last executing test programs: 18m40.554626047s ago: executing program 1 (id=1080): pipe2$9p(&(0x7f00000001c0), 0x0) io_setup(0x8, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x9, 0xfffffffffffffe82, [0x202, 0x9, 0x7975, 0x2, 0x9, 0xffffffff80000000], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x78) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf416, 0x0, 0x402, 0x207}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x4080}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000"], 0x50) 18m39.174085573s ago: executing program 1 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100000001090212"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m32.704458452s ago: executing program 1 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x104e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x32, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x40, 0x6}, {0x8, 0x7}, {0x1, 0x1}, {0x5, 0x2}, {0xf1, 0x5}, {0xd, 0x6}, {0x6, 0x1}], "74fec20aa6342dce"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x1}, {0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x23, 0x4}, {0x61, 0x7}, {0x6, 0x2}, {0x6}, {0x6, 0x4}, {0x9b, 0x1}, {0x1, 0x6}], "77fcc51cd8573986"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x9, 0x6}, {0x3, 0x2}, {0x5f, 0x1}, {0x2, 0x6}, {0xa6, 0x7}, {0x1a, 0x1}, {0x2}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0xff, 0x3}], "805fa14a27608325"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 18m30.152215333s ago: executing program 1 (id=1095): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9b) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 18m29.855212243s ago: executing program 1 (id=1096): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 18m29.566031361s ago: executing program 1 (id=1098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x168, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x154, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x10c, 0x8, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1414, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5eb, 0x10000, 0x10000000, 0xc, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3358, 0xf6c, 0x20000000, 0x800, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x857, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1d9e, 0x5, 0xffffffffffffffff, 0x3, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb3, 0xffffffff, 0x8, 0x4, 0x47}}]}, {0x68, 0x6, "814050c5fb95d23920b04b76f617087b7b32bf55a747c34c2b4a73e88a1ee574286d7485126586865b8112f63ecb57cdcfb7063f4e41f3711f71b8783bf186cfb79d9f4b98d033ec7f576e44786f983e799deaa38e81ee91d7c2adffe8d25cf766cc77a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) socket(0x10, 0x3, 0x0) 18m29.384552519s ago: executing program 32 (id=1098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x168, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x154, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x10c, 0x8, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1414, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5eb, 0x10000, 0x10000000, 0xc, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3358, 0xf6c, 0x20000000, 0x800, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x857, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1d9e, 0x5, 0xffffffffffffffff, 0x3, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb3, 0xffffffff, 0x8, 0x4, 0x47}}]}, {0x68, 0x6, "814050c5fb95d23920b04b76f617087b7b32bf55a747c34c2b4a73e88a1ee574286d7485126586865b8112f63ecb57cdcfb7063f4e41f3711f71b8783bf186cfb79d9f4b98d033ec7f576e44786f983e799deaa38e81ee91d7c2adffe8d25cf766cc77a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) socket(0x10, 0x3, 0x0) 16m18.194212581s ago: executing program 2 (id=1504): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JrsQ2JQeSqGBQHtOYmTFpJatYMkhNoYklEIvPbT0UGguOTdtesuhl/64tpf+DT2UhLR1QlN6KC4jjRL5hxw7seQ0/nxgrPdmRnrvO2/mzfPMIAWwZw2nf3IRByN60uRgNj+JbEZ0R5yor/dgeamQTkmsrLz6Q1Jb5/7yUiGa3pPan2X+GhFfvBlxKLe+3MrC4vREqVScy/Kj1ZkLo5WFxcPnZyamilPF2aNj4+NHjv3n2NGdi/WnrxcP3HnnpX9+fOKXN/5y8+0vkzgRB7JlzXHslOEYzrZJT7oJV3lxpwvbZcluV4Ankh6aXfWjPA7GYHRt0pL/72jNAIB2uRwRKwDAHpM4/wPAHtO4DnB/eanQmKJ+P+fK464dHG/3xYkOuPtCRPTX42/c36wv6a7fs/umv3YfdOB+UrtH0pBExNAOlD8cEddunb6RTtGm+5AAG7lyNSLODg2v7f/THm7tMwvb9a8trDPcSHxaf9H/Qed8lo5//rt+/BeRy47//trfteOfvuZj9yms/Yz1x3/u9qpszw4U2iQd/x1verbtQVP8maGuLPeH2pivJzl3vlRM+7Y/RsRI9PSl+bFNyhi59+u9Vsuax38/vvv6h2n56eujNXK3u/tWv2dyojrxNDE3u3s14m/dG8WfPGz/pMX499QWy3j5f2990GpZGn8ab2NaH397rVyP+MeG7f/oOahk0+cTR2u7w2hjp9hg//zk2/cHWpXf3P7XbqUlLRUa/wt0Qtr+A5vHP5Q0P69Z2X4ZX10f/LzVstXxn76Rlr86/o33/97ktVq6N5t3aaJanRuL6E1eWT//yKP3NvKN9dP4R/6+Kv6sBXOb7v/pSmez9MpjHn7svvP9R08ef3ul8U+m7Z9kQTy2/befuPlguqtV+Vtr//FaaiSbs77/6173uVut4FNtPAAAAAAAAAAAAAAAAAAAAAAAAADYolxEHIgkl3+YzuXy+fpveP85BnKlcqV66Fx5fnYyar+VPRQ9ucZXXQ42fR/qWPZ9+I38kTX5f0fEnyLivb59tXy+UC5N7nbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDZ3+L3/1Pf9e127QCAtunf7QoAAB23rfO/wQIAPBdanNJ7N569r611AQA6o3b+T7p3uxoAQAe5pA8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG126uTJdFr5eXmpkOYnLy7MT5cvHp4sVqbzM/OFfKE8dyE/VS5PlYr5Qnmm5Qddqb+UyuUL4zE7f2m0WqxURysLi2dmyvOz1TPnZyamimeKPR2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2rrKwOD1RKhXnJDZPXH4mqnE1a7bd3hrPU+Jstk2flfpsI9EXEe0qormX2Nf5jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd+K3AAAA//+aBB1p") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 16m17.017118008s ago: executing program 2 (id=1510): rt_sigaction(0x16, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x5c, 0xe, 0x1c}) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0x802000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r3, &(0x7f0000000040), 0x8) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 16m14.677922089s ago: executing program 2 (id=1516): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141001, 0x0) mbind(&(0x7f0000670000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0xec5, 0x1) syz_emit_vhci(&(0x7f0000019200)=ANY=[@ANYBLOB="040e44117d0c004d6b870320fa349d37bb08113bd13619c1b820b0f45e16c86c7583726b2153d2b3e39f0de79dec99d0262a2ac9a7d3bcc4e161077a9ee1d5389c6323de1a3f7b"], 0x47) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32, @ANYBLOB="00080000075005001c0012800b00010062726964676500652e3f85f1de34af0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16m12.540417649s ago: executing program 2 (id=1521): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 16m10.739843177s ago: executing program 2 (id=1525): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read$watch_queue(r3, 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) read$msr(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) 16m8.322285785s ago: executing program 2 (id=1529): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4e0, &(0x7f0000000c80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) 16m6.505298525s ago: executing program 33 (id=1529): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4e0, &(0x7f0000000c80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) 12m13.366062125s ago: executing program 3 (id=1970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffcd0a000020000000950000000000"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 12m7.865897528s ago: executing program 4 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_on}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 12m7.562058288s ago: executing program 4 (id=1977): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x4, 0x3, 0x5, @vifc_lcl_addr=@broadcast, @local}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x7ca2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$TCFLSH(r2, 0x400455c8, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="40012dbd7010fddbdf250b000000280003000100000079749dd7fe0cbccd774fe8c873d47d91e9bc91fe9fe022d75b3f6ed5a6db0f63e6ba9344fbd553c041e4aab6a1044cffbe98c63655becd9a1344440f0b635ce7620647b508a0067ada285b759babfddbcfc5a2b4163ad0cf15a31cfce7b48134f2cfec8d0bdf4f9d385e42f5e571c61561b73a7c794e0ec120856b49d91b71c5315a5700806d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2404c085) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003f050ae20"], 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000003c0)=0xffffffc0) 12m7.204632053s ago: executing program 3 (id=1978): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 12m5.990859483s ago: executing program 4 (id=1981): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141001, 0x0) mbind(&(0x7f0000670000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0xec5, 0x1) syz_emit_vhci(&(0x7f0000019200)=ANY=[@ANYBLOB="040e44117d0c004d6b870320fa349d37bb08113bd13619c1b820b0f45e16c86c7583726b2153d2b3e39f0de79dec99d0262a2ac9a7d3bcc4e161077a9ee1d5389c6323de1a3f7b"], 0x47) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="00080000075005001c0012800b00010062726964676500652e3f85f1de34af0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12m4.49702735s ago: executing program 4 (id=1983): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000680)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x0, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x36}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61, 0x0, 0x0, 0x2900}, {0x16}, {}, {}, {}, {0x7, 0x10}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xfffe}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x2da9}, {}, {}, {}, {0x1005}, {}, {0x0, 0x80}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {0x0, 0xd}, {0x0, 0x9}, {}, {0x0, 0x0, 0xc}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0x0, 0x80}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[], 0x1, 0x22d, &(0x7f0000000400)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 12m0.818219723s ago: executing program 4 (id=1986): pipe2$9p(&(0x7f00000001c0), 0x0) io_setup(0x8, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x9, 0xfffffffffffffe82, [0x202, 0x9, 0x7975, 0x2, 0x9, 0xffffffff80000000], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x78) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf416, 0x0, 0x402, 0x207}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x4080}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000"], 0x50) 11m59.557690968s ago: executing program 3 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffcd0a000020000000950000000000"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11m56.249138584s ago: executing program 4 (id=1990): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$eJzsmDGLE0EUx/8z2ewlInI2V9goeOCJXnLZQ7kmnAqClc2dqJUGbz3O7F0kt4IJCAYbG+0sBBsLv4DFFVdZ2PkFBC1UECxMYWFjs/J2ZjezN9HENd29XzH8Z957M/PeZF8RMAyzb/ny+eenJxeWVk8DOIhZTOn1bwVACKWl4f/x+b1Tz+oXX7z+8Ort1qEHu3v3o5Aoyi6U/nK+A+DN+QLC9KQ0+heJWT1ZhUz1FUic1PoqBCpa34QsJvv6ELiu9R1Dt8i/Urm9EfiVW61gjcQCDTUaPBoy+dL9+j2BNT2PoigShn270202gsBvG8LRtiGmXCI9rDlj1a8IgX4PqBv3o/tfe/yoR/OkNgtG/WqQqOkkFiGwoteXMJXURpXEyP+IM9i/YOU/NFtyJcOoJEtK1H9MpFimODyfL3yO0jlnm6aR5xoYRC3DbxcxMFEls87H/i9lTO/96cTCMV4Hw8OX9YPmOPSylUWzEZSyK5LE0zKAib+yLXJlkYiZ/u472/R1VHgkRh8hxv/9lMa9c/Ih/kumyQesVsroNmW+inXsdzcu9n5H9Y/opcAJoz85Rv+ohpt3q9ud7vzGZmPdX/e3PG/xrAAenvGqcSNSo9X3Bv25HPenA8b+xT/4utLF/UYYtmtqdIWLMsKw7cVzz/hsVnZa32/osBCXABxXE2qbbrpjwTpDuMpHxr6k5mwnhmEYhmEYhmEYhmEYhmGYccn84XkUIv4XdASe8v4dAAD//9FzXEo=") creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000002805a701bac26c840000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 11m55.574149521s ago: executing program 34 (id=1990): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000002805a701bac26c840000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 11m55.566225701s ago: executing program 3 (id=1994): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r6}, 0x18) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) 11m50.419369779s ago: executing program 3 (id=1996): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socket(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 11m49.221850098s ago: executing program 3 (id=1999): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11m33.543506894s ago: executing program 35 (id=1999): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.662193114s ago: executing program 7 (id=5844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 7.49786002s ago: executing program 7 (id=5846): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 7.377990882s ago: executing program 7 (id=5848): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_disconnect(0xffffffffffffffff) close(r1) 6.459853863s ago: executing program 7 (id=5862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 5.687574859s ago: executing program 7 (id=5865): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 5.36719002s ago: executing program 7 (id=5868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/135, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 3.913940924s ago: executing program 5 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 3.794263235s ago: executing program 5 (id=5878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.587026186s ago: executing program 5 (id=5880): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') pipe(0x0) linkat(r6, &(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") open(0x0, 0x64842, 0x389b0d52417bb201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xba6, &(0x7f00000011c0)) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001000}, 0x804) 3.23834387s ago: executing program 0 (id=5882): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_disconnect(0xffffffffffffffff) close(r1) 2.053809887s ago: executing program 0 (id=5885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.370760405s ago: executing program 0 (id=5886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xd3}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb6, 0x1a}, 0x9c) 1.339773768s ago: executing program 6 (id=5888): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000a00)='task\x00') getdents64(r4, &(0x7f0000000280)=""/208, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r6, &(0x7f0000003200)={0xc, {0x3b, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb"}}, 0x41) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.239501028s ago: executing program 5 (id=5889): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001ec0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x404c881) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x48005) 1.024300049s ago: executing program 6 (id=5890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 851.070906ms ago: executing program 6 (id=5891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) 739.431477ms ago: executing program 6 (id=5892): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) r2 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_disconnect={0x9}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) setgid(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) 470.447523ms ago: executing program 6 (id=5893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000180000001206000000000000100000001801000020646c2500000000002020207b1af8e700000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94) 361.816264ms ago: executing program 0 (id=5894): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x881, 0x9, 0x4, 0x9000000000000003, 0x136, 0xc680}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0xffff, 0x10}, {0x1}}}, 0x24}}, 0x0) 339.787816ms ago: executing program 5 (id=5895): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0xfffffffe}, 0x1c) 246.490286ms ago: executing program 6 (id=5896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000c00), 0x11, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0) 142.806636ms ago: executing program 0 (id=5897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 46.246835ms ago: executing program 5 (id=5898): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000a00)='task\x00') getdents64(r4, &(0x7f0000000280)=""/208, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r6, &(0x7f0000003200)={0xc, {0x3b, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb"}}, 0x41) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5899): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): confined pid=21749 comm="syz.7.