last executing test programs: 1m23.068153678s ago: executing program 1 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe06) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1m22.91819875s ago: executing program 1 (id=76): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m21.849981606s ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x28000600) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000100)='./cgroup\x00', 0x24000042) close_range(r2, 0xffffffffffffffff, 0x2) 1m21.792354731s ago: executing program 1 (id=92): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) 1m21.404256543s ago: executing program 1 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) ppoll(&(0x7f0000000440)=[{r1, 0x1065}], 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') 1m21.091926138s ago: executing program 1 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x2, 0x0, 0xd2f4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) 1m21.038807622s ago: executing program 32 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x2, 0x0, 0xd2f4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) 1m15.609991571s ago: executing program 4 (id=176): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='BM\xb86\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) waitid(0x2, r2, 0x0, 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x0, 0x0, 0x0) 1m15.411740207s ago: executing program 4 (id=179): r0 = socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m15.166313826s ago: executing program 4 (id=181): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m15.057063526s ago: executing program 4 (id=185): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1m14.191934225s ago: executing program 4 (id=196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1m13.549667837s ago: executing program 4 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1m13.549482427s ago: executing program 33 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1m8.418884532s ago: executing program 5 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) 1m8.359027987s ago: executing program 5 (id=279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getitimer(0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 1m8.232454287s ago: executing program 5 (id=283): r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x13, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x34, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 1m8.19219868s ago: executing program 5 (id=286): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1m7.894223304s ago: executing program 6 (id=296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 1m7.33041826s ago: executing program 5 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1m6.875986856s ago: executing program 6 (id=304): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1m6.753831976s ago: executing program 6 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf0b, 0x2, 0x1, 0xa3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3a, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.58009202s ago: executing program 6 (id=312): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$eJzs3M9vVFUbAOD33pkC/eCTkSDKD7WKBqKxhYLIwg1GExeamOgCl7UtBBmooTURQhSNwaUhcW9cmvgXuNKNUVcmbnVvSIjpBtTNmNu5t52ZTkunnXZq53mSC+fce6bnvPfeM3PuOZ0G0LeGsn+SiF0R8VtE7K5nmwsM1f+7N3t9/K/Z6+NJ1Gpv/pnMlbs7e328KFq8bmeRKUeknyZxsE2901evXRyrViev5PmRmUvvjUxfvfbchUtj5yfPT14ePX365InjL5wafb4rcWZx3T3w4dSh/a++fev18bO33vnpm6SIvyWOiNjRhSqHljv4dK3WhSo2j/83pJNyDxtCR0r1bhoDc/1/d5Ri4eLtjlc+6WnjgHVVq9Vq+/L+38aNGrCFJdHrFgC9UXzQZ8+/xbaBw4+eu3Om/gCUxX0v3+pHypHmZQZanm+7aSgizt74+8tsi8XzEAAAXffdmYgjh/PxX9PCTxr7GnIP5GsolYh4MCL2RMSpiNgbEQ9FzJV9OCIe6bD+1kWSxeOf9HaHP7Ij2fjvxXxtq3n8V4z+olKK+KcYLldiIDl3oTp5LD8nR2Nge5Zfbnz4/cu/fr7UscbxX7Zl9Rdjwbwdt8vbm18zMTYztpaYG935OOJAuV38yfxKQHZb7I+IA6us48IzXx9a6tj942+2rTHThXWm2lcRR+rX/0a0xF9Ill+fHNkR1cljI8VdsdjPv9x8Y6n6O42/27Lrn7a9/+fjrySN67XTnddx8/fPlnymWe39vy15q2nfB2MzM1eOR2xLXqs3unH/aEu50YXyWfxHD7fv/3ti4UwcjIjsJn40Ih6LiMfztj8REU9GxOFl4v/xpafebd6TdBD/+srin+jo+i8kBvMCbQ41JUoXf/i2qdLKQnJl1//kXOpovmcl73/LNKcpsZZzBwAAAP8VaUTsiiQdnk+n6fBw/Xf498b/0urU9Myz56bevzxR/45AJQbSYqarPh9cnw89nj/WF/nRlvyJfN74i9LgXH54fKo60evgoc/tXKL/Z/4o9bp1wLpbxTqar3jBFqEzQ//S/6F/6f/Qv8qLU4O9aguwsdp9/n/Ug3YAG6+l/1v2gz7i+R/6l/4P/Uv/h740PRj3/5L8Zk3s2BzN2NKJYiFo0aFIe9ewYoZqE5yftSUGV/yHKjY80cM3JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC76NwAA//8lJN+h") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1m6.57951549s ago: executing program 5 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 1m6.481207098s ago: executing program 34 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 1m5.702320001s ago: executing program 6 (id=320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m4.640128887s ago: executing program 6 (id=327): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1m4.628906128s ago: executing program 35 (id=327): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 3.59422527s ago: executing program 0 (id=1482): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 3.562943032s ago: executing program 0 (id=1484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000009957f332f9ffffff6beeac"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setpipe(r3, 0x408, 0x7) 2.632132728s ago: executing program 0 (id=1489): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x8) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080), 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESOCT=r1, @ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x48) request_key(&(0x7f0000001100)='logon\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001140)='\x00$\x8a\x9e[U\xcf\x80#\x81v{?\x97\x18\x16?Bx\xee\xae\xb5\xbekl,\x1f\x1e\xda\x19\xf9\t\x02\'\xed\xb8\x9f+<\xe2\x89\x89\xfa\xf3\x96\\E\xdb\xffk\x15\xaen\xd7H(\xfa\x92\x1e\x1c\x16o\x91\xff\xb9\xd0\x80}p\xc6EL\xe1\xa6.\xdb*9 \xea\nm,\xab\xa1n\x9e4z\xd5\xa7\xce\x98G\xa9\x90^\x9d\bM\xc8\xc5\";\x81\xb0\x82\vx\xa2[>\xd0]\xd5', r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000500)="a717b8c965c825562f36237e135091c468792ba40b9a22b7440530421c705e3939a9a7c4919c0014ece380077615429638291530d4f5d1a01a23e78837b9792a52c82d89aec2963d350d8e1950896223baf43761ba4fd56ace370f509d08ca3838ff961e5479ffe8fe05ae3ecad64edeef253833180954a8333936f6d1a5bfff7222d036710b47a28b4d83a4ecf4836862e81ecc169f6d5845e4c02a58ab8bfd0857fcfa12f451a96731b995c0294865370d08ba862ce790f0291be8661500be6c", 0xc1, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="2f4cae9c568dd0cde51874f3e5cefce45f4a8b04c4b948761cbac5ac7bf6656146d8a0afa17071f4dbf2265dcc70140d83a5cb9d21f1f8ff48bba3d4bffbb7c946e0a3db1611a584f3", 0x49, r3) 2.543571515s ago: executing program 0 (id=1492): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 1.966950581s ago: executing program 8 (id=1498): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) 1.85044401s ago: executing program 8 (id=1499): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 1.748939969s ago: executing program 7 (id=1500): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1.72756555s ago: executing program 7 (id=1501): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180000", @ANYRES32, @ANYBLOB="000000000000000066080000b9060000185600000d000000000000000000004095f500000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1a}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x7, [@enum64={0xd, 0x8, 0x0, 0x13, 0x0, 0x9, [{0x10, 0x2, 0xfffffffe}, {0xa, 0x6, 0x6}, {0x8, 0x4, 0x1000}, {0x1, 0x2, 0xbd}, {0x10, 0x22c, 0xff}, {0x10, 0x7b0219db, 0x9}, {0x9, 0x8, 0xf4}, {0x4, 0xfffffffb, 0xbc33aeb}]}, @union={0x8, 0x5, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x1, 0x6}, {0xe, 0x0, 0x9}, {0x6, 0x3, 0x1}, {0xf, 0x2, 0xb2c8}, {0xa, 0x1, 0x4}]}, @restrict={0xa}]}, {0x0, [0x30, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000500)=""/199, 0xdf, 0xc7, 0x1, 0xdc95}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8000, 0x3, 0x9, 0x8000, r0, 0xfff, '\x00', 0x0, r3, 0x3, 0x0, 0x2, 0x0, @value=r4}, 0x50) 1.645069967s ago: executing program 0 (id=1503): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.641598647s ago: executing program 2 (id=1504): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.631674968s ago: executing program 7 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 1.533852036s ago: executing program 7 (id=1506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x1a, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.48612984s ago: executing program 7 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.461697042s ago: executing program 2 (id=1508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.441916793s ago: executing program 2 (id=1509): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14c, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @mcast1, 0x100}}}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240088c0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.402621087s ago: executing program 2 (id=1510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)=',-\x15*\x00', &(0x7f0000000440)='$\b&U0\xb5i\x16\xca\xcd\x01\xf8\x13x\\\x16\x0e\x8c\x1b\xc1rv\xa5k|\x92*ON\x9d\xf21KH\xfcx\xdayx\xe4\xf8\x86\xc3\xf1\xb4\x94/9\',\xf7uX/W\xcc5\a\x9e^\x90\xa8\xaf\xda\x97\xe0M]\xcd\xe2\x17\'\xbf\x04i\xcakbA\xf6\xd2P\xa5H\xf0\xa0B=\x01\x00\x86%\x97\xcb\xbcWo\xf2\xa6', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000800)='\x00.-&]\xe1\x19\t\xe88\xces`Z1\\\x98\x8b1\xb9\xc9\xe6\xf1\x94\x1e[\x8bs\x94\x80\x96\xf2\x02\x98+vv\x8a\xf7D\x19\x8cd\xa6\a\xe0S\xda2\b\xf1\xb5\x17V\x04\fm\xe4?0\x0fL\xc5\xba\xbb\x1di+Q~\xfa\x9a}m;\xe1\xcef8\xa0\x04\f\x15\x82!-\x91\x81\xac\xa3::\xc6\x9b\xa2\x13\xde&\xc4\x80\x8c\x15\x01\n\x81\xbf1\x96$\xeeQ\xe7\' RI\x1f\x00'/133, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.387272118s ago: executing program 2 (id=1511): prlimit64(0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800812014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 832.288153ms ago: executing program 8 (id=1513): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) 831.827713ms ago: executing program 7 (id=1522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 831.652433ms ago: executing program 2 (id=1514): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 721.245722ms ago: executing program 8 (id=1515): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) move_mount(r0, &(0x7f0000000100)='./bus\x00', r1, &(0x7f00000000c0)='./bus\x00', 0x14) sendfile(r1, r0, 0x0, 0x7ffff000) 694.693004ms ago: executing program 0 (id=1516): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, 0x0) 405.668167ms ago: executing program 3 (id=1520): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) shmctl$SHM_INFO(0x0, 0xe, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 340.818472ms ago: executing program 8 (id=1521): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x42000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) unshare(0x2c040000) socket$inet6(0xa, 0x80002, 0x0) 235.081261ms ago: executing program 3 (id=1523): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = syz_io_uring_setup(0x4006daf, &(0x7f0000000400)={0x0, 0x100bd7f, 0x800, 0x3, 0x40024e}, 0x0, &(0x7f0000000040)) io_uring_enter(r2, 0x627, 0x4c1, 0x9, 0x0, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="0015954d97357ea18147bbbf64fc9943f9ab1d751664006eef4c5dc3db033e7f79eed817d87a283f22a929830c2e04b6df5b86bdf2f9"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xaa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 