T29] audit: type=1326 audit(1754527776.949:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.399207][ T29] audit: type=1326 audit(1754527776.949:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.5.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda009aebe9 code=0x7ffc0000 [ 136.464743][T10973] loop6: detected capacity change from 0 to 1024 [ 136.474793][T10973] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.522176][T10973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.631117][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.702611][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.711290][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.721773][T10997] loop4: detected capacity change from 0 to 512 [ 136.734425][T10997] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 136.744048][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 136.864568][T11002] lo speed is unknown, defaulting to 1000 [ 137.187945][T11030] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 137.347653][T11026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.380534][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.436773][T11026] 0ªX¹¦À: left allmulticast mode [ 137.442118][T11026] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 137.463085][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.591711][T11033] lo speed is unknown, defaulting to 1000 [ 137.734378][ T36] usb 4-1: device descriptor read/8, error -110 [ 137.795536][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 137.916915][ T36] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 137.942703][ T36] usb 4-1: enqueue for inactive port 0 [ 137.948347][ T36] usb 4-1: enqueue for inactive port 0 [ 137.954065][ T36] usb 4-1: enqueue for inactive port 0 [ 138.882008][T11083] lo speed is unknown, defaulting to 1000 [ 138.991926][T11080] lo speed is unknown, defaulting to 1000 [ 139.058774][T11117] loop4: detected capacity change from 0 to 512 [ 139.132726][T11117] EXT4-fs: Ignoring removed oldalloc option [ 139.149238][T11117] ext4: Unknown parameter 'smackfsfloor' [ 139.370723][T11164] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.401017][T11138] hub 9-0:1.0: USB hub found [ 139.411612][T11138] hub 9-0:1.0: 8 ports detected [ 139.433835][T11164] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.504338][T11164] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.583818][T11164] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.658486][ T554] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.681429][ T554] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.694564][ T554] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.703142][ T554] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.749677][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.758573][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.770949][T11191] loop0: detected capacity change from 0 to 512 [ 139.802033][ T36] usb usb4-port1: attempt power cycle [ 139.809614][T11178] netlink: 'syz.6.1252': attribute type 10 has an invalid length. [ 139.818457][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.821170][T11178] netlink: 'syz.6.1252': attribute type 10 has an invalid length. [ 139.842329][T11191] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 139.851697][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.859955][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 139.876014][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.895153][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.975296][T11211] loop5: detected capacity change from 0 to 1024 [ 139.982863][T11211] EXT4-fs: Ignoring removed orlov option [ 140.013045][T11211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.030114][T11211] EXT4-fs: Ignoring sb option on remount [ 140.035853][T11211] EXT4-fs: Ignoring removed orlov option [ 140.041729][T11211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.048537][T11211] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 140.056968][T11211] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 140.133456][T11220] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1256: bg 0: block 88: padding at end of block bitmap is not set [ 140.270594][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.449607][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 140.460155][T11254] !€ÿgid=0x000: renamed from bond_slave_0 [ 140.494502][T11258] loop6: detected capacity change from 0 to 512 [ 140.557496][T11269] loop6: detected capacity change from 0 to 512 [ 140.573697][T11269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.714394][T11278] ================================================================== [ 140.722529][T11278] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 140.730796][T11278] [ 140.733227][T11278] write to 0xffff8881004b13ec of 4 bytes by task 11269 on cpu 0: [ 140.740961][T11278] xas_set_mark+0x12b/0x140 [ 140.745493][T11278] __folio_start_writeback+0x1dd/0x440 [ 140.753073][T11278] ext4_bio_write_folio+0x5ad/0x9f0 [ 140.758303][T11278] mpage_process_page_bufs+0x4a1/0x620 [ 140.763812][T11278] mpage_prepare_extent_to_map+0x786/0xc00 [ 140.769646][T11278] ext4_do_writepages+0x708/0x2750 [ 140.774782][T11278] ext4_writepages+0x176/0x300 [ 140.779572][T11278] do_writepages+0x1c6/0x310 [ 140.784205][T11278] file_write_and_wait_range+0x156/0x2c0 [ 140.789883][T11278] generic_buffers_fsync_noflush+0x45/0x120 [ 140.795794][T11278] ext4_sync_file+0x1ab/0x690 [ 140.800499][T11278] vfs_fsync_range+0x10d/0x130 [ 140.805297][T11278] ext4_buffered_write_iter+0x34f/0x3c0 [ 140.810862][T11278] ext4_file_write_iter+0xdbf/0xf00 [ 140.816079][T11278] iter_file_splice_write+0x5f2/0x970 [ 140.821458][T11278] direct_splice_actor+0x153/0x2a0 [ 140.826574][T11278] splice_direct_to_actor+0x30f/0x680 [ 140.831952][T11278] do_splice_direct+0xda/0x150 [ 140.836723][T11278] do_sendfile+0x380/0x650 [ 140.841162][T11278] __x64_sys_sendfile64+0x105/0x150 [ 140.846386][T11278] x64_sys_call+0x2bb0/0x2ff0 [ 140.851072][T11278] do_syscall_64+0xd2/0x200 [ 140.855587][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.861490][T11278] [ 140.863819][T11278] read to 0xffff8881004b13ec of 4 bytes by task 11278 on cpu 1: [ 140.871454][T11278] filemap_write_and_wait_range+0xfc/0x340 [ 140.877283][T11278] filemap_invalidate_pages+0xa4/0x1a0 [ 140.882751][T11278] kiocb_invalidate_pages+0x6e/0x80 [ 140.887975][T11278] __iomap_dio_rw+0x5d4/0x1250 [ 140.892771][T11278] iomap_dio_rw+0x40/0x90 [ 140.897132][T11278] ext4_file_write_iter+0xad9/0xf00 [ 140.902359][T11278] iter_file_splice_write+0x5f2/0x970 [ 140.907836][T11278] direct_splice_actor+0x153/0x2a0 [ 140.912962][T11278] splice_direct_to_actor+0x30f/0x680 [ 140.918346][T11278] do_splice_direct+0xda/0x150 [ 140.923150][T11278] do_sendfile+0x380/0x650 [ 140.927592][T11278] __x64_sys_sendfile64+0x105/0x150 [ 140.932813][T11278] x64_sys_call+0x2bb0/0x2ff0 [ 140.937531][T11278] do_syscall_64+0xd2/0x200 [ 140.942057][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.947958][T11278] [ 140.950279][T11278] value changed: 0x0a000021 -> 0x04000021 [ 140.955996][T11278] [ 140.958318][T11278] Reported by Kernel Concurrency Sanitizer on: [ 140.964478][T11278] CPU: 1 UID: 0 PID: 11278 Comm: syz.6.1266 Tainted: G W 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 140.978215][T11278] Tainted: [W]=WARN [ 140.982019][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.992082][T11278] ================================================================== [ 141.006684][T11277] loop4: detected capacity change from 0 to 128 [ 141.023451][T11277] FAT-fs (loop4): bogus number of reserved sectors [ 141.030299][T11277] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.039668][T11277] FAT-fs (loop4): Can't find a valid FAT filesystem [ 141.406245][ T6124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.910871][ T36] usb usb4-port1: unable to enumerate USB device