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1602.605897][T21750] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1602.632498][ T28] audit: type=1326 audit(1761062460.695:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.7.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1602.651246][T21750] EXT4-fs (loop7): 1 truncate cleaned up [ 1602.665803][ T28] audit: type=1326 audit(1761062460.695:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.7.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1602.668109][T21735] bond0: (slave netdevsim0): Releasing backup interface [ 1602.698702][T21750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1602.702393][T21735] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.723729][ T28] audit: type=1326 audit(1761062460.695:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.7.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1602.753363][ T28] audit: type=1326 audit(1761062460.785:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.7.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1602.892110][T21735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.917895][T21735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.956335][T21735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.962371][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.978428][T21735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.032363][T21634] veth0_vlan: entered promiscuous mode [ 1603.060029][T21634] veth1_vlan: entered promiscuous mode [ 1603.271322][T21634] veth0_macvtap: entered promiscuous mode [ 1603.321939][T21634] veth1_macvtap: entered promiscuous mode [ 1603.412658][T21634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.437619][T21634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.514434][T21762] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1603.523632][T21762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.530876][T21762] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.554854][T21634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.563756][T21634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.572493][T21634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.588663][T21634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.746432][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.758314][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.797795][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.807795][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.140555][T21775] siw: device registration error -23 [ 1604.157301][T21775] loop0: detected capacity change from 0 to 512 [ 1604.175726][T21775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1604.206202][T21775] EXT4-fs (loop0): 1 truncate cleaned up [ 1604.219177][T21775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.328705][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.342744][T21784] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4775'. [ 1604.352450][T21784] IPVS: Unknown mcast interface: vet [ 1604.393622][T12867] Bluetooth: hci3: command tx timeout [ 1604.503926][T21790] loop0: detected capacity change from 0 to 512 [ 1605.005302][T21808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4785'. [ 1605.021263][T21808] IPVS: Unknown mcast interface: vet [ 1605.717023][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d167c00: rx timeout, send abort [ 1605.826191][T21832] syz.7.4797[21832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1605.826323][T21832] syz.7.4797[21832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1605.840480][T21832] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4797'. [ 1605.924601][T21834] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1605.934650][T21834] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1606.028598][T21838] loop6: detected capacity change from 0 to 1024 [ 1606.046896][T21838] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1606.077404][T21838] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1606.098515][T21838] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1606.116574][T21840] loop7: detected capacity change from 0 to 1024 [ 1606.117775][T21838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz.6.4800: Invalid inode table block 0 in block_group 0 [ 1606.139570][T21840] EXT4-fs error (device loop7): ext4_acquire_dquot:6940: comm syz.7.4802: Failed to acquire dquot type 0 [ 1606.143834][T21838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5908: Corrupt filesystem [ 1606.167388][T21840] EXT4-fs error (device loop7): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1606.183336][T21838] EXT4-fs error (device loop6): ext4_quota_write:7329: inode #3: comm syz.6.4800: mark_inode_dirty error [ 1606.186688][T21840] EXT4-fs error (device loop7): ext4_do_update_inode:5236: inode #13: comm syz.7.4802: corrupted inode contents [ 1606.213017][T21840] EXT4-fs error (device loop7): ext4_dirty_inode:6112: inode #13: comm syz.7.4802: mark_inode_dirty error [ 1606.224624][ C0] vcan0: j1939_tp_rxtimer: 0xffff888084492400: rx timeout, send abort [ 1606.224764][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d167c00: abort rx timeout. Force session deactivation [ 1606.246508][T21840] EXT4-fs error (device loop7): ext4_do_update_inode:5236: inode #13: comm syz.7.4802: corrupted inode contents [ 1606.259835][T21838] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.4800: Failed to acquire dquot type 0 [ 1606.262289][T21840] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #13: comm syz.7.4802: mark_inode_dirty error [ 1606.285458][T21840] EXT4-fs error (device loop7): ext4_do_update_inode:5236: inode #13: comm syz.7.4802: corrupted inode contents [ 1606.298112][T21838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz.6.4800: Invalid inode table block 0 in block_group 0 [ 1606.311470][T21838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5908: Corrupt filesystem [ 1606.322219][T21840] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1606.332789][T21838] EXT4-fs error (device loop6): ext4_ext_truncate:4451: inode #15: comm syz.6.4800: mark_inode_dirty error [ 1606.345966][T21840] EXT4-fs error (device loop7): ext4_do_update_inode:5236: inode #13: comm syz.7.4802: corrupted inode contents [ 1606.358284][T21838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz.6.4800: Invalid inode table block 0 in block_group 0 [ 1606.375725][T21840] EXT4-fs error (device loop7): ext4_truncate:4294: inode #13: comm syz.7.4802: mark_inode_dirty error [ 1606.387680][T21838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5908: Corrupt filesystem [ 1606.408659][T21840] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1606.418080][T21838] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 1606.435604][T21840] EXT4-fs (loop7): 1 truncate cleaned up [ 1606.442703][T21840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.457899][T21838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz.6.4800: Invalid inode table block 0 in block_group 0 [ 1606.482718][T21838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5908: Corrupt filesystem [ 1606.495178][T21840] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1606.497213][T21838] EXT4-fs error (device loop6): ext4_truncate:4294: inode #15: comm syz.6.4800: mark_inode_dirty error [ 1606.520564][T21838] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 1606.526091][ T5837] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1606.544878][T21838] EXT4-fs (loop6): 1 truncate cleaned up [ 1606.552264][T21838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1606.577016][ T5837] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1606.602598][T21851] loop0: detected capacity change from 0 to 2048 [ 1606.610198][T21851] EXT4-fs: quotafile must be on filesystem root [ 1606.615396][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.666563][T21838] netlink: 'syz.6.4800': attribute type 21 has an invalid length. [ 1606.687340][T21838] netlink: 'syz.6.4800': attribute type 6 has an invalid length. [ 1606.716250][T21838] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4800'. [ 1606.724743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888084492400: abort rx timeout. Force session deactivation [ 1606.806959][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.197478][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806af1cc00: rx timeout, send abort [ 1607.359064][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.697666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ec96c00: rx timeout, send abort [ 1607.706974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806af1cc00: abort rx timeout. Force session deactivation [ 1607.839317][T21888] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1607.877031][T21888] IPVS: Unknown mcast interface: vetN1_macvtap [ 1608.206147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ec96c00: abort rx timeout. Force session deactivation [ 1608.287639][T21893] geneve0 speed is unknown, defaulting to 1000 [ 1608.301983][T21893] lo speed is unknown, defaulting to 1000 [ 1608.837935][ T28] kauditd_printk_skb: 535 callbacks suppressed [ 1608.837961][ T28] audit: type=1326 audit(1761062467.074:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1608.934072][ T28] audit: type=1326 audit(1761062467.074:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1608.971647][ T28] audit: type=1326 audit(1761062467.074:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1608.978040][T21896] siw: device registration error -23 [ 1608.994315][ T28] audit: type=1326 audit(1761062467.114:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1608.994371][ T28] audit: type=1326 audit(1761062467.114:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1608.994418][ T28] audit: type=1326 audit(1761062467.134:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1608.994463][ T28] audit: type=1326 audit(1761062467.134:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1609.061611][T21897] loop6: detected capacity change from 0 to 512 [ 1609.069970][ T28] audit: type=1326 audit(1761062467.184:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1609.169828][T21897] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1609.179336][ T28] audit: type=1326 audit(1761062467.184:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1609.211094][ T28] audit: type=1326 audit(1761062467.184:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1609.237882][T21897] EXT4-fs (loop6): 1 truncate cleaned up [ 1609.245250][T21897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.425920][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.618926][T21910] loop6: detected capacity change from 0 to 2048 [ 1609.676107][T21910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.933297][T21922] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4836'. [ 1609.942435][T21922] IPVS: Unknown mcast interface: vetN1_macvtap [ 1610.133034][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.704556][T21940] netlink: 'syz.5.4843': attribute type 12 has an invalid length. [ 1611.700864][T21945] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4845'. [ 1611.744293][T21945] IPVS: Unknown mcast interface: vetN1_macvtap [ 1612.356108][T21968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1612.383948][T21968] IPVS: Unknown mcast interface: vetN1_macvtap [ 1612.437370][T21970] netlink: 'syz.5.4857': attribute type 6 has an invalid length. [ 1612.813949][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4867'. [ 1612.835414][T21989] IPVS: Unknown mcast interface: vetN1_macvtap [ 1613.084216][T21999] cgroup: name respecified [ 1613.155047][T21999] loop6: detected capacity change from 0 to 512 [ 1613.184563][T21999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1613.256867][T21999] EXT4-fs (loop6): 1 truncate cleaned up [ 1613.264028][T21999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.408939][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.659750][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066657800: rx timeout, send abort [ 1614.159948][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066655800: rx timeout, send abort [ 1614.168614][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066657800: abort rx timeout. Force session deactivation [ 1614.668450][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066655800: abort rx timeout. Force session deactivation [ 1615.007232][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 1615.007254][ T28] audit: type=1107 audit(1761062473.243:4118): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='`§Ku™«Ô²ª1™O‹™-ã' [ 1615.256060][ T28] audit: type=1326 audit(1761062473.483:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.314452][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4889'. [ 1615.326173][ T28] audit: type=1326 audit(1761062473.483:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.362183][T22044] IPVS: Unknown mcast interface: ip [ 1615.382735][ T28] audit: type=1326 audit(1761062473.493:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.434821][ T28] audit: type=1326 audit(1761062473.493:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.478677][ T28] audit: type=1326 audit(1761062473.493:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.530928][ T28] audit: type=1326 audit(1761062473.503:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.562165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3f400: rx timeout, send abort [ 1615.585006][ T28] audit: type=1326 audit(1761062473.503:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.614438][ T28] audit: type=1326 audit(1761062473.503:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1615.639687][ T28] audit: type=1326 audit(1761062473.503:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.7.