220.129452ms ago: executing program 8 (id=1524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 219.529312ms ago: executing program 3 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sync() sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 112.334081ms ago: executing program 3 (id=1525): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180000", @ANYRES32, @ANYBLOB="000000000000000066080000b9060000185600000d000000000000000000004095f500000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1a}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x7, [@enum64={0xd, 0x8, 0x0, 0x13, 0x0, 0x9, [{0x10, 0x2, 0xfffffffe}, {0xa, 0x6, 0x6}, {0x8, 0x4, 0x1000}, {0x1, 0x2, 0xbd}, {0x10, 0x22c, 0xff}, {0x10, 0x7b0219db, 0x9}, {0x9, 0x8, 0xf4}, {0x4, 0xfffffffb, 0xbc33aeb}]}, @union={0x8, 0x5, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x1, 0x6}, {0xe, 0x0, 0x9}, {0x6, 0x3, 0x1}, {0xf, 0x2, 0xb2c8}, {0xa, 0x1, 0x4}]}, @restrict={0xa}]}, {0x0, [0x30, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000500)=""/199, 0xdf, 0xc7, 0x1, 0xdc95}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8000, 0x3, 0x9, 0x8000, r0, 0xfff, '\x00', 0x0, r3, 0x3, 0x0, 0x2, 0x0, @value=r4}, 0x50) 55.558066ms ago: executing program 3 (id=1526): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x80}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 0s ago: executing program 3 (id=1527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): oop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.651: Allocating blocks 449-513 which overlap fs metadata [ 70.771196][ T5570] EXT4-fs (loop8): pa ffff888106e41230: logic 48, phys. 177, len 21 [ 70.779235][ T5570] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 70.802474][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.050650][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.058060][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.065835][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.073369][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.215646][ T4056] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.295765][ T5645] loop2: detected capacity change from 0 to 1024 [ 71.341106][ T5645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.368959][ T5645] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.665: Allocating blocks 449-513 which overlap fs metadata [ 71.428499][ T5645] EXT4-fs (loop2): pa ffff888106e41380: logic 48, phys. 177, len 21 [ 71.436630][ T5645] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 71.443571][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 71.465620][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.483652][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 71.492918][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.500391][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.508069][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.515525][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.545625][ T5657] loop0: detected capacity change from 0 to 1764 [ 71.651393][ T5665] loop7: detected capacity change from 0 to 128 [ 71.676153][ T5665] usb usb5: usbfs: process 5665 (syz.7.674) did not claim interface 0 before use [ 71.782376][ T5680] lo: entered allmulticast mode [ 71.796288][ T5680] tunl0: entered allmulticast mode [ 71.809950][ T5680] gre0: entered allmulticast mode [ 71.822142][ T5680] gretap0: entered allmulticast mode [ 71.833725][ T5680] erspan0: entered allmulticast mode [ 71.841255][ T5680] ip_vti0: entered allmulticast mode [ 71.848130][ T5680] ip6_vti0: entered allmulticast mode [ 71.856704][ T5680] sit0: entered allmulticast mode [ 71.863117][ T5683] IPv4: Oversized IP packet from 127.202.26.0 [ 71.873162][ T5680] ip6tnl0: entered allmulticast mode [ 71.880285][ T5680] ip6gre0: entered allmulticast mode [ 71.890866][ T5680] syz_tun: entered allmulticast mode [ 71.899700][ T5680] ip6gretap0: entered allmulticast mode [ 71.908284][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.915474][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.926922][ T5680] bridge0: entered allmulticast mode [ 71.934158][ T5680] vcan0: entered allmulticast mode [ 71.940473][ T5680] bond0: entered allmulticast mode [ 71.945606][ T5680] bond_slave_0: entered allmulticast mode [ 71.951596][ T5680] bond_slave_1: entered allmulticast mode [ 71.960456][ T5680] team0: entered allmulticast mode [ 71.965626][ T5680] team_slave_0: entered allmulticast mode [ 71.971390][ T5680] team_slave_1: entered allmulticast mode [ 71.977331][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 71.977342][ T29] audit: type=1326 audit(1754977781.664:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff59ecb5ba7 code=0x7ffc0000 [ 71.978471][ T5680] dummy0: entered allmulticast mode [ 71.984788][ T29] audit: type=1326 audit(1754977781.664:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff59ec5add9 code=0x7ffc0000 [ 72.035286][ T29] audit: type=1326 audit(1754977781.674:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 72.059801][ T5680] nlmon0: entered allmulticast mode [ 72.065880][ T5680] caif0: entered allmulticast mode [ 72.071779][ T5680] batadv0: entered allmulticast mode [ 72.073092][ T29] audit: type=1326 audit(1754977781.754:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff59ecb5ba7 code=0x7ffc0000 [ 72.087181][ T5680] vxcan0: entered allmulticast mode [ 72.100342][ T29] audit: type=1326 audit(1754977781.754:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff59ec5add9 code=0x7ffc0000 [ 72.106306][ T5680] vxcan1: entered allmulticast mode [ 72.128756][ T29] audit: type=1326 audit(1754977781.754:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 72.134878][ T5680] veth0: entered allmulticast mode [ 72.157199][ T29] audit: type=1326 audit(1754977781.764:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff59ecb5ba7 code=0x7ffc0000 [ 72.185502][ T29] audit: type=1326 audit(1754977781.764:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff59ec5add9 code=0x7ffc0000 [ 72.187987][ T5680] veth1: entered allmulticast mode [ 72.208810][ T29] audit: type=1326 audit(1754977781.764:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 72.237597][ T5680] wg0: entered allmulticast mode [ 72.239050][ T29] audit: type=1326 audit(1754977781.764:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff59ecb5ba7 code=0x7ffc0000 [ 72.266139][ T5680] wg1: entered allmulticast mode [ 72.276692][ T5680] wg2: entered allmulticast mode [ 72.291362][ T5680] veth0_to_bridge: entered allmulticast mode [ 72.300421][ T5680] veth1_to_bridge: entered allmulticast mode [ 72.308607][ T5680] veth0_to_bond: entered allmulticast mode [ 72.315918][ T5680] veth1_to_bond: entered allmulticast mode [ 72.323328][ T5680] veth0_to_team: entered allmulticast mode [ 72.331201][ T5680] veth1_to_team: entered allmulticast mode [ 72.338733][ T5680] veth0_to_batadv: entered allmulticast mode [ 72.346302][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.353824][ T5680] batadv_slave_0: entered allmulticast mode [ 72.361353][ T5680] veth1_to_batadv: entered allmulticast mode [ 72.368390][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.375937][ T5680] batadv_slave_1: entered allmulticast mode [ 72.383580][ T5680] xfrm0: entered allmulticast mode [ 72.390196][ T5680] veth0_to_hsr: entered allmulticast mode [ 72.398285][ T5680] hsr_slave_0: entered allmulticast mode [ 72.405962][ T5680] veth1_to_hsr: entered allmulticast mode [ 72.414001][ T5680] hsr_slave_1: entered allmulticast mode [ 72.422035][ T5680] hsr0: entered allmulticast mode [ 72.432149][ T5680] veth1_virt_wifi: entered allmulticast mode [ 72.447038][ T5680] veth0_virt_wifi: entered allmulticast mode [ 72.454247][ T5680] veth1_vlan: entered allmulticast mode [ 72.461170][ T5680] veth0_vlan: entered allmulticast mode [ 72.470346][ T5680] vlan0: entered allmulticast mode [ 72.475538][ T5680] vlan1: entered allmulticast mode [ 72.480838][ T5680] macvlan0: entered allmulticast mode [ 72.487161][ T5680] macvlan1: entered allmulticast mode [ 72.493996][ T5680] ipvlan0: entered allmulticast mode [ 72.499422][ T5680] ipvlan1: entered allmulticast mode [ 72.505142][ T5680] veth1_macvtap: entered allmulticast mode [ 72.512347][ T5680] veth0_macvtap: entered allmulticast mode [ 72.520374][ T5680] macvtap0: entered allmulticast mode [ 72.526768][ T5680] macsec0: entered allmulticast mode [ 72.533209][ T5680] geneve0: entered allmulticast mode [ 72.539788][ T5680] geneve1: entered allmulticast mode [ 72.548494][ T5680] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 72.570232][ T5680] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 72.578360][ T5680] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 72.586507][ T5680] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 72.653045][ T4056] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.662692][ T4056] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.672213][ T4056] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.689355][ T4056] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.705571][ T5714] netlink: 'syz.7.695': attribute type 10 has an invalid length. [ 72.713763][ T5714] team0: Device ipvlan0 failed to register rx_handler [ 72.728564][ T5714] bond1: entered promiscuous mode [ 72.733633][ T5714] bond1: entered allmulticast mode [ 72.738916][ T5714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.775447][ T5719] loop2: detected capacity change from 0 to 512 [ 72.779409][ T5717] syzkaller0: entered promiscuous mode [ 72.787268][ T5717] syzkaller0: entered allmulticast mode [ 72.791026][ T5719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.697: bg 0: block 248: padding at end of block bitmap is not set [ 72.810517][ T5719] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.697: Failed to acquire dquot type 1 [ 72.838273][ T5727] loop7: detected capacity change from 0 to 512 [ 72.839061][ T5719] EXT4-fs (loop2): 1 truncate cleaned up [ 72.844886][ T5727] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.851899][ T5719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.858104][ T5727] EXT4-fs (loop7): failed to initialize system zone (-117) [ 72.869150][ T5719] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.876807][ T5727] EXT4-fs (loop7): mount failed [ 72.915503][ T5730] netlink: 96 bytes leftover after parsing attributes in process `syz.8.700'. [ 72.948982][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.950372][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.966488][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.981471][ T5734] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.025682][ T5738] loop2: detected capacity change from 0 to 2048 [ 73.040517][ T5738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.055858][ T5734] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.056577][ T5738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.704: bg 0: block 234: padding at end of block bitmap is not set [ 73.080813][ T5738] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 73.093358][ T5738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.093358][ T5738] [ 73.112887][ T4056] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 73.125244][ T4056] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.125244][ T4056] [ 73.134884][ T4056] EXT4-fs (loop2): Total free blocks count 