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1616.037239][T22062] loop0: detected capacity change from 0 to 512 [ 1616.062377][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300f7c00: rx timeout, send abort [ 1616.070960][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3f400: abort rx timeout. Force session deactivation [ 1616.138603][T22062] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1616.172178][T22062] EXT4-fs (loop0): mount failed [ 1616.545368][T22077] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1616.570876][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300f7c00: abort rx timeout. Force session deactivation [ 1617.581959][T22084] bridge0: entered promiscuous mode [ 1617.602799][T22084] macvtap1: entered allmulticast mode [ 1617.624977][T22084] bridge0: entered allmulticast mode [ 1617.651135][T22084] bridge0: port 3(macvtap1) entered blocking state [ 1617.677592][T22084] bridge0: port 3(macvtap1) entered disabled state [ 1617.740916][T22084] bridge0: left allmulticast mode [ 1617.779354][T22084] bridge0: left promiscuous mode [ 1617.797220][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1617.951812][T22115] IPVS: Unknown mcast interface: ipvla [ 1618.291674][T22155] Cannot find add_set index 0 as target [ 1618.323791][ C1] vcan0: j1939_tp_rxtimer: 0xffff888143fc0c00: rx timeout, send abort [ 1618.388103][T22158] loop7: detected capacity change from 0 to 512 [ 1618.429982][T22158] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.4911: dx entry: limit 0 != root limit 125 [ 1618.456065][T22158] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.4911: Corrupt directory, running e2fsck is recommended [ 1618.476516][T22158] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1618.486022][T22158] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2249: inode #15: comm syz.7.4911: corrupted in-inode xattr: invalid ea_ino [ 1618.510282][T22158] EXT4-fs (loop7): Remounting filesystem read-only [ 1618.548691][T22158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.613889][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.807226][T22172] overlayfs: failed to clone upperpath [ 1618.823977][ C1] vcan0: j1939_tp_rxtimer: 0xffff888143fc0800: rx timeout, send abort [ 1618.832548][ C1] vcan0: j1939_tp_rxtimer: 0xffff888143fc0c00: abort rx timeout. Force session deactivation [ 1618.962631][T22175] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1619.009786][T22175] IPVS: Unknown mcast interface: ipvla [ 1619.332434][ C1] vcan0: j1939_tp_rxtimer: 0xffff888143fc0800: abort rx timeout. Force session deactivation [ 1619.937539][T22189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.129877][T22201] loop7: detected capacity change from 0 to 1024 [ 1620.163564][T22201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.219797][ T28] kauditd_printk_skb: 220 callbacks suppressed [ 1620.219814][ T28] audit: type=1326 audit(1761062478.463:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22205 comm="syz.6.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1620.249261][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082777400: rx timeout, send abort [ 1620.298960][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.328647][ T28] audit: type=1326 audit(1761062478.463:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22205 comm="syz.6.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1620.371613][T22210] geneve0 speed is unknown, defaulting to 1000 [ 1620.379967][T22210] lo speed is unknown, defaulting to 1000 [ 1620.405583][ T28] audit: type=1326 audit(1761062478.493:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22205 comm="syz.6.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1620.442956][ T28] audit: type=1326 audit(1761062478.493:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22205 comm="syz.6.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1620.749445][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082777800: rx timeout, send abort [ 1620.765406][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082777400: abort rx timeout. Force session deactivation [ 1621.257829][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082777800: abort rx timeout. Force session deactivation [ 1621.631625][T22227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.849886][T22235] loop0: detected capacity change from 0 to 2048 [ 1621.930732][T22235] loop0: p4 [ 1621.934148][T22235] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1622.278904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b766c00: rx timeout, send abort [ 1622.425203][T22251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1622.437665][T22233] loop6: detected capacity change from 0 to 32768 [ 1622.498346][T22233] loop6: p1 p2 p3 < p5 p6 > [ 1622.505014][T22233] loop6: p2 size 16775168 extends beyond EOD, truncated [ 1622.515210][T22233] loop6: p5 start 4294970168 is beyond EOD, truncated [ 1622.599019][T22256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4951'. [ 1622.608572][T22256] IPVS: Unknown mcast interface: ipvlan [ 1622.779122][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b767000: rx timeout, send abort [ 1622.787609][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b766c00: abort rx timeout. Force session deactivation [ 1623.287557][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b767000: abort rx timeout. Force session deactivation [ 1623.644929][ T28] audit: type=1326 audit(1761062481.882:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1623.714942][T22266] geneve0 speed is unknown, defaulting to 1000 [ 1623.722852][T22266] lo speed is unknown, defaulting to 1000 [ 1623.789485][ T28] audit: type=1326 audit(1761062481.912:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1623.920423][ T28] audit: type=1326 audit(1761062481.912:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1623.949196][ T28] audit: type=1326 audit(1761062481.912:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1624.049604][ T28] audit: type=1326 audit(1761062481.912:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1624.082556][ T28] audit: type=1326 audit(1761062481.932:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22268 comm="syz.7.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1624.576896][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b9800: rx timeout, send abort [ 1625.077082][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b9c00: rx timeout, send abort [ 1625.085462][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b9800: abort rx timeout. Force session deactivation [ 1625.440588][T22315] 9pnet: Could not find request transport: f [ 1625.585490][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b9c00: abort rx timeout. Force session deactivation [ 1626.410757][T22331] syzkaller0: entered promiscuous mode [ 1626.436258][T22331] syzkaller0: entered allmulticast mode [ 1626.665016][T22339] Cannot find set identified by id 0 to match [ 1626.891950][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1626.891968][ T28] audit: type=1326 audit(1761062485.132:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1626.929573][ T28] audit: type=1326 audit(1761062485.132:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1626.959363][ T28] audit: type=1326 audit(1761062485.162:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.016140][ T28] audit: type=1326 audit(1761062485.172:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.088785][ T28] audit: type=1326 audit(1761062485.172:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.123491][ T28] audit: type=1326 audit(1761062485.172:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.169528][ T28] audit: type=1326 audit(1761062485.172:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.226220][ T28] audit: type=1326 audit(1761062485.172:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.292408][ T28] audit: type=1326 audit(1761062485.172:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.315326][ T28] audit: type=1326 audit(1761062485.172:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22351 comm="syz.0.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1627.451815][T22371] loop0: detected capacity change from 0 to 1024 [ 1627.460493][T22371] EXT4-fs: Ignoring removed oldalloc option [ 1627.467662][T22371] EXT4-fs: Ignoring removed bh option [ 1627.476295][T22371] ext4: Bad value for 'min_batch_time' [ 1627.654040][T22377] overlayfs: failed to clone upperpath [ 1628.859000][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5010'. [ 1629.019376][T22402] loop6: detected capacity change from 0 to 128 [ 1629.029369][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880300f5c00: rx timeout, send abort [ 1629.141571][T22404] syz.6.5014: attempt to access beyond end of device [ 1629.141571][T22404] loop6: rw=2049, sector=145, nr_sectors = 768 limit=128 [ 1629.322294][T22401] syz.6.5014: attempt to access beyond end of device [ 1629.322294][T22401] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1629.347381][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.347381][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.363343][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.363343][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.389253][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.389253][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.416622][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.416622][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.432476][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.432476][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.446026][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.446026][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.465321][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.465321][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.481340][T22402] syz.6.5014: attempt to access beyond end of device [ 1629.481340][T22402] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1629.529597][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031520400: rx timeout, send abort [ 1629.538176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880300f5c00: abort rx timeout. Force session deactivation [ 1630.038064][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031520400: abort rx timeout. Force session deactivation [ 1630.837925][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5019'. [ 1630.846989][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5019'. [ 1631.919351][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5021'. [ 1632.212644][T22432] siw: device registration error -23 [ 1632.225866][T22432] loop6: detected capacity change from 0 to 512 [ 1632.246285][T22432] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1632.293815][T22432] EXT4-fs (loop6): 1 truncate cleaned up [ 1632.323374][T22432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1632.390254][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1632.390272][ T28] audit: type=1800 audit(1761062490.621:4419): pid=22432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5025" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1632.550355][ T28] audit: type=1326 audit(1761062490.791:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1632.914661][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.011776][ T28] audit: type=1326 audit(1761062490.791:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.288016][ T28] audit: type=1326 audit(1761062490.791:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.379424][ T28] audit: type=1326 audit(1761062490.791:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.402631][ T28] audit: type=1326 audit(1761062490.791:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.425239][ T28] audit: type=1326 audit(1761062490.791:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.449140][ T28] audit: type=1326 audit(1761062490.821:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22450 comm="syz.7.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1633.689929][T22464] geneve0 speed is unknown, defaulting to 1000 [ 1633.700671][T22464] lo speed is unknown, defaulting to 1000 [ 1634.293675][T22472] geneve0 speed is unknown, defaulting to 1000 [ 1634.350525][T22472] lo speed is unknown, defaulting to 1000 [ 1634.383768][T22478] loop6: detected capacity change from 0 to 512 [ 1634.419495][T22478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1634.449905][T22478] EXT4-fs (loop6): 1 truncate cleaned up [ 1634.463497][T22478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1634.619249][ T28] audit: type=1800 audit(1761062492.791:4427): pid=22478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5040" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1635.473363][T22474] siw: device registration error -23 [ 1635.611978][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.014211][ T28] audit: type=1326 audit(1761062494.251:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.5.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1636.407661][T22514] siw: device registration error -23 [ 1636.473690][T22514] loop7: detected capacity change from 0 to 512 [ 1636.505319][T22514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1636.560174][T22514] EXT4-fs (loop7): 1 truncate cleaned up [ 1636.580216][T22514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.752369][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.298119][T22542] loop7: detected capacity change from 0 to 512 [ 1637.462920][T22542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1637.476096][T22542] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.023620][T22551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5072'. [ 1638.112720][T22137] tipc: Disabling bearer [ 1638.164165][T22137] tipc: Left network mode [ 1638.535794][T22137] ip6gretap0 (unregistering): left promiscuous mode [ 1638.591288][T22560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5076'. [ 1638.623173][T22552] siw: device registration error -23 [ 1638.641888][T22552] loop6: detected capacity change from 0 to 512 [ 1638.660813][T22552] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1638.755469][T22552] EXT4-fs (loop6): 1 truncate cleaned up [ 1638.765440][T22552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1638.877892][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1638.877910][ T28] audit: type=1800 audit(1761062497.111:4456): pid=22547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5070" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1639.346394][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.528687][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.547826][ T28] audit: type=1326 audit(1761062497.780:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.607554][ T28] audit: type=1326 audit(1761062497.780:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.686589][ T28] audit: type=1326 audit(1761062497.810:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.756659][T22137] gretap0 (unregistering): left promiscuous mode [ 1639.772036][ T28] audit: type=1326 audit(1761062497.810:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.825255][ T28] audit: type=1326 audit(1761062497.820:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.857355][ T28] audit: type=1326 audit(1761062497.840:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.909052][ T28] audit: type=1326 audit(1761062497.840:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1639.962827][ T28] audit: type=1326 audit(1761062497.840:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1640.022419][ T28] audit: type=1326 audit(1761062497.840:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1641.640334][T22613] siw: device registration error -23 [ 1641.876241][T22628] loop7: detected capacity change from 0 to 1024 [ 1641.900780][T22628] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1641.911262][T22628] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1641.925839][T22628] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1641.958697][T22628] JBD2: no valid journal superblock found [ 1641.964610][T22628] EXT4-fs (loop7): Could not load journal inode [ 1642.222702][T22636] loop0: detected capacity change from 0 to 1024 [ 1642.251207][T22636] EXT4-fs: Ignoring removed orlov option [ 1642.287143][T22636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.098712][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.330177][T22137] team0 (unregistering): Port device vlan0 removed [ 1644.150461][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 1644.150479][ T28] audit: type=1326 audit(1761062502.390:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.7.