0 [ 73.140877][ T4056] EXT4-fs (loop2): Free/Dirty block details [ 73.146789][ T4056] EXT4-fs (loop2): free_blocks=0 [ 73.151713][ T4056] EXT4-fs (loop2): dirty_blocks=16 [ 73.156825][ T4056] EXT4-fs (loop2): Block reservation details [ 73.166020][ T5734] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.211699][ T5734] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.286851][ T4029] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300990][ T4055] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.319081][ T4055] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.339683][ T4055] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.529329][ T5758] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 73.537150][ T5758] dummy0: left promiscuous mode [ 73.580518][ T5760] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 73.588582][ T5758] bond1: (slave dummy0): Releasing active interface [ 73.597939][ T5758] team0: Failed to send options change via netlink (err -105) [ 73.605525][ T5758] team0: Port device dummy0 added [ 73.626044][ T5760] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.637677][ T5760] team0: Failed to send options change via netlink (err -105) [ 73.645303][ T5760] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.654640][ T5760] team0: Port device dummy0 removed [ 73.662225][ T5760] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.668569][ T5767] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 73.697447][ T5764] team0 (unregistering): Port device team_slave_0 removed [ 73.719535][ T5766] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 73.729046][ T5764] team0 (unregistering): Port device team_slave_1 removed [ 73.872340][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 73.882877][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 73.912983][ T5783] loop2: detected capacity change from 0 to 128 [ 74.005265][ T5783] bio_check_eod: 88 callbacks suppressed [ 74.005282][ T5783] syz.2.721: attempt to access beyond end of device [ 74.005282][ T5783] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 74.024425][ T5783] syz.2.721: attempt to access beyond end of device [ 74.024425][ T5783] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 74.037841][ T5783] syz.2.721: attempt to access beyond end of device [ 74.037841][ T5783] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 74.089692][ T5783] syz.2.721: attempt to access beyond end of device [ 74.089692][ T5783] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 74.105080][ T5783] syz.2.721: attempt to access beyond end of device [ 74.105080][ T5783] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 74.118558][ T5783] syz.2.721: attempt to access beyond end of device [ 74.118558][ T5783] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 74.133095][ T5783] syz.2.721: attempt to access beyond end of device [ 74.133095][ T5783] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 74.160645][ T5783] syz.2.721: attempt to access beyond end of device [ 74.160645][ T5783] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 74.191845][ T5783] syz.2.721: attempt to access beyond end of device [ 74.191845][ T5783] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 74.219027][ T5783] syz.2.721: attempt to access beyond end of device [ 74.219027][ T5783] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 74.289936][ T5793] 9pnet_fd: p9_fd_create_tcp (5793): problem connecting socket to 127.0.0.1 [ 74.357584][ T5799] loop3: detected capacity change from 0 to 1024 [ 74.364440][ T5799] EXT4-fs: Ignoring removed orlov option [ 74.381225][ T5799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.396151][ T5800] loop0: detected capacity change from 0 to 512 [ 74.409874][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.445046][ T5800] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.727: error while reading EA inode 32 err=-116 [ 74.465495][ T5800] EXT4-fs (loop0): Remounting filesystem read-only [ 74.473811][ T5800] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 74.484705][ T5800] EXT4-fs (loop0): 1 orphan inode deleted [ 74.493855][ T5800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.518977][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.907540][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 74.927928][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 74.958840][ T5838] loop0: detected capacity change from 0 to 512 [ 74.965864][ T5838] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.979837][ T5838] EXT4-fs (loop0): failed to initialize system zone (-117) [ 74.987385][ T5838] EXT4-fs (loop0): mount failed [ 75.069074][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.745'. [ 75.421665][ T5867] bond0: entered promiscuous mode [ 75.426740][ T5867] bond0: entered allmulticast mode [ 75.433703][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.443976][ T5867] bond0 (unregistering): Released all slaves [ 75.474012][ T5872] loop2: detected capacity change from 0 to 512 [ 75.511530][ T5870] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 75.519423][ T3410] IPVS: starting estimator thread 0... [ 75.534447][ T5872] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.542875][ T5872] EXT4-fs (loop2): failed to initialize system zone (-117) [ 75.550456][ T5872] EXT4-fs (loop2): mount failed [ 75.568328][ T5876] geneve2: entered promiscuous mode [ 75.573615][ T5876] geneve2: entered allmulticast mode [ 75.613890][ T5874] IPVS: using max 2688 ests per chain, 134400 per kthread [ 75.746389][ T5894] program syz.3.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.081115][ T5911] loop3: detected capacity change from 0 to 512 [ 76.087620][ T5911] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.095151][ T5911] EXT4-fs (loop3): failed to initialize system zone (-117) [ 76.102461][ T5911] EXT4-fs (loop3): mount failed [ 76.132443][ T5914] bridge0: port 3(batadv1) entered blocking state [ 76.138898][ T5914] bridge0: port 3(batadv1) entered disabled state [ 76.175392][ T5914] batadv1: entered allmulticast mode [ 76.197961][ T5914] batadv1: entered promiscuous mode [ 76.248705][ T5926] loop3: detected capacity change from 0 to 128 [ 76.255619][ T5926] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.267858][ T5926] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.286490][ T5928] loop2: detected capacity change from 0 to 512 [ 76.297443][ T5928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.594175][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.630595][ T4055] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 76.639829][ T4055] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 76.802430][ T4055] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.578787][ T5950] loop8: detected capacity change from 0 to 512 [ 77.590864][ T5950] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.598416][ T5956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5956 comm=syz.0.796 [ 77.619543][ T5950] EXT4-fs (loop8): failed to initialize system zone (-117) [ 77.626911][ T5950] EXT4-fs (loop8): mount failed [ 77.807591][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.792'. [ 77.851609][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 77.851625][ T29] audit: type=1326 audit(1754977787.544:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 77.881186][ T29] audit: type=1326 audit(1754977787.544:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 77.907684][ T29] audit: type=1326 audit(1754977787.594:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 77.931108][ T29] audit: type=1326 audit(1754977787.594:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 77.954451][ T29] audit: type=1326 audit(1754977787.594:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 77.980066][ T29] audit: type=1326 audit(1754977787.594:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 78.003789][ T29] audit: type=1326 audit(1754977787.594:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 78.027075][ T29] audit: type=1326 audit(1754977787.594:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 78.050450][ T29] audit: type=1326 audit(1754977787.594:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 78.073745][ T29] audit: type=1326 audit(1754977787.594:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 78.123210][ T5981] netlink: 96 bytes leftover after parsing attributes in process `syz.0.798'. [ 78.207237][ T5985] loop0: detected capacity change from 0 to 256 [ 78.231877][ T5985] FAT-fs (loop0): Directory bread(block 64) failed [ 78.238483][ T5985] FAT-fs (loop0): Directory bread(block 65) failed [ 78.245158][ T5985] FAT-fs (loop0): Directory bread(block 66) failed [ 78.252183][ T5985] FAT-fs (loop0): Directory bread(block 67) failed [ 78.258784][ T5985] FAT-fs (loop0): Directory bread(block 68) failed [ 78.267235][ T5985] FAT-fs (loop0): Directory bread(block 69) failed [ 78.276052][ T5985] FAT-fs (loop0): Directory bread(block 70) failed [ 78.282834][ T5985] FAT-fs (loop0): Directory bread(block 71) failed [ 78.290289][ T5985] FAT-fs (loop0): Directory bread(block 72) failed [ 78.296903][ T5985] FAT-fs (loop0): Directory bread(block 73) failed [ 78.658503][ T5997] loop2: detected capacity change from 0 to 1024 [ 78.666208][ T5997] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.675133][ T5997] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.686029][ T5997] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 78.699215][ T5997] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.732358][ T5997] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #17: comm syz.2.803: iget: bad i_size value: 4398046511204 [ 78.745782][ T5997] EXT4-fs (loop2): no journal found [ 79.002382][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.8.817'. [ 79.120031][ T6035] netlink: 'syz.0.819': attribute type 4 has an invalid length. [ 79.258041][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 79.266900][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 79.275680][ T6042] netlink: 2 bytes leftover after parsing attributes in process `syz.0.822'. [ 79.675053][ T6048] loop2: detected capacity change from 0 to 512 [ 79.705611][ T6048] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.824: error while reading EA inode 32 err=-116 [ 79.728927][ T6048] EXT4-fs (loop2): Remounting filesystem read-only [ 79.747596][ T6048] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.780408][ T6048] EXT4-fs (loop2): 1 orphan inode deleted [ 79.796307][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.913406][ T6062] netlink: 'syz.7.830': attribute type 4 has an invalid length. [ 79.927292][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.985034][ T6069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.831'. [ 79.993980][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 80.002858][ T6069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.831'. [ 80.011719][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 80.020717][ T6069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.831'. [ 80.238232][ T6092] bridge0: port 3(syz_tun) entered blocking state [ 80.245533][ T6092] bridge0: port 3(syz_tun) entered disabled state [ 80.259922][ T6092] syz_tun: entered allmulticast mode [ 80.266384][ T6092] bridge0: port 3(syz_tun) entered blocking state [ 80.272853][ T6092] bridge0: port 3(syz_tun) entered forwarding state [ 80.354409][ T6099] loop8: detected