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1644.180848][ T28] audit: type=1326 audit(1761062502.420:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.7.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1644.237526][ T28] audit: type=1326 audit(1761062502.420:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.7.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1644.263992][T22669] siw: device registration error -23 [ 1644.265348][ T28] audit: type=1326 audit(1761062502.420:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.7.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1644.297825][T22669] loop7: detected capacity change from 0 to 512 [ 1644.307333][ T28] audit: type=1326 audit(1761062502.420:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.7.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1644.330640][T22669] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1644.347164][ T28] audit: type=1326 audit(1761062502.440:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22666 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1644.371153][ T28] audit: type=1326 audit(1761062502.440:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22666 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1644.394861][ T28] audit: type=1326 audit(1761062502.450:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22666 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1644.417844][ T28] audit: type=1326 audit(1761062502.450:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22666 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1644.429504][T22669] EXT4-fs (loop7): 1 truncate cleaned up [ 1644.440510][ T28] audit: type=1326 audit(1761062502.450:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22666 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1644.477733][T22669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1645.026886][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.115415][T22682] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1645.115415][T22682] program syz.0.5126 not setting count and/or reply_len properly [ 1646.792245][T22137] bond0 (unregistering): Released all slaves [ 1646.973383][T22110] smc: removing ib device sz1 [ 1647.039180][T22624] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5105'. [ 1647.059355][T22668] netlink: 8 bytes leftover after parsing attributes in process `'(/^'. [ 1647.268686][T22712] loop0: detected capacity change from 0 to 256 [ 1647.285057][T22712] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1647.577075][T22712] FAT-fs (loop0): Directory bread(block 64) failed [ 1647.583991][T22712] FAT-fs (loop0): Directory bread(block 65) failed [ 1647.591362][T22712] FAT-fs (loop0): Directory bread(block 66) failed [ 1647.598139][T22712] FAT-fs (loop0): Directory bread(block 67) failed [ 1647.605723][T22712] FAT-fs (loop0): Directory bread(block 68) failed [ 1647.612475][T22712] FAT-fs (loop0): Directory bread(block 69) failed [ 1647.619935][T22712] FAT-fs (loop0): Directory bread(block 70) failed [ 1647.626649][T22712] FAT-fs (loop0): Directory bread(block 71) failed [ 1647.635328][T22712] FAT-fs (loop0): Directory bread(block 72) failed [ 1647.642373][T22712] FAT-fs (loop0): Directory bread(block 73) failed [ 1649.596256][ T28] kauditd_printk_skb: 335 callbacks suppressed [ 1649.596271][ T28] audit: type=1326 audit(1761062507.829:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1649.737150][ T28] audit: type=1326 audit(1761062507.869:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1649.796097][ T28] audit: type=1326 audit(1761062507.879:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1649.871059][T22747] loop7: detected capacity change from 0 to 256 [ 1649.894689][ T28] audit: type=1326 audit(1761062507.879:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1649.966242][ T28] audit: type=1326 audit(1761062507.879:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.026162][ T28] audit: type=1326 audit(1761062507.879:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.087139][ T28] audit: type=1326 audit(1761062507.879:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.111089][ T28] audit: type=1326 audit(1761062507.879:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.112374][T22747] FAT-fs (loop7): Directory bread(block 64) failed [ 1650.133897][ T28] audit: type=1326 audit(1761062507.879:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.133950][ T28] audit: type=1326 audit(1761062507.879:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.5.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2d8efc9 code=0x7ffc0000 [ 1650.156064][T22750] bond_slave_0: entered promiscuous mode [ 1650.193039][T22750] bond_slave_1: entered promiscuous mode [ 1650.218842][T22747] FAT-fs (loop7): Directory bread(block 65) failed [ 1650.225565][T22747] FAT-fs (loop7): Directory bread(block 66) failed [ 1650.254631][T22750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1650.280397][T22747] FAT-fs (loop7): Directory bread(block 67) failed [ 1650.287093][T22747] FAT-fs (loop7): Directory bread(block 68) failed [ 1650.297459][T22750] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1650.308709][T22747] FAT-fs (loop7): Directory bread(block 69) failed [ 1650.315374][T22747] FAT-fs (loop7): Directory bread(block 70) failed [ 1650.349018][T22747] FAT-fs (loop7): Directory bread(block 71) failed [ 1650.355720][T22747] FAT-fs (loop7): Directory bread(block 72) failed [ 1650.378880][T22747] FAT-fs (loop7): Directory bread(block 73) failed [ 1650.753759][T22762] loop6: detected capacity change from 0 to 8192 [ 1651.371224][T22762] netem: incorrect ge model size [ 1651.377009][T22762] netem: change failed [ 1651.568227][T22137] IPVS: stop unused estimator thread 0... [ 1652.055713][T22790] netlink: 'syz.7.5175': attribute type 4 has an invalid length. [ 1652.074737][T22791] siw: device registration error -23 [ 1653.354736][T22833] loop0: detected capacity change from 0 to 1024 [ 1653.362361][T22833] EXT4-fs: Ignoring removed mblk_io_submit option [ 1653.373843][T22833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1653.423495][T22833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1653.464426][T22840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5198'. [ 1653.498185][T22833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1653.544050][T22833] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1653.557235][T22833] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1653.557235][T22833] [ 1653.579271][T22833] EXT4-fs (loop0): Total free blocks count 0 [ 1653.585344][T22833] EXT4-fs (loop0): Free/Dirty block details [ 1653.607947][T22833] EXT4-fs (loop0): free_blocks=20480 [ 1653.622615][T22833] EXT4-fs (loop0): dirty_blocks=96 [ 1653.634684][T22833] EXT4-fs (loop0): Block reservation details [ 1653.669146][T22833] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 1653.710826][T22848] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5202'. [ 1653.753404][T22103] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1655.681422][T22865] loop0: detected capacity change from 0 to 256 [ 1656.216222][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1656.216239][ T28] audit: type=1326 audit(1761062514.448:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.291082][T22879] netlink: 720 bytes leftover after parsing attributes in process `syz.6.5215'. [ 1656.357421][ T28] audit: type=1326 audit(1761062514.488:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.465623][ T28] audit: type=1326 audit(1761062514.498:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.733654][ T28] audit: type=1326 audit(1761062514.498:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.776815][ T28] audit: type=1326 audit(1761062514.498:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.799649][ T28] audit: type=1326 audit(1761062514.508:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.831940][ T28] audit: type=1326 audit(1761062514.508:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.906962][ T28] audit: type=1326 audit(1761062514.508:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.929714][ T28] audit: type=1326 audit(1761062514.508:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1656.952566][ T28] audit: type=1326 audit(1761062514.508:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1657.018654][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1657.777440][T22891] geneve0 speed is unknown, defaulting to 1000 [ 1658.142782][T22897] netlink: 'syz.5.5222': attribute type 4 has an invalid length. [ 1658.308422][T22903] siw: device registration error -23 [ 1658.437161][T22908] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1658.443837][T22908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1658.454204][T22908] vhci_hcd vhci_hcd.0: Device attached [ 1658.465994][T22908] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.478277][T22908] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 1658.485019][T22908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1658.497249][T22908] vhci_hcd vhci_hcd.0: Device attached [ 1658.510232][T22908] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(16) [ 1658.516888][T22908] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1658.529354][T22908] vhci_hcd vhci_hcd.0: Device attached [ 1658.542465][T22908] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18) [ 1658.549119][T22908] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1658.557407][T22908] vhci_hcd vhci_hcd.0: Device attached [ 1658.598472][T22904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.608783][T22904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.645891][T22915] vhci_hcd: connection closed [ 1658.646144][T22911] vhci_hcd: connection closed [ 1658.646680][T22913] vhci_hcd: connection closed [ 1658.657152][T22909] vhci_hcd: connection closed [ 1658.661012][ T1125] vhci_hcd: stop threads [ 1658.661984][ T27] vhci_hcd: vhci_device speed not set [ 1658.666927][ T1125] vhci_hcd: release socket [ 1658.681464][ T1125] vhci_hcd: disconnect device [ 1658.686825][ T1125] vhci_hcd: stop threads [ 1658.694165][ T1125] vhci_hcd: release socket [ 1658.698827][ T1125] vhci_hcd: disconnect device [ 1658.705911][ T1125] vhci_hcd: stop threads [ 1658.711069][ T1125] vhci_hcd: release socket [ 1658.715608][ T1125] vhci_hcd: disconnect device [ 1658.720847][ T1125] vhci_hcd: stop threads [ 1658.725125][ T1125] vhci_hcd: release socket [ 1658.730454][ T1125] vhci_hcd: disconnect device [ 1658.740073][ T27] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1658.748837][ T27] usb 47-1: enqueue for inactive port 0 [ 1658.829630][ T27] vhci_hcd: vhci_device speed not set [ 1659.190493][T22922] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1659.264078][T22923] siw: device registration error -23 [ 1659.298838][T22923] loop0: detected capacity change from 0 to 512 [ 1659.313081][T22923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1659.391469][T22923] EXT4-fs (loop0): 1 truncate cleaned up [ 1659.418334][T22923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.640439][T12867] Bluetooth: hci4: command 0x0406 tx timeout [ 1660.723968][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.786594][T22937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1661.493850][T22950] xt_CT: No such helper "snmp_trap" [ 1661.933168][T22953] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.994594][T22957] netlink: 'syz.6.5241': attribute type 1 has an invalid length. [ 1662.086993][T22958] bond1: (slave ip6gretap1): making interface the new active one [ 1662.096356][T22958] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1662.106079][T22958] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1662.114133][T22958] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1662.217663][T22953] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.240963][T22968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1662.241222][T22966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1662.377626][T22953] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.537032][T22953] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.763610][T22953] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.796251][T22953] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.822191][T22953] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.858723][T22953] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.174003][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1663.285437][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1663.285454][ T28] audit: type=1326 audit(1761062523.525:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.347952][ T28] audit: type=1326 audit(1761062523.525:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.378944][ T28] audit: type=1326 audit(1761062523.565:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.406795][ T28] audit: type=1326 audit(1761062523.565:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.433422][ T28] audit: type=1326 audit(1761062523.565:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.462578][ T28] audit: type=1326 audit(1761062523.575:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.535985][ T28] audit: type=1326 audit(1761062523.575:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.572549][ T28] audit: type=1326 audit(1761062523.575:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.626855][ T28] audit: type=1326 audit(1761062523.575:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.683528][ T28] audit: type=1326 audit(1761062523.575:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22993 comm="syz.7.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1663.905592][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5266'. [ 1664.003714][T23015] loop0: detected capacity change from 0 to 128 [ 1664.143887][T23021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5270'. [ 1664.616762][T23030] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1665.175714][T23035] siw: device registration error -23 [ 1665.193011][T23035] loop7: detected capacity change from 0 to 512 [ 1665.209628][T23035] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1665.244080][T23035] EXT4-fs (loop7): 1 truncate cleaned up [ 1665.251920][T23035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1665.448663][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.560274][T23044] pim6reg: entered allmulticast mode [ 1665.624234][T23044] pim6reg: left allmulticast mode [ 1666.077523][T23061] loop7: detected capacity change from 0 to 128 [ 1666.175618][T23064] siw: device registration error -23 [ 1666.191674][T23064] loop6: detected capacity change from 0 to 512 [ 1666.215442][T23064] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1666.388115][T23064] EXT4-fs (loop6): 1 truncate cleaned up [ 1666.441101][T23064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.599162][T23070] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1667.674355][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.757362][T23076] loop0: detected capacity change from 0 to 1024 [ 1667.787872][T23076] EXT4-fs: inline encryption not supported [ 1667.830419][T23078] syz.6.5290[23078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1667.830556][T23078] syz.6.5290[23078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1667.860618][T23076] EXT4-fs: Ignoring removed i_version option [ 1667.938013][T23076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1668.021579][T23076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1668.213744][T23088] Cannot find add_set index 0 as target [ 1668.386253][T23092] loop7: detected capacity change from 0 to 512 [ 1668.414405][T23092] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.5296: casefold flag without casefold feature [ 1668.451969][T23092] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5296: couldn't read orphan inode 15 (err -117) [ 1668.478984][T23092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1668.633768][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.808483][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.868905][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5300'. [ 1669.162122][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 1669.162140][ T28] audit: type=1326 audit(1761062529.405:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.209477][ T28] audit: type=1326 audit(1761062529.405:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.259494][ T28] audit: type=1326 audit(1761062529.435:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.299665][ T28] audit: type=1326 audit(1761062529.435:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.354137][ T28] audit: type=1326 audit(1761062529.435:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.417649][ T28] audit: type=1326 audit(1761062529.465:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.509754][ T28] audit: type=1326 audit(1761062529.465:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.583916][T23112] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1669.590588][T23112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1669.606333][ T28] audit: type=1326 audit(1761062529.465:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.610310][T23112] vhci_hcd vhci_hcd.0: Device attached [ 1669.653051][T23110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1669.676318][ T28] audit: type=1326 audit(1761062529.475:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.728073][T23110] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 1669.734735][T23110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1669.759537][ T28] audit: type=1326 audit(1761062529.475:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23106 comm="syz.7.5303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1669.780029][T23110] vhci_hcd vhci_hcd.0: Device attached [ 1669.808142][T23112] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(17) [ 1669.814817][T23112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1669.823300][T11515] vhci_hcd: vhci_device speed not set [ 1669.860693][T23112] vhci_hcd vhci_hcd.0: Device attached [ 1669.876006][T23110] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(16) [ 1669.882677][T23110] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1669.899864][T23110] vhci_hcd vhci_hcd.0: Device attached [ 1669.919520][T11515] usb 47-1: new full-speed USB device number 5 using vhci_hcd [ 1669.919687][T23110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1669.954954][T23110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1670.084230][T23123] vhci_hcd: connection closed [ 1670.084536][T23120] vhci_hcd: connection closed [ 1670.087146][T22128] vhci_hcd: stop threads [ 1670.103028][T23118] vhci_hcd: connection closed [ 1670.103272][T23114] vhci_hcd: connection reset by peer [ 1670.129618][T22128] vhci_hcd: release socket [ 1670.134250][T22128] vhci_hcd: disconnect device [ 1670.154533][T22128] vhci_hcd: stop threads [ 1670.158867][T22128] vhci_hcd: release socket [ 1670.177534][T22128] vhci_hcd: disconnect device [ 1670.187591][T22128] vhci_hcd: stop threads [ 1670.194396][T22128] vhci_hcd: release socket [ 1670.205492][T22128] vhci_hcd: disconnect device [ 1670.220103][T22128] vhci_hcd: stop threads [ 1670.224535][T22128] vhci_hcd: release socket [ 1670.229090][T22128] vhci_hcd: disconnect device [ 1670.504889][T23133] siw: device registration error -23 [ 1670.895834][T12867] Bluetooth: hci2: command 0x0406 tx timeout [ 1670.945862][T23140] loop7: detected capacity change from 0 to 512 [ 1670.979461][T23140] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1671.019975][T23140] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1671.052616][T23140] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.5314: Block bitmap for bg 0 marked uninitialized [ 1671.085698][T23140] EXT4-fs (loop7): Remounting filesystem read-only [ 1671.104874][T23140] EXT4-fs (loop7): 1 orphan inode deleted [ 1671.120977][T23140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1671.163156][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.901125][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.165815][T23165] siw: device registration error -23 [ 1673.203568][T23169] loop0: detected capacity change from 0 to 512 [ 1673.264983][T23169] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1673.443517][T23169] EXT4-fs (loop0): 1 truncate cleaned up [ 1673.453362][T23169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.871011][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.959721][T23179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5329'. [ 1674.435608][T23195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1674.677797][T23197] loop0: detected capacity change from 0 to 512 [ 1674.878578][T23197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.892022][T23197] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.060044][T11515] vhci_hcd: vhci_device speed not set [ 1675.296199][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 1675.296216][ T28] audit: type=1326 audit(1761062535.535:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1675.407596][T23202] siw: device registration error -23 [ 1675.420208][ T28] audit: type=1326 audit(1761062535.585:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1675.503042][T23204] loop7: detected capacity change from 0 to 512 [ 1675.539966][ T28] audit: type=1326 audit(1761062535.585:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a44f8f003 code=0x7ffc0000 [ 1675.566502][T23204] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1675.623815][T23204] EXT4-fs (loop7): 1 truncate cleaned up [ 1675.631249][T23204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.657777][ T28] audit: type=1326 audit(1761062535.585:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a44f8f003 code=0x7ffc0000 [ 1675.773534][ T28] audit: type=1326 audit(1761062535.585:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1675.886102][ T28] audit: type=1326 audit(1761062535.585:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1675.965805][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.994271][ T28] audit: type=1326 audit(1761062535.605:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1676.072353][ T28] audit: type=1326 audit(1761062535.605:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1676.173715][ T28] audit: type=1326 audit(1761062535.605:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1676.254709][ T28] audit: type=1326 audit(1761062535.615:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.7.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1676.663246][T23219] loop6: detected capacity change from 0 to 1024 [ 1676.694306][T23219] EXT4-fs: Ignoring removed bh option [ 1676.727466][T23219] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1676.816267][T23219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.884787][T23219] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.310462][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.596061][T23247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5358'. [ 1677.874850][T23255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5362'. [ 1678.134340][T23261] loop6: detected capacity change from 0 to 512 [ 1678.210261][T23261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.223468][T23261] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1678.976988][T23273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5369'. [ 1680.197045][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.208901][T23291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.350793][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1680.350811][ T28] audit: type=1326 audit(1761062540.595:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.386961][T23291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.424027][ T28] audit: type=1326 audit(1761062540.595:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.463804][ T28] audit: type=1326 audit(1761062540.635:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.492231][ T28] audit: type=1326 audit(1761062540.645:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.523151][ T28] audit: type=1326 audit(1761062540.645:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.565276][T23291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.586350][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5381'. [ 1680.592552][ T28] audit: type=1326 audit(1761062540.645:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.629337][ T28] audit: type=1326 audit(1761062540.645:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.694425][ T28] audit: type=1326 audit(1761062540.645:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.757416][ T28] audit: type=1326 audit(1761062540.645:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.821405][T23291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.867352][ T28] audit: type=1326 audit(1761062540.645:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.6.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1680.962211][T23291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.981287][T23291] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.001888][T23291] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.021792][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1681.025240][T23291] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.124995][T23317] pim6reg: entered allmulticast mode [ 1682.251105][T23329] siw: device registration error -23 [ 1682.301190][T23329] loop0: detected capacity change from 0 to 512 [ 1682.349010][T23329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1682.388313][T23329] EXT4-fs (loop0): 1 truncate cleaned up [ 1682.406210][T23329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1682.550523][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5398'. [ 1682.563099][T23343] hsr_slave_0: left promiscuous mode [ 1682.574257][T23343] hsr_slave_1: left promiscuous mode [ 1682.593039][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.731473][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5399'. [ 1684.399752][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5411'. [ 1684.625963][T23384] netlink: 'syz.7.5414': attribute type 1 has an invalid length. [ 1685.003626][T23399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5421'. [ 1685.312072][T23411] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 1685.542903][T23413] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1685.549595][T23413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1685.601851][T23413] vhci_hcd vhci_hcd.0: Device attached [ 1685.615382][T23413] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1685.648475][T23413] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 1685.655160][T23413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1685.666333][T23413] vhci_hcd vhci_hcd.0: Device attached [ 1685.681895][T23413] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(16) [ 1685.688567][T23413] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1685.709120][T23413] vhci_hcd vhci_hcd.0: Device attached [ 1685.730564][T23420] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(19) [ 1685.737254][T23420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1685.759373][T23440] geneve0 speed is unknown, defaulting to 1000 [ 1685.777866][T23413] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1685.784560][T23420] vhci_hcd vhci_hcd.0: Device attached [ 1685.786205][T20607] vhci_hcd: vhci_device speed not set [ 1685.808904][T23413] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1685.866407][T23441] vhci_hcd: connection closed [ 1685.866844][T22137] vhci_hcd: stop threads [ 1685.877840][T23427] vhci_hcd: connection closed [ 1685.878390][T23435] vhci_hcd: connection closed [ 1685.883315][T20607] usb 47-1: new full-speed USB device number 6 using vhci_hcd [ 1685.899539][T23437] vhci_hcd: connection closed [ 1685.899765][T22137] vhci_hcd: release socket [ 1685.915270][T23428] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1685.915285][T22137] vhci_hcd: disconnect device [ 1685.949122][T22137] vhci_hcd: stop threads [ 1685.953542][T22137] vhci_hcd: release socket [ 1685.958078][T22137] vhci_hcd: disconnect device [ 1685.967473][T22137] vhci_hcd: stop threads [ 1685.979562][T22137] vhci_hcd: release socket [ 1685.999274][T22137] vhci_hcd: disconnect device [ 1686.011941][T22137] vhci_hcd: stop threads [ 1686.025961][T22137] vhci_hcd: release socket [ 1686.032931][T22137] vhci_hcd: disconnect device [ 1686.643973][T23468] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1686.661729][T23451] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1686.827285][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5453'. [ 1686.982231][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1686.982249][ T28] audit: type=1326 audit(1761062547.225:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.021934][ T28] audit: type=1326 audit(1761062547.225:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.046881][ T28] audit: type=1326 audit(1761062547.255:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.082878][T23484] siw: device registration error -23 [ 1687.097001][T23484] loop0: detected capacity change from 0 to 512 [ 1687.099843][ T28] audit: type=1326 audit(1761062547.255:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a7db8f003 code=0x7ffc0000 [ 1687.126381][T23484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1687.136905][ T28] audit: type=1326 audit(1761062547.255:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a7db8f003 code=0x7ffc0000 [ 1687.160007][ T28] audit: type=1326 audit(1761062547.255:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.182706][ T28] audit: type=1326 audit(1761062547.255:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.184220][T23484] EXT4-fs (loop0): 1 truncate cleaned up [ 1687.230982][T23484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.256220][ T28] audit: type=1326 audit(1761062547.265:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.300569][ T28] audit: type=1326 audit(1761062547.265:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.326945][ T28] audit: type=1326 audit(1761062547.265:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23481 comm="syz.0.