capacity change from 0 to 512 [ 80.375484][ T6099] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.843: error while reading EA inode 32 err=-116 [ 80.412131][ T6099] EXT4-fs (loop8): Remounting filesystem read-only [ 80.419691][ T6099] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.453065][ T6099] EXT4-fs (loop8): 1 orphan inode deleted [ 80.465469][ T6099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.504149][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.550059][ T6117] loop3: detected capacity change from 0 to 1024 [ 80.557612][ T6117] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.621956][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.745585][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.775138][ T6106] cgroup: fork rejected by pids controller in /syz7 [ 80.838324][ T6263] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.891668][ T6391] loop3: detected capacity change from 0 to 512 [ 80.911512][ T6263] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.919406][ T6391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.951510][ T6391] EXT4-fs (loop3): 1 truncate cleaned up [ 80.957519][ T6391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.971458][ T6263] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.031500][ T6263] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.087905][ T4029] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106948][ T4055] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.115378][ T4055] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.124893][ T4055] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.269104][ T6791] loop0: detected capacity change from 0 to 512 [ 81.302747][ T6791] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.862: corrupted in-inode xattr: invalid ea_ino [ 81.396597][ T6791] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.862: couldn't read orphan inode 15 (err -117) [ 81.411238][ T6791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.468724][ T6959] bond_slave_1: mtu less than device minimum [ 81.530566][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.623843][ T6963] loop7: detected capacity change from 0 to 512 [ 81.645731][ T6973] wireguard0: entered promiscuous mode [ 81.651461][ T6973] wireguard0: entered allmulticast mode [ 81.670159][ T6963] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.864: error while reading EA inode 32 err=-116 [ 81.720075][ T6963] EXT4-fs (loop7): Remounting filesystem read-only [ 81.727423][ T6963] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.758859][ T6963] EXT4-fs (loop7): 1 orphan inode deleted [ 81.770506][ T6963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.800305][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.883095][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.913269][ T6993] loop3: detected capacity change from 0 to 512 [ 81.920288][ T6993] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.927184][ T6993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.938825][ T6993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 81.939554][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.947172][ T6993] System zones: [ 81.953923][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.964661][ T6993] 1-12 [ 81.968772][ T6993] EXT4-fs (loop3): 1 truncate cleaned up [ 81.974878][ T6993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.991210][ T6991] wg2: left promiscuous mode [ 81.995887][ T6991] wg2: left allmulticast mode [ 82.050752][ T6994] lo: entered allmulticast mode [ 82.061076][ T6994] tunl0: entered allmulticast mode [ 82.067656][ T6994] gre0: entered allmulticast mode [ 82.107823][ T6994] erspan0: entered allmulticast mode [ 82.123253][ T6994] ip_vti0: entered allmulticast mode [ 82.139015][ T6994] ip6_vti0: entered allmulticast mode [ 82.157611][ T6994] sit0: entered allmulticast mode [ 82.174374][ T6994] ip6tnl0: entered allmulticast mode [ 82.181828][ T6994] ip6gre0: entered allmulticast mode [ 82.190195][ T6994] bridge0: port 3(syz_tun) entered disabled state [ 82.197351][ T6994] ip6gretap0: entered allmulticast mode [ 82.204535][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.204876][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.220669][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.227925][ T6994] bridge0: entered allmulticast mode [ 82.236029][ T6994] vcan0: entered allmulticast mode [ 82.241887][ T6994] bond0: entered allmulticast mode [ 82.247012][ T6994] bond_slave_0: entered allmulticast mode [ 82.252786][ T6994] bond_slave_1: entered allmulticast mode [ 82.260409][ T6994] team0: entered allmulticast mode [ 82.265538][ T6994] team_slave_0: entered allmulticast mode [ 82.271270][ T6994] team_slave_1: entered allmulticast mode [ 82.278335][ T6994] dummy0: entered allmulticast mode [ 82.285249][ T6994] nlmon0: entered allmulticast mode [ 82.292202][ T6994] caif0: entered allmulticast mode [ 82.298252][ T6994] vxcan0: entered allmulticast mode [ 82.304741][ T6994] vxcan1: entered allmulticast mode [ 82.310740][ T6994] veth0: entered allmulticast mode [ 82.317195][ T6994] veth1: entered allmulticast mode [ 82.326889][ T6994] wg1: entered allmulticast mode [ 82.339756][ T6994] wg2: entered allmulticast mode [ 82.346225][ T6994] veth0_to_bridge: entered allmulticast mode [ 82.355079][ T7010] loop2: detected capacity change from 0 to 512 [ 82.355485][ T6994] veth1_to_bridge: entered allmulticast mode [ 82.363019][ T7010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.370513][ T6994] veth0_to_bond: entered allmulticast mode [ 82.378681][ T7010] EXT4-fs (loop2): 1 truncate cleaned up [ 82.385151][ T6994] veth1_to_bond: entered allmulticast mode [ 82.389301][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.396670][ T6994] veth0_to_team: left promiscuous mode [ 82.408232][ T7010] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.412131][ T6994] veth0_to_team: entered allmulticast mode [ 82.427944][ T6994] veth1_to_team: entered allmulticast mode [ 82.437815][ T6994] veth0_to_batadv: entered allmulticast mode [ 82.445169][ T6994] batadv_slave_0: entered allmulticast mode [ 82.454232][ T6994] xfrm0: entered allmulticast mode [ 82.460603][ T6994] veth0_to_hsr: entered allmulticast mode [ 82.467209][ T6994] hsr_slave_0: entered allmulticast mode [ 82.473598][ T6994] veth1_to_hsr: entered allmulticast mode [ 82.480570][ T6994] hsr_slave_1: entered allmulticast mode [ 82.487084][ T6994] hsr0: entered allmulticast mode [ 82.493191][ T6994] veth1_virt_wifi: entered allmulticast mode [ 82.501002][ T6994] veth0_virt_wifi: entered allmulticast mode [ 82.507943][ T6994] veth1_vlan: entered allmulticast mode [ 82.514627][ T6994] veth0_vlan: entered allmulticast mode [ 82.522498][ T6994] vlan0: entered allmulticast mode [ 82.527931][ T6994] macvlan0: entered allmulticast mode [ 82.534144][ T6994] macvlan1: entered allmulticast mode [ 82.540785][ T6994] ipvlan0: entered allmulticast mode [ 82.546165][ T6994] ipvlan1: entered allmulticast mode [ 82.551634][ T6994] veth1_macvtap: entered allmulticast mode [ 82.558186][ T6994] veth0_macvtap: entered allmulticast mode [ 82.565096][ T6994] macvtap0: entered allmulticast mode [ 82.571405][ T6994] macsec0: entered allmulticast mode [ 82.577441][ T6994] geneve0: entered allmulticast mode [ 82.583731][ T6994] geneve1: entered allmulticast mode [ 82.589886][ T6994] bridge1: entered allmulticast mode [ 82.595685][ T6994] bridge2: entered allmulticast mode [ 82.601745][ T6994] veth2: entered allmulticast mode [ 82.607020][ T6994] veth3: entered allmulticast mode [ 82.612231][ T6994] netdevsim netdevsim0 eth0: entered allmulticast mode [ 82.619574][ T6994] netdevsim netdevsim0 eth1: entered allmulticast mode [ 82.626464][ T6994] netdevsim netdevsim0 eth2: entered allmulticast mode [ 82.633491][ T6994] netdevsim netdevsim0 eth3: entered allmulticast mode [ 82.640659][ T6994] bridge3: entered allmulticast mode [ 82.647148][ T4074] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.659330][ T4074] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.679936][ T4074] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.696163][ T4074] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.709584][ T4074] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.731356][ T4074] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.761150][ T4074] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.783002][ T4074] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.875940][ T7017] loop8: detected capacity change from 0 to 512 [ 82.901139][ T7017] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 82.925138][ T7017] EXT4-fs (loop8): 1 truncate cleaned up [ 82.948723][ T7017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.981621][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.002938][ T29] kauditd_printk_skb: 1165 callbacks suppressed [ 83.002951][ T29] audit: type=1400 audit(1754977792.694:3873): avc: denied { setopt } for pid=7024 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.033359][ T7025] ------------[ cut here ]------------ [ 83.038846][ T7025] 'send_pkt()' returns 0, but 65536 expected [ 83.046438][ T7025] WARNING: CPU: 0 PID: 7025 at net/vmw_vsock/virtio_transport_common.c:428 virtio_transport_send_pkt_info+0x846/0x860 [ 83.058910][ T7025] Modules linked in: [ 83.062863][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.3.891 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 83.075823][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.085968][ T7025] RIP: 0010:virtio_transport_send_pkt_info+0x846/0x860 [ 83.092876][ T7025] Code: 7b 01 fc 48 c7 c7 1d 37 d4 86 e8 75 2c 1c fc c6 05 0b b9 7d 01 01 90 48 c7 c7 5c dc 5e 86 44 89 fe 48 89 da e8 fb 1e cb fb 90 <0f> 0b 90 90 e9 f6 fe ff ff e8 9c 7b 01 fc 90 0f 0b 90 e9 04 fb ff [ 83.112586][ T7025] RSP: 0018:ffffc900001fb918 EFLAGS: 00010246 [ 83.119289][ T7025] RAX: b40e5b0c5b39f700 RBX: 0000000000010000 RCX: 0000000000080000 [ 83.127267][ T7025] RDX: ffffc90002c92000 RSI: 00000000000057a5 RDI: 00000000000057a6 [ 83.135256][ T7025] RBP: 0000000000010000 R08: 0001c900001fb78f R09: 0000000000000000 [ 83.143258][ T7025] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000040000 [ 83.151845][ T7025] R13: ffff88811a27c2ac R14: ffffffff86d1f4b8 R15: 0000000000000000 [ 83.159846][ T7025] FS: 00007ff59d71f6c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 83.168821][ T7025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.175433][ T7025] CR2: ffffffffffec0000 CR3: 00000001107fe000 CR4: 00000000003506f0 [ 83.184018][ T7025] DR0: 0020000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 83.192093][ T7025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 83.200109][ T7025] Call Trace: [ 83.203384][ T7025] [ 83.206322][ T7025] virtio_transport_seqpacket_enqueue+0xb4/0xe0 [ 83.213359][ T7025] vsock_connectible_sendmsg+0x74f/0x980 [ 83.219065][ T7025] ? __pfx_woken_wake_function+0x10/0x10 [ 83.224729][ T7025] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 83.230972][ T7025] __sock_sendmsg+0x145/0x180 [ 83.235687][ T7025] ____sys_sendmsg+0x345/0x4e0 [ 83.241220][ T7025] ___sys_sendmsg+0x17b/0x1d0 [ 83.245918][ T7025] __sys_sendmmsg+0x178/0x300 [ 83.250619][ T7025] __x64_sys_sendmmsg+0x57/0x70 [ 83.255508][ T7025] x64_sys_call+0x1c4a/0x2ff0 [ 83.260253][ T7025] do_syscall_64+0xd2/0x200 [ 83.264776][ T7025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.271481][ T7025] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.277207][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.283151][ T7025] RIP: 0033:0x7ff59ecbebe9 [ 83.287642][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.307982][ T7025] RSP: 002b:00007ff59d71f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.316491][ T7025] RAX: ffffffffffffffda RBX: 00007ff59eee5fa0 RCX: 00007ff59ecbebe9 [ 83.324491][ T7025] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 83.333183][ T7025] RBP: 00007ff59ed41e19 R08: 0000000000000000 R09: 0000000000000000 [ 83.341238][ T7025] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 83.349228][ T7025] R13: 00007ff59eee6038 R14: 00007ff59eee5fa0 R15: 00007ffc45c5d548 [ 83.357210][ T7025] [ 83.360864][ T7025] ---[ end trace 0000000000000000 ]--- [ 83.368477][ T7032] __nla_validate_parse: 5 callbacks suppressed [ 83.368492][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 83.398653][ T7034] loop0: detected capacity change from 0 to 512 [ 83.437640][ T7034] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.894: casefold flag without casefold feature [ 83.450976][ T7034] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.894: couldn't read orphan inode 15 (err -117) [ 83.466282][ T7034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.481551][ T7035] wireguard0: entered promiscuous mode [ 83.487210][ T7035] wireguard0: entered allmulticast mode [ 83.501553][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 83.566093][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.601245][ T29] audit: type=1400 audit(1754977793.294:3874): avc: denied { create } for pid=7044 comm="syz.2.897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.624809][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 83.646931][ T29] audit: type=1400 audit(1754977793.314:3875): avc: denied { mounton } for pid=7044 comm="syz.2.897" path="/211/file0" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.651645][ T7047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7047 comm=syz.3.898 [ 83.713246][ T7047] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 83.728751][ T29] audit: type=1400 audit(1754977793.414:3876): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.752442][ T7049] Falling back ldisc for ttyS3. [ 83.782776][ T7057] macsec0: left allmulticast mode [ 83.786236][ T29] audit: type=1326 audit(1754977793.414:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.811275][ T29] audit: type=1326 audit(1754977793.414:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.834807][ T29] audit: type=1326 audit(1754977793.414:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.858232][ T29] audit: type=1326 audit(1754977793.414:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.881588][ T29] audit: type=1326 audit(1754977793.414:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.904956][ T29] audit: type=1326 audit(1754977793.414:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 83.984733][ T7057] macsec0: entered promiscuous mode [ 83.990040][ T7057] macsec0: entered allmulticast mode [ 84.160807][ T7077] loop7: detected capacity change from 0 to 1024 [ 84.168689][ T7077] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.208541][ T7077] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.911: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.231672][ T7077] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.911: Failed to acquire dquot type 0 [ 84.246507][ T7066] pim6reg: entered allmulticast mode [ 84.254115][ T7077] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.911: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.275279][ T7066] pim6reg: left allmulticast mode [ 84.280890][ T7077] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.911: Invalid inode bitmap blk 0 in block_group 0 [ 84.297460][ T7077] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 84.306674][ T4046] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.322693][ T4046] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 84.324554][ T7077] EXT4-fs (loop7): 1 orphan inode deleted [ 84.340935][ T7077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.382815][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.431027][ T7088] loop7: detected capacity change from 0 to 1024 [ 84.451140][ T7088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.463439][ T7088] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.492930][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.598716][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 84.629441][ T7105] netlink: 256 bytes leftover after parsing attributes in process `syz.0.922'. [ 84.680049][ T7108] loop2: detected capacity change from 0 to 8192 [ 84.853841][ T7124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.928'. [ 85.091537][ T7136] loop2: detected capacity change from 0 to 2048 [ 85.118191][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.216873][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.248690][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 85.258966][ T7148] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 85.723765][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 85.820838][ T7179] bond0: (slave dummy0): Releasing backup interface [ 85.845532][ T7179] bond0: (slave bond_slave_0): Releasing backup interface [ 85.862868][ T7179] bond0: (slave bond_slave_1): Releasing backup interface [ 85.886196][ T7179] team0: Port device team_slave_0 removed [ 85.906055][ T7179] team0: Port device team_slave_1 removed [ 86.027524][ T7193] loop3: detected capacity change from 0 to 512 [ 86.090392][ T7193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.119270][ T7193] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.185628][ T7206] loop2: detected capacity change from 0 to 1024 [ 86.209059][ T7206] EXT4-fs: Ignoring removed orlov option [ 86.245963][ T7206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.486002][ T7222] loop8: detected capacity change from 0 to 512 [ 86.514346][ T7222] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.621256][ T7229] loop2: detected capacity change from 0 to 128 [ 86.696626][ T7236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7236 comm=syz.8.974 [ 86.721846][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.974'. [ 86.788368][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 86.799199][ T7240] loop9: detected capacity change from 0 to 7 [ 86.805382][ T7240] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.815447][ T7240] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.823438][ T7240] loop9: unable to read partition table [ 86.837901][ T7240] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 86.837901][ T7240] ) failed (rc=-5) [ 86.963979][ T7255] loop0: detected capacity change from 0 to 512 [ 87.009460][ T7255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 87.024261][ T7255] System zones: 1-12 [ 87.031432][ T7255] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.982: error while reading EA inode 32 err=-116 [ 87.076711][ T7255] EXT4-fs (loop0): Remounting filesystem read-only [ 87.083356][ T7255] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 87.088414][ T7229] bio_check_eod: 98 callbacks suppressed [ 87.088471][ T7229] syz.2.971: attempt to access beyond end of device [ 87.088471][ T7229] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.118012][ T7229] syz.2.971: attempt to access beyond end of device [ 87.118012][ T7229] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.134798][ T7255] EXT4-fs (loop0): 1 orphan inode deleted [ 87.145011][ T7229] syz.2.971: attempt to access beyond end of device [ 87.145011][ T7229] loop2: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 87.158892][ T7229] syz.2.971: attempt to access beyond end of device [ 87.158892][ T7229] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 87.182538][ T7229] syz.2.971: attempt to access beyond end of device [ 87.182538][ T7229] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.199023][ T7262] dvmrp1: entered allmulticast mode [ 87.204391][ T7229] syz.2.971: attempt to access beyond end of device [ 87.204391][ T7229] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.226843][ T7229] syz.2.971: attempt to access beyond end of device [ 87.226843][ T7229] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.240743][ T7229] syz.2.971: attempt to access beyond end of device [ 87.240743][ T7229] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 87.261665][ T7229] syz.2.971: attempt to access beyond end of device [ 87.261665][ T7229] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 87.275426][ T7229] syz.2.971: attempt to access beyond end of device [ 87.275426][ T7229] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 87.394392][ T7272] loop7: detected capacity change from 0 to 764 [ 87.399486][ T7270] loop3: detected capacity change from 0 to 512 [ 87.407589][ T7270] EXT4-fs: Ignoring removed oldalloc option [ 87.425085][ T7270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.987: Parent and EA inode have the same ino 15 [ 87.441037][ T7270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.987: Parent and EA inode have the same ino 15 [ 87.453684][ T7270] EXT4-fs (loop3): 1 orphan inode deleted [ 87.694551][ T7298] loop2: detected capacity change from 0 to 128 [ 87.728755][ T7301] loop2: detected capacity change from 0 to 512 [ 87.735828][ T7301] ext4: Unknown parameter 'euid>00000000000000000000' [ 87.789354][ T7306] loop2: detected capacity change from 0 to 512 [ 87.802461][ T7306] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.945900][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.955564][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.017673][ T7329] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 88.111686][ T7334] loop2: detected capacity change from 0 to 512 [ 88.131029][ T7334] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.183479][ T7338] pim6reg1: entered promiscuous mode [ 88.188816][ T7338] pim6reg1: entered allmulticast mode [ 88.373250][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 88.373265][ T29] audit: type=1400 audit(1754977798.064:4464): avc: denied { setattr } for pid=7345 comm="syz.3.1019" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.438443][ T29] audit: type=1400 audit(1754977798.124:4465): avc: denied { read write } for pid=7349 comm="syz.2.1022" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.440403][ T3382] hid_parser_main: 6 callbacks suppressed [ 88.440419][ T3382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.462985][ T29] audit: type=1400 audit(1754977798.124:4466): avc: denied { open } for pid=7349 comm="syz.2.1022" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.499850][ T3382] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.554727][ T7354] __nla_validate_parse: 4 callbacks suppressed [ 88.554744][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1023'. [ 88.604730][ T29] audit: type=1326 audit(1754977798.294:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.630876][ T29] audit: type=1326 audit(1754977798.294:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.655745][ T29] audit: type=1326 audit(1754977798.324:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.679867][ T29] audit: type=1326 audit(1754977798.324:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.703265][ T29] audit: type=1326 audit(1754977798.324:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.727375][ T29] audit: type=1326 audit(1754977798.324:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.751420][ T29] audit: type=1326 audit(1754977798.324:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.7.