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1687.356653][T23495] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1687.363333][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1687.424557][T23495] vhci_hcd vhci_hcd.0: Device attached [ 1687.434222][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.468937][T23502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1687.500329][T23495] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 1687.507008][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1687.522952][T23495] vhci_hcd vhci_hcd.0: Device attached [ 1687.555281][T23495] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 1687.561951][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1687.603932][T23495] vhci_hcd vhci_hcd.0: Device attached [ 1687.619857][T13229] vhci_hcd: vhci_device speed not set [ 1687.626848][T23502] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 1687.633513][T23502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1687.649636][T23502] vhci_hcd vhci_hcd.0: Device attached [ 1687.680188][T23495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1687.690189][T13229] usb 45-1: new full-speed USB device number 8 using vhci_hcd [ 1687.694189][T23495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1687.724109][T23501] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5460'. [ 1687.804743][T23504] vhci_hcd: connection closed [ 1687.804982][T23507] vhci_hcd: connection closed [ 1687.810456][T22128] vhci_hcd: stop threads [ 1687.819727][T23513] vhci_hcd: connection closed [ 1687.820225][T23496] vhci_hcd: connection reset by peer [ 1687.836130][T22128] vhci_hcd: release socket [ 1687.860582][T22128] vhci_hcd: disconnect device [ 1687.870163][T22128] vhci_hcd: stop threads [ 1687.874477][T22128] vhci_hcd: release socket [ 1687.886704][T22128] vhci_hcd: disconnect device [ 1687.896510][T22128] vhci_hcd: stop threads [ 1687.903386][T22128] vhci_hcd: release socket [ 1687.907932][T22128] vhci_hcd: disconnect device [ 1687.923985][T22128] vhci_hcd: stop threads [ 1687.928362][T22128] vhci_hcd: release socket [ 1687.943684][T22128] vhci_hcd: disconnect device [ 1688.254314][T23530] siw: device registration error -23 [ 1688.306529][T23530] loop7: detected capacity change from 0 to 512 [ 1688.322719][T23530] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1688.339676][T23530] EXT4-fs (loop7): 1 truncate cleaned up [ 1688.348395][T23530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.800911][T23544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5476'. [ 1689.162418][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.505495][T23552] geneve0 speed is unknown, defaulting to 1000 [ 1690.159152][T23566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1690.374424][T23569] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1690.381112][T23569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1690.399223][T23569] vhci_hcd vhci_hcd.0: Device attached [ 1690.420064][T23574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1690.434105][T23569] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 1690.440786][T23569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1690.469355][T23569] vhci_hcd vhci_hcd.0: Device attached [ 1690.495353][T23574] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(17) [ 1690.502037][T23574] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1690.516600][T23574] vhci_hcd vhci_hcd.0: Device attached [ 1690.571449][T23569] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(16) [ 1690.578135][T23569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1690.609795][T23569] vhci_hcd vhci_hcd.0: Device attached [ 1690.618108][T23574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1690.629557][T23569] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1690.656145][T23581] vhci_hcd: connection closed [ 1690.656246][T23577] vhci_hcd: connection closed [ 1690.664579][T23575] vhci_hcd: connection closed [ 1690.673529][T23572] vhci_hcd: connection closed [ 1690.678916][ T1125] vhci_hcd: stop threads [ 1690.700933][ T1125] vhci_hcd: release socket [ 1690.705519][ T1125] vhci_hcd: disconnect device [ 1690.721427][ T1125] vhci_hcd: stop threads [ 1690.726360][ T1125] vhci_hcd: release socket [ 1690.731829][ T1125] vhci_hcd: disconnect device [ 1690.739469][ T1125] vhci_hcd: stop threads [ 1690.745250][ T1125] vhci_hcd: release socket [ 1690.749982][ T1125] vhci_hcd: disconnect device [ 1690.755137][ T1125] vhci_hcd: stop threads [ 1690.765277][ T1125] vhci_hcd: release socket [ 1690.775462][ T1125] vhci_hcd: disconnect device [ 1691.041655][T20607] vhci_hcd: vhci_device speed not set [ 1691.166231][T23605] veth0_to_team: entered promiscuous mode [ 1691.262870][T23600] netlink: 'syz.6.5497': attribute type 4 has an invalid length. [ 1691.378570][T12867] Bluetooth: hci0: command 0x0406 tx timeout [ 1691.532768][T23613] siw: device registration error -23 [ 1691.581143][T23613] loop0: detected capacity change from 0 to 512 [ 1691.599179][T23613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1691.624659][T23613] EXT4-fs (loop0): 1 truncate cleaned up [ 1691.635776][T23613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.900020][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.099689][T13229] vhci_hcd: vhci_device speed not set [ 1693.123952][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 1693.123969][ T28] audit: type=1326 audit(1761062553.365:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.194342][ T28] audit: type=1326 audit(1761062553.365:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.219119][T23653] siw: device registration error -23 [ 1693.239002][ T28] audit: type=1326 audit(1761062553.365:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1693.283986][T23653] loop6: detected capacity change from 0 to 512 [ 1693.290787][ T28] audit: type=1326 audit(1761062553.365:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1693.315891][T23653] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1693.357193][ T28] audit: type=1326 audit(1761062553.365:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.357355][T23653] EXT4-fs (loop6): 1 truncate cleaned up [ 1693.387931][T23653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1693.443179][ T28] audit: type=1326 audit(1761062553.375:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.466140][ T28] audit: type=1326 audit(1761062553.375:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.495578][ T28] audit: type=1326 audit(1761062553.375:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.519806][ T28] audit: type=1326 audit(1761062553.375:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.548371][ T28] audit: type=1326 audit(1761062553.425:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23652 comm="syz.6.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1693.593429][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.543451][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047d6dc00: rx timeout, send abort [ 1694.788192][T23738] netlink: 'syz.5.5560': attribute type 1 has an invalid length. [ 1694.837098][T23731] bond_slave_0: entered promiscuous mode [ 1694.842912][T23731] bond_slave_1: entered promiscuous mode [ 1694.848615][T23731] dummy0: entered promiscuous mode [ 1694.870667][T23731] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1694.894430][T23731] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1695.043606][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047d6e400: rx timeout, send abort [ 1695.052177][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047d6dc00: abort rx timeout. Force session deactivation [ 1695.247393][T23751] siw: device registration error -23 [ 1695.289216][T23751] loop7: detected capacity change from 0 to 512 [ 1695.315645][T23751] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1695.354289][T23751] EXT4-fs (loop7): 1 truncate cleaned up [ 1695.366887][T23751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1695.531602][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.538796][T23764] netlink: 'syz.5.5572': attribute type 1 has an invalid length. [ 1695.551974][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047d6e400: abort rx timeout. Force session deactivation [ 1695.819349][T23780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5577'. [ 1696.223652][T23797] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1696.256826][T23785] netem: incorrect ge model size [ 1696.271224][T23785] netem: change failed [ 1696.647136][T23817] hub 1-0:1.0: USB hub found [ 1696.659955][T23817] hub 1-0:1.0: 1 port detected [ 1696.793115][T23820] siw: device registration error -23 [ 1696.810304][T23820] loop6: detected capacity change from 0 to 512 [ 1696.819548][T23820] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1696.842662][T23820] EXT4-fs (loop6): 1 truncate cleaned up [ 1696.856518][T23820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1696.937028][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.999964][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dec1400: rx timeout, send abort [ 1697.025594][T23833] pim6reg: entered allmulticast mode [ 1697.048943][T23833] pim6reg: left allmulticast mode [ 1697.500088][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dec2400: rx timeout, send abort [ 1697.508606][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dec1400: abort rx timeout. Force session deactivation [ 1697.554615][T23854] bond1: option mode: unable to set because the bond device has slaves [ 1697.651033][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5614'. [ 1697.887799][T23869] siw: device registration error -23 [ 1697.896423][T23874] loop0: detected capacity change from 0 to 1024 [ 1697.918853][T23869] loop6: detected capacity change from 0 to 512 [ 1697.928059][T23869] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1697.945163][T23869] EXT4-fs (loop6): 1 truncate cleaned up [ 1697.947345][T23874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.963372][T23874] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.963723][T23869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.008448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dec2400: abort rx timeout. Force session deactivation [ 1698.054204][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.102772][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.171948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c710400: rx timeout, send abort [ 1698.216640][T23887] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 1698.284513][T23891] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1698.520364][T23902] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.549007][T23904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5633'. [ 1698.603228][T23902] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.669248][T23902] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.679485][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c710800: rx timeout, send abort [ 1698.687878][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c710400: abort rx timeout. Force session deactivation [ 1698.777929][T23902] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.879355][T23918] pim6reg: entered allmulticast mode [ 1698.891022][T23918] pim6reg: left allmulticast mode [ 1699.043115][T23902] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.078309][T23902] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.122269][T23902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.151104][T23902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.179554][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c710800: abort rx timeout. Force session deactivation [ 1699.237036][T23931] netlink: 444 bytes leftover after parsing attributes in process `syz.5.5646'. [ 1699.249035][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5646'. [ 1699.340204][ T28] kauditd_printk_skb: 252 callbacks suppressed [ 1699.340219][ T28] audit: type=1326 audit(1761062559.585:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.373788][ T28] audit: type=1326 audit(1761062559.615:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.400049][ T28] audit: type=1326 audit(1761062559.615:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a7db8f003 code=0x7ffc0000 [ 1699.423060][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5650'. [ 1699.425485][ T28] audit: type=1326 audit(1761062559.615:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a7db8f003 code=0x7ffc0000 [ 1699.433260][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5650'. [ 1699.458000][ T28] audit: type=1326 audit(1761062559.615:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.484249][T23937] siw: device registration error -23 [ 1699.492963][ T28] audit: type=1326 audit(1761062559.615:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.510138][T23937] loop0: detected capacity change from 0 to 512 [ 1699.524454][ T28] audit: type=1326 audit(1761062559.615:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.549734][ T28] audit: type=1326 audit(1761062559.615:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.552634][T23937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1699.582821][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542e000: rx timeout, send abort [ 1699.592494][ T28] audit: type=1326 audit(1761062559.615:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.621311][ T28] audit: type=1326 audit(1761062559.705:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23935 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7db8efc9 code=0x7ffc0000 [ 1699.647374][T23937] EXT4-fs (loop0): 1 truncate cleaned up [ 1699.648916][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5651'. [ 1699.656416][T23937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1699.747988][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.835899][T23947] bond1: option mode: unable to set because the bond device has slaves [ 1700.076362][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542e400: rx timeout, send abort [ 1700.084791][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542e000: abort rx timeout. Force session deactivation [ 1700.275763][T23971] bond1: option mode: unable to set because the bond device has slaves [ 1700.584680][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542e400: abort rx timeout. Force session deactivation [ 1700.915148][T24002] __nla_validate_parse: 1 callbacks suppressed [ 1700.915171][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'. [ 1701.116489][T24011] serio: Serial port ptm0 [ 1701.305701][T24022] capability: warning: `syz.6.5687' uses 32-bit capabilities (legacy support in use) [ 1701.990784][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880293d0400: rx timeout, send abort [ 1702.458848][T24083] bond1: option mode: unable to set because the bond device has slaves [ 1702.487777][T24079] siw: device registration error -23 [ 1702.490939][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031772000: rx timeout, send abort [ 1702.501640][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880293d0400: abort rx timeout. Force session deactivation [ 1702.507575][T24079] loop6: detected capacity change from 0 to 512 [ 1702.528101][T24079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1702.560361][T24079] EXT4-fs (loop6): 1 truncate cleaned up [ 1702.567476][T24079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1702.742542][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.836884][T24100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1702.843575][T24100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1702.925234][T24100] vhci_hcd vhci_hcd.0: Device attached [ 1702.950773][T24108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1702.980152][T24100] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1702.986849][T24100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1703.001557][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031772000: abort rx timeout. Force session deactivation [ 1703.015426][T24100] vhci_hcd vhci_hcd.0: Device attached [ 1703.035665][T24108] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 1703.042364][T24108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1703.070275][T24108] vhci_hcd vhci_hcd.0: Device attached [ 1703.089645][T24100] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 1703.096329][T24100] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1703.109195][T13209] vhci_hcd: vhci_device speed not set [ 1703.139898][T24100] vhci_hcd vhci_hcd.0: Device attached [ 1703.156175][T24108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1703.176470][T24100] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1703.199694][T13209] usb 33-1: new full-speed USB device number 12 using vhci_hcd [ 1703.296104][T24114] vhci_hcd: connection closed [ 1703.296359][T24109] vhci_hcd: connection closed [ 1703.301405][T24101] vhci_hcd: connection reset by peer [ 1703.311430][T24111] vhci_hcd: connection closed [ 1703.313755][T22133] vhci_hcd: stop threads [ 1703.323692][T22133] vhci_hcd: release socket [ 1703.328372][T22133] vhci_hcd: disconnect device [ 1703.334062][T22133] vhci_hcd: stop threads [ 1703.342353][T22133] vhci_hcd: release socket [ 1703.347125][T22133] vhci_hcd: disconnect device [ 1703.364043][T22133] vhci_hcd: stop threads [ 1703.368356][T22133] vhci_hcd: release socket [ 1703.389129][T22133] vhci_hcd: disconnect device [ 1703.401955][T24119] geneve0 speed is unknown, defaulting to 1000 [ 1703.421405][T22133] vhci_hcd: stop threads [ 1703.425740][T22133] vhci_hcd: release socket [ 1703.438393][T22133] vhci_hcd: disconnect device [ 1703.687130][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c8b800: rx timeout, send abort [ 1703.875234][T24134] siw: device registration error -23 [ 1703.896578][T24134] loop7: detected capacity change from 0 to 512 [ 1703.908314][T24134] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1703.924351][T24134] EXT4-fs (loop7): 1 truncate cleaned up [ 1703.931806][T24134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1704.017580][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.187255][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c88800: rx timeout, send abort [ 1704.195891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c8b800: abort rx timeout. Force session deactivation [ 1704.265200][T24145] bond1: option mode: unable to set because the bond device has slaves [ 1704.310499][T24145] bond1: (slave macvlan7): Error -98 calling set_mac_address [ 1704.695733][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c88800: abort rx timeout. Force session deactivation [ 1704.740519][T24157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1704.747195][T24157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1704.777374][T24157] vhci_hcd vhci_hcd.0: Device attached [ 1704.808514][T24162] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1704.835914][T24157] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1704.842594][T24157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1704.856262][T24157] vhci_hcd vhci_hcd.0: Device attached [ 1704.906733][T24157] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 1704.913418][T24157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1704.943217][T24157] vhci_hcd vhci_hcd.0: Device attached [ 1704.959684][T24162] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 1704.966352][T24162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1704.994924][T24157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1704.999746][T24162] vhci_hcd vhci_hcd.0: Device attached [ 1705.037350][T24157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1705.087062][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 1705.087079][ T28] audit: type=1326 audit(1761062565.325:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24113 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1705.128253][ T28] audit: type=1326 audit(1761062565.325:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24113 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1705.151494][T24167] vhci_hcd: connection closed [ 1705.152910][T24169] vhci_hcd: connection closed [ 1705.157860][T24164] vhci_hcd: connection closed [ 1705.158751][ T6833] vhci_hcd: stop threads [ 1705.162827][T24160] vhci_hcd: connection closed [ 1705.167487][ T6833] vhci_hcd: release socket [ 1705.189069][ T6833] vhci_hcd: disconnect device [ 1705.195118][ T6833] vhci_hcd: stop threads [ 1705.202195][ T6833] vhci_hcd: release socket [ 1705.206773][ T6833] vhci_hcd: disconnect device [ 1705.212397][ T6833] vhci_hcd: stop threads [ 1705.216726][ T6833] vhci_hcd: release socket [ 1705.224082][ T6833] vhci_hcd: disconnect device [ 1705.245171][ T6833] vhci_hcd: stop threads [ 1705.252755][ T6833] vhci_hcd: release socket [ 1705.257297][ T6833] vhci_hcd: disconnect device [ 1705.389893][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c176800: rx timeout, send abort [ 1705.890089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c176400: rx timeout, send abort [ 1705.898395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c176800: abort rx timeout. Force session deactivation [ 1706.273283][T24210] IPv6: NLM_F_CREATE should be specified when creating new route [ 1706.398378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c176400: abort rx timeout. Force session deactivation [ 1706.511138][T24217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1706.571060][T24222] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1706.577733][T24222] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1706.604814][T24222] vhci_hcd vhci_hcd.0: Device attached [ 1706.637112][T24214] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 1706.643796][T24214] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1706.651891][T24214] vhci_hcd vhci_hcd.0: Device attached [ 1706.848881][T24217] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 1706.855557][T24217] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1707.036590][T24217] vhci_hcd vhci_hcd.0: Device attached [ 1707.043512][ T28] audit: type=1326 audit(1761062567.215:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.287217][T24222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1707.342271][ T28] audit: type=1326 audit(1761062567.225:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.369869][T24214] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 1707.376527][T24214] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1707.432587][T24238] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1707.457549][ T28] audit: type=1326 audit(1761062567.335:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.502870][T24214] vhci_hcd vhci_hcd.0: Device attached [ 1707.540656][T24233] vhci_hcd: connection closed [ 1707.541202][T24226] vhci_hcd: connection closed [ 1707.546063][T24232] vhci_hcd: connection closed [ 1707.556357][T22103] vhci_hcd: stop threads [ 1707.580009][ T28] audit: type=1326 audit(1761062567.355:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.618550][T22103] vhci_hcd: release socket [ 1707.624609][T24223] vhci_hcd: connection closed [ 1707.647296][T22103] vhci_hcd: disconnect device [ 1707.687701][T22103] vhci_hcd: stop threads [ 1707.697677][ T28] audit: type=1326 audit(1761062567.355:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.722893][T22103] vhci_hcd: release socket [ 1707.754129][T22103] vhci_hcd: disconnect device [ 1707.769054][T22103] vhci_hcd: stop threads [ 1707.785802][T22103] vhci_hcd: release socket [ 1707.801259][T22103] vhci_hcd: disconnect device [ 1707.816365][ T28] audit: type=1326 audit(1761062567.375:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.898910][ T28] audit: type=1326 audit(1761062567.385:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1707.934222][T22103] vhci_hcd: stop threads [ 1707.938754][T24244] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5769'. [ 1707.954800][T22103] vhci_hcd: release socket [ 1707.967241][T22103] vhci_hcd: disconnect device [ 1708.001016][ T28] audit: type=1326 audit(1761062567.385:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.7.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1708.598321][T13209] vhci_hcd: vhci_device speed not set [ 1709.271020][T24279] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5785'. [ 1709.337666][T24278] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1709.581018][T24291] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1709.872803][T24297] siw: device registration error -23 [ 1709.933113][T24297] loop7: detected capacity change from 0 to 512 [ 1709.954310][T24297] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1709.994973][T24297] EXT4-fs (loop7): 1 truncate cleaned up [ 1710.014376][T24297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1710.090448][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 1710.090465][ T28] audit: type=1326 audit(1761062570.325:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24295 comm="syz.7.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1710.119947][ T28] audit: type=1326 audit(1761062570.335:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24295 comm="syz.7.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1710.142738][ T28] audit: type=1326 audit(1761062570.335:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24295 comm="syz.7.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1710.166716][ T28] audit: type=1326 audit(1761062570.335:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24295 comm="syz.7.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a44f8efc9 code=0x7ffc0000 [ 1710.252574][T20663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.473107][T24319] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5801'. [ 1710.683751][ T28] audit: type=1326 audit(1761062570.925:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1710.717681][ T28] audit: type=1326 audit(1761062570.925:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1710.724544][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1710.761974][ T28] audit: type=1326 audit(1761062570.925:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1710.779101][T24333] siw: device registration error -23 [ 1710.792530][ T28] audit: type=1326 audit(1761062570.925:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa6138f003 code=0x7ffc0000 [ 1710.832346][ T28] audit: type=1326 audit(1761062570.925:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1710.832749][T24333] loop6: detected capacity change from 0 to 512 [ 1710.858657][ T28] audit: type=1326 audit(1761062570.925:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24331 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1710.866968][T24333] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1710.898371][T24333] EXT4-fs (loop6): 1 truncate cleaned up [ 1710.927587][T24333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1710.933704][T24339] pim6reg: entered allmulticast mode [ 1710.945172][T24340] pim6reg: left allmulticast mode [ 1711.084559][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.158102][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5814'. [ 1711.428158][T24360] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1711.544605][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806855c400: rx timeout, send abort [ 1711.587345][T24366] pim6reg: entered allmulticast mode [ 1711.595863][T24366] pim6reg: left allmulticast mode [ 1711.637110][T24368] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5824'. [ 1711.656736][T24365] siw: device registration error -23 [ 1711.677868][T24365] loop0: detected capacity change from 0 to 512 [ 1711.702024][T24365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1711.731895][T24365] EXT4-fs (loop0): 1 truncate cleaned up [ 1711.756119][T24365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1711.918746][T21634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.044724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806855c800: rx timeout, send abort [ 1712.059462][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806855c400: abort rx timeout. Force session deactivation [ 1712.346508][T24387] geneve0 speed is unknown, defaulting to 1000 [ 1712.553037][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806855c800: abort rx timeout. Force session deactivation [ 1713.252062][T24398] pim6reg: entered allmulticast mode [ 1713.259249][T24398] pim6reg: left allmulticast mode [ 1713.575367][T24399] loop6: detected capacity change from 0 to 512 [ 1713.712600][T24399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.725830][T24399] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1715.448439][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.574270][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5851'. [ 1715.583364][T24439] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5851'. [ 1715.665225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542f000: rx timeout, send abort [ 1716.165339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542c400: rx timeout, send abort [ 1716.173834][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542f000: abort rx timeout. Force session deactivation [ 1716.184006][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5861'. [ 1716.205599][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 1716.673653][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802542c400: abort rx timeout. Force session deactivation [ 1718.510289][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880293d0800: rx timeout, send abort [ 1718.557384][T24498] bond_slave_0: entered promiscuous mode [ 1718.563180][T24498] bond_slave_1: entered promiscuous mode [ 1718.600782][T24498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1718.620883][T24498] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 1718.837615][T24504] netlink: 'syz.6.5876': attribute type 3 has an invalid length. [ 1719.010256][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082775400: rx timeout, send abort [ 1719.018760][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880293d0800: abort rx timeout. Force session deactivation [ 1719.519613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082775400: abort rx timeout. Force session deactivation [ 1720.109545][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 1720.109561][ T28] audit: type=1326 audit(1761062580.345:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.173482][ T28] audit: type=1326 audit(1761062580.385:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.226884][ T28] audit: type=1326 audit(1761062580.385:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.285720][ T28] audit: type=1326 audit(1761062580.385:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.335190][ T28] audit: type=1326 audit(1761062580.385:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.379785][ T28] audit: type=1326 audit(1761062580.385:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.409269][ T28] audit: type=1326 audit(1761062580.395:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.443702][T24524] 9pnet_fd: Insufficient options for proto=fd [ 1720.455790][ T28] audit: type=1326 audit(1761062580.395:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.481301][ T28] audit: type=1326 audit(1761062580.395:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1720.506664][ T28] audit: type=1326 audit(1761062580.395:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24520 comm="syz.6.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa6138efc9 code=0x7ffc0000 [ 1721.284811][T24528] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5887'. [ 1721.505881][T24532] siw: device registration error -23 [ 1721.525957][T24532] loop6: detected capacity change from 0 to 512 [ 1721.537779][T24532] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1721.553487][T24532] EXT4-fs (loop6): 1 truncate cleaned up [ 1721.569858][T24532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1721.646558][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.745464][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dd55400: rx timeout, send abort [ 1721.994314][T24544] loop6: detected capacity change from 0 to 512 [ 1722.013485][T24544] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.5892: dx entry: limit 0 != root limit 125 [ 1722.025659][T24544] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5892: Corrupt directory, running e2fsck is recommended [ 1722.044120][T24544] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1722.052888][T24544] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2249: inode #15: comm syz.6.5892: corrupted in-inode xattr: invalid ea_ino [ 1722.069214][T24544] EXT4-fs (loop6): Remounting filesystem read-only [ 1722.080492][T24544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1722.087037][T12867] Bluetooth: hci3: command 0x0406 tx timeout [ 1722.153187][T21147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.245602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ce49800: rx timeout, send abort [ 1722.253997][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dd55400: abort rx timeout. Force session deactivation [ 1722.430523][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1722.559052][T24553] loop6: detected capacity change from 0 to 1024 [ 1722.644026][T24553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1722.719295][T24553] ================================================================== [ 1722.727449][T24553] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.735283][T24553] Read of size 18446744073709551588 at addr ffff8880314b4840 by task syz.6.5896/24553 [ 1722.744879][T24553] [ 1722.747323][T24553] CPU: 0 PID: 24553 Comm: syz.6.5896 Not tainted syzkaller #0 [ 1722.753929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ce49800: abort rx timeout. Force session deactivation [ 1722.754804][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1722.754821][T24553] Call Trace: [ 1722.778285][T24553] [ 1722.781252][T24553] dump_stack_lvl+0x16c/0x230 [ 1722.785988][T24553] ? read_lock_is_recursive+0x20/0x20 [ 1722.791404][T24553] ? show_regs_print_info+0x20/0x20 [ 1722.796671][T24553] ? load_image+0x3b0/0x3b0 [ 1722.801318][T24553] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1722.806750][T24553] ? __virt_addr_valid+0x18c/0x540 [ 1722.811920][T24553] ? __virt_addr_valid+0x469/0x540 [ 1722.817082][T24553] print_report+0xac/0x220 [ 1722.821590][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.827106][T24553] kasan_report+0x117/0x150 [ 1722.831668][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.837196][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.842714][T24553] kasan_check_range+0x288/0x290 [ 1722.847696][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.853206][T24553] __asan_memmove+0x29/0x70 [ 1722.857765][T24553] ext4_xattr_set_entry+0x94b/0x1e90 [ 1722.863198][T24553] ext4_xattr_block_set+0xae3/0x32a0 [ 1722.868538][T24553] ? ext4_destroy_inode+0x200/0x200 [ 1722.873789][T24553] ? proc_nr_inodes+0x230/0x230 [ 1722.878711][T24553] ? do_raw_spin_unlock+0x121/0x230 [ 1722.883954][T24553] ? _raw_spin_unlock+0x28/0x40 [ 1722.888939][T24553] ? ext4_xattr_block_find+0x350/0x350 [ 1722.894450][T24553] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 1722.899883][T24553] ext4_xattr_set_handle+0x10a1/0x1290 [ 1722.905416][T24553] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 1722.911459][T24553] ? __ext4_journal_start_sb+0x259/0x570 [ 1722.917191][T24553] ext4_xattr_set+0x22d/0x320 [ 1722.921928][T24553] ? end_current_label_crit_section+0x170/0x170 [ 1722.928221][T24553] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 1722.933928][T24553] ? posix_xattr_acl+0x93/0xb0 [ 1722.938783][T24553] ? evm_protect_xattr+0x36d/0x7a0 [ 1722.943946][T24553] ? ext4_xattr_trusted_get+0x40/0x40 [ 1722.949369][T24553] __vfs_setxattr+0x431/0x470 [ 1722.954103][T24553] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1722.959451][T24553] vfs_setxattr+0x16c/0x2f0 [ 1722.964096][T24553] ? xattr_permission+0x470/0x470 [ 1722.969162][T24553] ? __mnt_want_write+0x223/0x2a0 [ 1722.974238][T24553] ? path_setxattr+0x314/0x550 [ 1722.979081][T24553] path_setxattr+0x362/0x550 [ 1722.983724][T24553] ? simple_xattrs_free+0x150/0x150 [ 1722.988990][T24553] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1722.995112][T24553] ? lock_chain_count+0x20/0x20 [ 1723.000021][T24553] __x64_sys_lsetxattr+0xb8/0xd0 [ 1723.005018][T24553] do_syscall_64+0x55/0xb0 [ 1723.009503][T24553] ? clear_bhb_loop+0x40/0x90 [ 1723.014232][T24553] ? clear_bhb_loop+0x40/0x90 [ 1723.018962][T24553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.024991][T24553] RIP: 0033:0x7ffa6138efc9 [ 1723.029454][T24553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.049115][T24553] RSP: 002b:00007ffa6230a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1723.057578][T24553] RAX: ffffffffffffffda RBX: 00007ffa615e5fa0 RCX: 00007ffa6138efc9 [ 1723.065589][T24553] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 1723.073597][T24553] RBP: 00007ffa61411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1723.081614][T24553] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 1723.089622][T24553] R13: 00007ffa615e6038 R14: 00007ffa615e5fa0 R15: 00007ffe0ce1c108 [ 1723.097649][T24553] [ 1723.100708][T24553] [ 1723.103061][T24553] Allocated by task 24553: [ 1723.107519][T24553] kasan_set_track+0x4e/0x70 [ 1723.112172][T24553] __kasan_kmalloc+0x8f/0xa0 [ 1723.116806][T24553] __kmalloc_node_track_caller+0xb2/0x230 [ 1723.122577][T24553] kmemdup+0x2b/0x70 [ 1723.126515][T24553] ext4_xattr_block_set+0x9e5/0x32a0 [ 1723.131845][T24553] ext4_xattr_set_handle+0x10a1/0x1290 [ 1723.137353][T24553] ext4_xattr_set+0x22d/0x320 [ 1723.142077][T24553] __vfs_setxattr+0x431/0x470 [ 1723.146794][T24553] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1723.152138][T24553] vfs_setxattr+0x16c/0x2f0 [ 1723.156700][T24553] path_setxattr+0x362/0x550 [ 1723.161338][T24553] __x64_sys_lsetxattr+0xb8/0xd0 [ 1723.166327][T24553] do_syscall_64+0x55/0xb0 [ 1723.170799][T24553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.176734][T24553] [ 1723.179078][T24553] The buggy address belongs to the object at ffff8880314b4800 [ 1723.179078][T24553] which belongs to the cache kmalloc-1k of size 1024 [ 1723.193187][T24553] The buggy address is located 64 bytes inside of [ 1723.193187][T24553] 1024-byte region [ffff8880314b4800, ffff8880314b4c00) [ 1723.206514][T24553] [ 1723.208874][T24553] The buggy address belongs to the physical page: [ 1723.215330][T24553] page:ffffea0000c52c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x314b0 [ 1723.225526][T24553] head:ffffea0000c52c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1723.234503][T24553] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1723.242520][T24553] page_type: 0xffffffff() [ 1723.246886][T24553] raw: 00fff00000000840 ffff888017841dc0 ffffea00014a0e00 dead000000000002 [ 1723.255509][T24553] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1723.264125][T24553] page dumped because: kasan: bad access detected [ 1723.270620][T24553] page_owner tracks the page as allocated [ 1723.276358][T24553] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24787769006, free_ts 0 [ 1723.296116][T24553] post_alloc_hook+0x1cd/0x210 [ 1723.300944][T24553] get_page_from_freelist+0x195c/0x19f0 [ 1723.306549][T24553] __alloc_pages+0x1e3/0x460 [ 1723.311195][T24553] alloc_page_interleave+0x24/0x1e0 [ 1723.316456][T24553] alloc_slab_page+0x5d/0x170 [ 1723.321184][T24553] new_slab+0x87/0x2e0 [ 1723.325303][T24553] ___slab_alloc+0xc6d/0x1300 [ 1723.330024][T24553] __kmem_cache_alloc_node+0x1a2/0x260 [ 1723.335533][T24553] __kmalloc+0xa4/0x240 [ 1723.339732][T24553] mpi_resize+0x93/0x240 [ 1723.344015][T24553] mpi_powm+0xbb2/0x2340 [ 1723.348291][T24553] rsa_enc+0x291/0x3d0 [ 1723.352416][T24553] pkcs1pad_verify+0x424/0x600 [ 1723.357219][T24553] crypto_sig_verify+0x18f/0x1f0 [ 1723.362216][T24553] public_key_verify_signature+0x5d6/0x810 [ 1723.368077][T24553] x509_check_for_self_signed+0x322/0x430 [ 1723.373842][T24553] page_owner free stack trace missing [ 1723.379235][T24553] [ 1723.381589][T24553] Memory state around the buggy address: [ 1723.387257][T24553] ffff8880314b4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1723.395365][T24553] ffff8880314b4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1723.403484][T24553] >ffff8880314b4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1723.411584][T24553] ^ [ 1723.417786][T24553] ffff8880314b4880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1723.425896][T24553] ffff8880314b4900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1723.433995][T24553] ================================================================== [ 1723.449832][T24553] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1723.457195][T24553] CPU: 1 PID: 24553 Comm: syz.6.5896 Not tainted syzkaller #0 [ 1723.464693][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1723.474799][T24553] Call Trace: [ 1723.478110][T24553] [ 1723.481075][T24553] dump_stack_lvl+0x16c/0x230 [ 1723.482893][T24558] siw: device registration error -23 [ 1723.491097][T24553] ? show_regs_print_info+0x20/0x20 [ 1723.496348][T24553] ? load_image+0x3b0/0x3b0 [ 1723.500913][T24553] panic+0x2c0/0x710 [ 1723.504850][T24553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1723.511055][T24553] ? bpf_jit_dump+0xd0/0xd0 [ 1723.515616][T24553] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1723.521561][T24553] ? _raw_spin_unlock+0x40/0x40 [ 1723.526467][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.531976][T24553] check_panic_on_warn+0x84/0xa0 [ 1723.536965][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.542492][T24553] end_report+0x6f/0x140 [ 1723.546780][T24553] kasan_report+0x128/0x150 [ 1723.551334][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.556849][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.562351][T24553] kasan_check_range+0x288/0x290 [ 1723.567329][T24553] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.572837][T24553] __asan_memmove+0x29/0x70 [ 1723.577385][T24553] ext4_xattr_set_entry+0x94b/0x1e90 [ 1723.582821][T24553] ext4_xattr_block_set+0xae3/0x32a0 [ 1723.588174][T24553] ? ext4_destroy_inode+0x200/0x200 [ 1723.593421][T24553] ? proc_nr_inodes+0x230/0x230 [ 1723.598333][T24553] ? do_raw_spin_unlock+0x121/0x230 [ 1723.603590][T24553] ? _raw_spin_unlock+0x28/0x40 [ 1723.608486][T24553] ? ext4_xattr_block_find+0x350/0x350 [ 1723.613977][T24553] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 1723.619407][T24553] ext4_xattr_set_handle+0x10a1/0x1290 [ 1723.624918][T24553] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 1723.630938][T24553] ? __ext4_journal_start_sb+0x259/0x570 [ 1723.636610][T24553] ext4_xattr_set+0x22d/0x320 [ 1723.641311][T24553] ? end_current_label_crit_section+0x170/0x170 [ 1723.647566][T24553] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 1723.653150][T24553] ? posix_xattr_acl+0x93/0xb0 [ 1723.657937][T24553] ? evm_protect_xattr+0x36d/0x7a0 [ 1723.663086][T24553] ? ext4_xattr_trusted_get+0x40/0x40 [ 1723.668480][T24553] __vfs_setxattr+0x431/0x470 [ 1723.673177][T24553] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1723.678488][T24553] vfs_setxattr+0x16c/0x2f0 [ 1723.683007][T24553] ? xattr_permission+0x470/0x470 [ 1723.688043][T24553] ? __mnt_want_write+0x223/0x2a0 [ 1723.693106][T24553] ? path_setxattr+0x314/0x550 [ 1723.697893][T24553] path_setxattr+0x362/0x550 [ 1723.702507][T24553] ? simple_xattrs_free+0x150/0x150 [ 1723.707742][T24553] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1723.713742][T24553] ? lock_chain_count+0x20/0x20 [ 1723.718656][T24553] __x64_sys_lsetxattr+0xb8/0xd0 [ 1723.723621][T24553] do_syscall_64+0x55/0xb0 [ 1723.728062][T24553] ? clear_bhb_loop+0x40/0x90 [ 1723.732756][T24553] ? clear_bhb_loop+0x40/0x90 [ 1723.737457][T24553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.743374][T24553] RIP: 0033:0x7ffa6138efc9 [ 1723.747803][T24553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.767445][T24553] RSP: 002b:00007ffa6230a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1723.775873][T24553] RAX: ffffffffffffffda RBX: 00007ffa615e5fa0 RCX: 00007ffa6138efc9 [ 1723.783865][T24553] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 1723.791850][T24553] RBP: 00007ffa61411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1723.799873][T24553] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 1723.807874][T24553] R13: 00007ffa615e6038 R14: 00007ffa615e5fa0 R15: 00007ffe0ce1c108 [ 1723.815874][T24553] [ 1723.819219][T24553] Kernel Offset: disabled [ 1723.823576][T24553] Rebooting in 86400 seconds..