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 88.922199][ T7384] loop2: detected capacity change from 0 to 1024 [ 88.956547][ T7387] loop8: detected capacity change from 0 to 512 [ 88.996043][ T7389] loop3: detected capacity change from 0 to 512 [ 89.002857][ T7384] EXT4-fs: Ignoring removed orlov option [ 89.035818][ T7391] loop0: detected capacity change from 0 to 764 [ 89.053981][ T7389] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.055644][ T7387] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.349529][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1042'. [ 89.368054][ T7412] loop0: detected capacity change from 0 to 512 [ 89.410642][ T7412] EXT4-fs: Ignoring removed oldalloc option [ 89.460907][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1041: Parent and EA inode have the same ino 15 [ 89.554905][ T7420] vhci_hcd: invalid port number 96 [ 89.560212][ T7420] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.634403][ T7422] veth3: entered promiscuous mode [ 89.653973][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1041: Parent and EA inode have the same ino 15 [ 89.716510][ T7433] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 89.725391][ T7412] EXT4-fs (loop0): 1 orphan inode deleted [ 89.741195][ T7433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.819868][ T7433] bond2: (slave geneve2): making interface the new active one [ 89.845274][ T7433] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 89.928039][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 89.945626][ T7455] veth3: entered promiscuous mode [ 90.733736][ T7473] loop3: detected capacity change from 0 to 128 [ 90.763131][ T7473] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.874259][ T7482] loop0: detected capacity change from 0 to 2048 [ 90.893393][ T7486] loop2: detected capacity change from 0 to 512 [ 90.907321][ T7480] loop8: detected capacity change from 0 to 512 [ 90.920397][ T7480] EXT4-fs: Ignoring removed oldalloc option [ 90.933278][ T7480] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1066: Parent and EA inode have the same ino 15 [ 90.946236][ T7482] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.950499][ T7480] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1066: Parent and EA inode have the same ino 15 [ 90.970020][ T7486] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.978107][ T7486] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.981120][ T7482] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.1078: bit already cleared for inode 15 [ 90.985352][ T7486] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.011324][ T7486] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 91.086194][ T7480] EXT4-fs (loop8): 1 orphan inode deleted [ 91.100426][ T7486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1067: bg 0: block 40: padding at end of block bitmap is not set [ 91.146492][ T7486] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 91.188604][ T7486] EXT4-fs (loop2): 1 truncate cleaned up [ 91.238821][ T7486] netlink: 'syz.2.1067': attribute type 39 has an invalid length. [ 91.416574][ T7510] tipc: Enabled bearer , priority 0 [ 91.425447][ T7509] bridge: RTM_NEWNEIGH with invalid ether address [ 91.442490][ T7510] D: renamed from syzkaller0 [ 91.453419][ T7510] tipc: Disabling bearer [ 91.689024][ T7533] bridge0: port 1(batadv0) entered blocking state [ 91.696253][ T7533] bridge0: port 1(batadv0) entered disabled state [ 91.704246][ T7533] batadv0: entered allmulticast mode [ 91.710009][ T7533] batadv0: entered promiscuous mode [ 91.753769][ T7540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.795888][ T7540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.841102][ T7540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.901267][ T7540] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.967559][ T4045] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987683][ T4045] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.996400][ T4045] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.009495][ T4045] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.189677][ T4053] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 92.198959][ T4053] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 92.262431][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 92.594407][ T7616] loop7: detected capacity change from 0 to 128 [ 93.324453][ T7616] bio_check_eod: 98 callbacks suppressed [ 93.324505][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.324505][ T7616] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 93.378493][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.378493][ T7616] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 93.393342][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 93.393353][ T29] audit: type=1326 audit(1754977803.084:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.396288][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.396288][ T7616] loop7: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 93.452823][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.452823][ T7616] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 93.461553][ T29] audit: type=1326 audit(1754977803.144:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.474686][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.474686][ T7616] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 93.512693][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.512693][ T7616] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 93.535730][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.535730][ T7616] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 93.551270][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.551270][ T7616] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 93.564055][ T29] audit: type=1326 audit(1754977803.154:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.572734][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.572734][ T7616] loop7: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 93.588321][ T29] audit: type=1326 audit(1754977803.204:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.610389][ T7616] syz.7.1100: attempt to access beyond end of device [ 93.610389][ T7616] loop7: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 93.625170][ T29] audit: type=1326 audit(1754977803.224:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.625196][ T29] audit: type=1326 audit(1754977803.244:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.696725][ T29] audit: type=1326 audit(1754977803.254:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.720912][ T29] audit: type=1326 audit(1754977803.294:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.744386][ T29] audit: type=1326 audit(1754977803.384:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.769267][ T29] audit: type=1326 audit(1754977803.454:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 93.925767][ T7719] bridge0: port 3(batadv0) entered blocking state [ 93.932274][ T7719] bridge0: port 3(batadv0) entered disabled state [ 93.938979][ T7719] batadv0: entered allmulticast mode [ 93.945568][ T7719] batadv0: entered promiscuous mode [ 94.014889][ T7724] netlink: 'syz.2.1118': attribute type 4 has an invalid length. [ 94.131733][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 94.429428][ T4053] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.438719][ T4053] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.066360][ T7790] netlink: 'syz.2.1142': attribute type 4 has an invalid length. [ 95.082908][ T7790] netlink: 'syz.2.1142': attribute type 4 has an invalid length. [ 95.216227][ T7802] bridge0: port 4(batadv0) entered blocking state [ 95.222748][ T7802] bridge0: port 4(batadv0) entered disabled state [ 95.233376][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1151'. [ 95.241656][ T7802] batadv0: entered allmulticast mode [ 95.249801][ T7802] batadv0: entered promiscuous mode [ 95.279050][ T7813] bridge0: port 4(syz_tun) entered blocking state [ 95.285596][ T7813] bridge0: port 4(syz_tun) entered disabled state [ 95.293527][ T7813] syz_tun: entered promiscuous mode [ 95.433843][ T7831] loop0: detected capacity change from 0 to 1024 [ 95.442700][ T7827] netlink: 'syz.3.1159': attribute type 4 has an invalid length. [ 95.450676][ T7831] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.497490][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 95.515737][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 95.525710][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 95.534941][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 95.587116][ T7846] loop0: detected capacity change from 0 to 512 [ 95.611636][ T7846] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 95.649082][ T7846] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.682620][ T7854] bridge0: port 4(syz_tun) entered blocking state [ 95.689396][ T7854] bridge0: port 4(syz_tun) entered disabled state [ 95.697074][ T7846] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.697148][ T7854] syz_tun: entered allmulticast mode [ 95.718390][ T7854] syz_tun: entered promiscuous mode [ 95.720783][ T7846] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 95.730600][ T4042] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 95.739888][ T4042] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.750444][ T7846] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1175: bg 0: block 40: padding at end of block bitmap is not set [ 95.765004][ T7846] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 95.773989][ T7846] EXT4-fs (loop0): 1 truncate cleaned up [ 95.788561][ T7846] netlink: 'syz.0.1175': attribute type 39 has an invalid length. [ 95.864148][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 95.885835][ T7862] wireguard0: entered promiscuous mode [ 95.891422][ T7862] wireguard0: entered allmulticast mode [ 95.926572][ T7869] syz_tun: left allmulticast mode [ 95.932291][ T7869] syz_tun: left promiscuous mode [ 95.937365][ T7869] bridge0: port 4(syz_tun) entered disabled state [ 95.945969][ T7869] bridge_slave_0: left allmulticast mode [ 95.951694][ T7869] bridge_slave_0: left promiscuous mode [ 95.957452][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.985177][ T7869] bridge_slave_1: left allmulticast mode [ 95.991506][ T7869] bridge_slave_1: left promiscuous mode [ 95.997185][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.019414][ T7869] bond0: (slave 5@): Releasing backup interface [ 96.027015][ T7869] bond0: (slave bond_slave_1): Releasing backup interface [ 96.045426][ T7869] batadv0: left allmulticast mode [ 96.050909][ T7869] batadv0: left promiscuous mode [ 96.055922][ T7869] bridge0: port 3(batadv0) entered disabled state [ 96.133894][ T7874] loop8: detected capacity change from 0 to 1024 [ 96.142594][ T7874] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.157942][ T7878] loop7: detected capacity change from 0 to 512 [ 96.165183][ T7878] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.201037][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 96.222037][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 12: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 96.243117][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 13: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 96.266346][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 14: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 96.288542][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 15: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 96.310585][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 96.332485][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 17: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 96.354588][ T7878] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 18: comm syz.7.1179: lblock 23 mapped to illegal pblock 18 (length 1) [ 96.369148][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 19: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 96.391595][ T7878] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 20: comm syz.7.1179: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 96.548069][ T7894] loop3: detected capacity change from 0 to 512 [ 96.569954][ T7894] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.578096][ T7894] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.587088][ T7894] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.602014][ T7894] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 96.609783][ T7894] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1183: bg 0: block 40: padding at end of block bitmap is not set [ 96.628856][ T7894] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 96.638393][ T7894] EXT4-fs (loop3): 1 truncate cleaned up [ 96.645614][ T7894] EXT4-fs mount: 35 callbacks suppressed [ 96.645686][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.684602][ T7894] netlink: 'syz.3.1183': attribute type 39 has an invalid length. [ 96.837590][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.011502][ T7904] loop0: detected capacity change from 0 to 512 [ 97.029605][ T7904] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.042826][ T7904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.055684][ T4551] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 97.073375][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.083199][ T7904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 97.094372][ T7904] System zones: 1-12 [ 97.099783][ T7904] EXT4-fs (loop0): 1 truncate cleaned up [ 97.106316][ T7904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.123139][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1189'. [ 97.139108][ T7911] wireguard0: entered promiscuous mode [ 97.144822][ T7911] wireguard0: entered allmulticast mode [ 97.205800][ T7914] loop3: detected capacity change from 0 to 128 [ 97.320106][ T7920] lo: left allmulticast mode [ 97.324816][ T7920] tunl0: left allmulticast mode [ 97.329816][ T7920] gre0: left allmulticast mode [ 97.334701][ T7920] gretap0: left allmulticast mode [ 97.339934][ T7920] erspan0: left allmulticast mode [ 97.345084][ T7920] ip_vti0: left allmulticast mode [ 97.350917][ T7920] ip6_vti0: left allmulticast mode [ 97.356153][ T7920] sit0: left allmulticast mode [ 97.361169][ T7920] ip6tnl0: left allmulticast mode [ 97.366283][ T7920] ip6gre0: left allmulticast mode [ 97.371546][ T7920] ip6gretap0: left allmulticast mode [ 97.376964][ T7920] bridge0: left allmulticast mode [ 97.382613][ T7920] vcan0: left allmulticast mode [ 97.387497][ T7920] bond0: left allmulticast mode [ 97.392434][ T7920] team0: left allmulticast mode [ 97.397588][ T7920] dummy0: left allmulticast mode [ 97.402699][ T7920] nlmon0: left allmulticast mode [ 97.407759][ T7920] caif0: left allmulticast mode [ 97.413412][ T7920] batadv0: left allmulticast mode [ 97.418475][ T7920] vxcan0: left allmulticast mode [ 97.423502][ T7920] vxcan1: left allmulticast mode [ 97.428475][ T7920] veth0: left allmulticast mode [ 97.433406][ T7920] veth1: left allmulticast mode [ 97.438354][ T7920] wg0: left allmulticast mode [ 97.443838][ T7920] wg1: left allmulticast mode [ 97.448622][ T7920] wg2: left allmulticast mode [ 97.453464][ T7920] veth0_to_bridge: left allmulticast mode [ 97.459338][ T7920] veth1_to_bridge: left allmulticast mode [ 97.465159][ T7920] veth0_to_bond: left allmulticast mode [ 97.471526][ T7920] bond_slave_0: left allmulticast mode [ 97.477027][ T7920] veth1_to_bond: left allmulticast mode [ 97.482724][ T7920] bond_slave_1: left allmulticast mode [ 97.488362][ T7920] veth0_to_team: left allmulticast mode [ 97.493971][ T7920] team_slave_0: left allmulticast mode [ 97.500154][ T7920] veth1_to_team: left allmulticast mode [ 97.505734][ T7920] team_slave_1: left allmulticast mode [ 97.511258][ T7920] veth0_to_batadv: left allmulticast mode [ 97.517082][ T7920] batadv_slave_0: left allmulticast mode [ 97.522868][ T7920] veth1_to_batadv: left allmulticast mode [ 97.528611][ T7920] batadv_slave_1: left allmulticast mode [ 97.534967][ T7920] xfrm0: left allmulticast mode [ 97.539866][ T7920] veth0_to_hsr: left allmulticast mode [ 97.545557][ T7920] veth1_to_hsr: left allmulticast mode [ 97.551507][ T7920] hsr0: left allmulticast mode [ 97.556274][ T7920] hsr_slave_0: left allmulticast mode [ 97.562254][ T7920] hsr_slave_1: left allmulticast mode [ 97.567685][ T7920] veth1_virt_wifi: left allmulticast mode [ 97.573539][ T7920] veth0_virt_wifi: left allmulticast mode [ 97.579331][ T7920] veth1_vlan: left allmulticast mode [ 97.584705][ T7920] vlan0: left allmulticast mode [ 97.590290][ T7920] vlan1: left allmulticast mode [ 97.595387][ T7920] macvlan0: left allmulticast mode [ 97.600571][ T7920] macvlan1: left allmulticast mode [ 97.605729][ T7920] ipvlan0: left allmulticast mode [ 97.610851][ T7920] ipvlan1: left allmulticast mode [ 97.615868][ T7920] veth0_vlan: left allmulticast mode [ 97.621848][ T7920] veth1_macvtap: left allmulticast mode [ 97.627465][ T7920] veth0_macvtap: left allmulticast mode [ 97.633096][ T7920] macvtap0: left allmulticast mode [ 97.638316][ T7920] macsec0: left allmulticast mode [ 97.643420][ T7920] geneve0: left allmulticast mode [ 97.648556][ T7920] geneve1: left allmulticast mode [ 97.654343][ T7920] bridge1: left allmulticast mode [ 97.660088][ T7920] bond1: left promiscuous mode [ 97.664858][ T7920] bond1: left allmulticast mode [ 97.673585][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.684873][ T7920] veth3: left promiscuous mode [ 98.498749][ T7951] netlink: 'syz.8.1204': attribute type 1 has an invalid length. [ 98.511870][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.525118][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1204'. [ 98.535720][ T7951] bond2 (unregistering): Released all slaves [ 98.596527][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1206'. [ 98.606935][ T7955] loop0: detected capacity change from 0 to 2048 [ 98.632220][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.647640][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 98.647653][ T29] audit: type=1400 audit(1754977808.334:5408): avc: denied { append } for pid=7954 comm="syz.0.1205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.666674][ T7955] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1205: bg 0: block 234: padding at end of block bitmap is not set [ 98.695097][ T7955] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 98.707561][ T7955] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.707561][ T7955] [ 98.748371][ T7963] wireguard0: entered promiscuous mode [ 98.766392][ T7963] wireguard0: entered allmulticast mode [ 98.777257][ T4069] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 98.789637][ T4069] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.789637][ T4069] [ 98.799398][ T4069] EXT4-fs (loop0): Total free blocks count 0 [ 98.805391][ T4069] EXT4-fs (loop0): Free/Dirty block details [ 98.811387][ T4069] EXT4-fs (loop0): free_blocks=0 [ 98.816316][ T4069] EXT4-fs (loop0): dirty_blocks=16 [ 98.821467][ T4069] EXT4-fs (loop0): Block reservation details [ 99.005104][ T7974] loop0: detected capacity change from 0 to 512 [ 99.032789][ T7974] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.066430][ T7974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.074095][ T7974] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1212: Block bitmap for bg 0 marked uninitialized [ 99.136415][ T7974] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.157231][ T7992] wg2: entered promiscuous mode [ 99.162199][ T7992] wg2: entered allmulticast mode [ 99.180134][ T7974] EXT4-fs (loop0): 1 orphan inode deleted [ 99.191103][ T7974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.219784][ T29] audit: type=1400 audit(1754977808.914:5409): avc: denied { remount } for pid=7971 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.253493][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.271786][ T29] audit: type=1326 audit(1754977808.964:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.297817][ T29] audit: type=1326 audit(1754977808.964:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.321945][ T29] audit: type=1326 audit(1754977808.964:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.345319][ T29] audit: type=1326 audit(1754977808.964:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0323d3ec23 code=0x7ffc0000 [ 99.369224][ T29] audit: type=1326 audit(1754977808.964:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0323d3ec23 code=0x7ffc0000 [ 99.392589][ T29] audit: type=1326 audit(1754977808.964:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.416013][ T29] audit: type=1326 audit(1754977808.964:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.417623][ T8002] loop3: detected capacity change from 0 to 512 [ 99.440119][ T29] audit: type=1326 audit(1754977808.964:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323d3ebe9 code=0x7ffc0000 [ 99.447797][ T8002] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.480706][ T8002] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.487234][ T8002] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1232: Block bitmap for bg 0 marked uninitialized [ 99.500725][ T8002] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.510654][ T8002] EXT4-fs (loop3): 1 orphan inode deleted [ 99.516859][ T8002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.550757][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.939938][ T8020] wireguard0: entered promiscuous mode [ 99.945800][ T8020] wireguard0: entered allmulticast mode [ 99.978620][ T8024] __nla_validate_parse: 6 callbacks suppressed [ 99.978651][ T8024] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1226'. [ 100.122773][ T8026] veth0: entered promiscuous mode [ 100.130765][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 100.518895][ T8038] loop7: detected capacity change from 0 to 8192 [ 100.553153][ T8044] SELinux: failed to load policy [ 100.712978][ T8051] loop7: detected capacity change from 0 to 512 [ 100.748865][ T8051] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 100.788819][ T8051] EXT4-fs (loop7): 1 truncate cleaned up [ 100.818888][ T8051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.921796][ T8060] loop8: detected capacity change from 0 to 512 [ 100.942436][ T8060] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 100.951634][ T8060] EXT4-fs (loop8): orphan cleanup on readonly fs [ 100.959011][ T8060] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.973954][ T8060] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 100.989747][ T8060] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1240: bg 0: block 40: padding at end of block bitmap is not set [ 101.011423][ T8060] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.038107][ T8060] EXT4-fs (loop8): 1 truncate cleaned up [ 101.055178][ T8060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.090342][ T8060] netlink: 'syz.8.1240': attribute type 39 has an invalid length. [ 101.255645][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.344977][ T8086] loop0: detected capacity change from 0 to 1024 [ 101.352566][ T8086] EXT4-fs: Ignoring removed orlov option [ 101.386378][ T8086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.393910][ T8083] loop3: detected capacity change from 0 to 2048 [ 101.450428][ T8083] loop3: p1 < > p4 [ 101.456396][ T8083] loop3: p4 size 8388608 extends beyond EOD, truncated [ 101.687800][ T8105] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1253'. [ 101.703332][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.953790][ T8118] loop7: detected capacity change from 0 to 512 [ 101.980681][ T8118] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 101.997530][ T8118] EXT4-fs (loop7): orphan cleanup on readonly fs [ 102.029788][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.030392][ T8118] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.059971][ T8118] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 102.075665][ T8119] loop3: detected capacity change from 0 to 8192 [ 102.082641][ T8118] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1262: bg 0: block 40: padding at end of block bitmap is not set [ 102.151151][ T8118] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 102.175116][ T8118] EXT4-fs (loop7): 1 truncate cleaned up [ 102.199698][ T8118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.277663][ T8118] netlink: 'syz.7.1262': attribute type 39 has an invalid length. [ 102.420128][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.472744][ T8143] loop8: detected capacity change from 0 to 512 [ 102.492159][ T8143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.530029][ T8143] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.573296][ T8135] pim6reg: entered allmulticast mode [ 102.582866][ T8135] pim6reg: left allmulticast mode [ 102.673532][ T8159] bond_slave_1: mtu less than device minimum [ 102.716232][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.799410][ T8167] loop8: detected capacity change from 0 to 8192 [ 103.010555][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 103.135543][ T8195] loop0: detected capacity change from 0 to 128 [ 103.254108][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 103.264159][ T4019] bio_check_eod: 206 callbacks suppressed [ 103.264248][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.264248][ T4019] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 103.283783][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.283783][ T4019] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 103.287525][ T8206] loop8: detected capacity change from 0 to 512 [ 103.297298][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297298][ T4019] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 103.297331][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297331][ T4019] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 103.297474][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297474][ T4019] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 103.297507][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297507][ T4019] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 103.297641][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297641][ T4019] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 103.297673][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297673][ T4019] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 103.297716][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297716][ T4019] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 103.297769][ T4019] kworker/u8:18: attempt to access beyond end of device [ 103.297769][ T4019] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 103.436596][ T8206] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 103.445320][ T8206] EXT4-fs (loop8): orphan cleanup on readonly fs [ 103.460943][ T8206] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.476405][ T8206] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 103.486466][ T8206] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1297: bg 0: block 40: padding at end of block bitmap is not set [ 103.511480][ T8206] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 103.526758][ T8206] EXT4-fs (loop8): 1 truncate cleaned up [ 103.533576][ T8206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.549574][ T8206] netlink: 'syz.8.1297': attribute type 39 has an invalid length. [ 103.568714][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.615723][ T8228] netlink: 'syz.7.1304': attribute type 1 has an invalid length. [ 103.640213][ T8224] wireguard0: entered promiscuous mode [ 103.645962][ T8224] wireguard0: entered allmulticast mode [ 103.646050][ T8233] loop8: detected capacity change from 0 to 512 [ 103.662320][ T8233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.676014][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 103.676090][ T29] audit: type=1326 audit(1754977813.364:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.705950][ T29] audit: type=1326 audit(1754977813.364:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.724859][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1304'. [ 103.729295][ T29] audit: type=1326 audit(1754977813.364:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729360][ T29] audit: type=1326 audit(1754977813.364:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729381][ T29] audit: type=1326 audit(1754977813.364:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729406][ T29] audit: type=1326 audit(1754977813.364:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729437][ T29] audit: type=1326 audit(1754977813.364:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729484][ T29] audit: type=1326 audit(1754977813.364:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.729508][ T29] audit: type=1400 audit(1754977813.364:5714): avc: denied { connect } for pid=8229 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.729546][ T29] audit: type=1326 audit(1754977813.364:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d64ebe9 code=0x7ffc0000 [ 103.741080][ T8233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.934599][ T8233] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.973461][ T8228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.981541][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.996263][ T8236] bond2 (unregistering): Released all slaves [ 104.122477][ T8246] loop7: detected capacity change from 0 to 2048 [ 104.159351][ T8251] loop8: detected capacity change from 0 to 512 [ 104.166331][ T8251] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 104.180599][ T8246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.203002][ T8251] EXT4-fs (loop8): 1 truncate cleaned up [ 104.222368][ T8251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.235618][ T4551] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 104.250628][ T4551] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 104.265900][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.404742][ T8265] bond_slave_1: entered promiscuous mode [ 104.410963][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1313'. [ 104.422605][ T8265] bond0: (slave bond_slave_1): Releasing backup interface [ 104.430470][ T8265] bond_slave_1 (unregistering): left promiscuous mode [ 104.523679][ T8270] loop2: detected capacity change from 0 to 512 [ 104.536596][ T8269] SELinux: failed to load policy [ 104.551696][ T8270] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.563255][ T8270] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 104.573503][ T8270] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1314: Corrupt directory, running e2fsck is recommended [ 104.588908][ T8270] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 104.601759][ T8270] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1314: corrupted in-inode xattr: invalid ea_ino [ 104.615575][ T8270] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1314: couldn't read orphan inode 15 (err -117) [ 104.630565][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.652119][ T8270] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.664025][ T8270] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 104.674091][ T8270] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1314: Corrupt directory, running e2fsck is recommended [ 104.687475][ T8270] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1314: path /306/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 104.710954][ T8270] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 64: comm syz.2.1314: path /306/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 104.772390][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.833403][ T8282] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 104.833403][ T8282] The task syz.7.1317 (8282) triggered the difference, watch for misbehavior. [ 105.088731][ T8290] loop3: detected capacity change from 0 to 1024 [ 105.095545][ T8290] EXT4-fs: Ignoring removed orlov option [ 105.106867][ T8290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.147473][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.199246][ T8301] loop8: detected capacity change from 0 to 128 [ 105.346802][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.364354][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.403515][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.633069][ T8328] loop0: detected capacity change from 0 to 512 [ 105.641338][ T8324] syz_tun: entered allmulticast mode [ 105.641963][ T8328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.664349][ T8328] EXT4-fs (loop0): 1 truncate cleaned up [ 105.670253][ T8323] syz_tun: left allmulticast mode [ 105.678614][ T8328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.701467][ T8332] netlink: 'syz.8.1336': attribute type 1 has an invalid length. [ 105.717102][ T8332] bond2: entered promiscuous mode [ 105.723091][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.738640][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.745705][ T8332] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 105.756360][ T8332] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 105.767983][ T8332] bond2: (slave wireguard0): making interface the new active one [ 105.775832][ T8332] wireguard0: entered promiscuous mode [ 105.783622][ T8332] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 105.804444][ T8332] bond2: (slave wireguard0): Releasing backup interface [ 105.811522][ T8332] wireguard0: left promiscuous mode [ 105.863116][ T8341] loop3: detected capacity change from 0 to 1024 [ 105.870758][ T8341] EXT4-fs: Ignoring removed orlov option [ 105.878657][ T8341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.207910][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.227822][ T8354] loop2: detected capacity change from 0 to 1024 [ 106.256976][ T8357] wireguard0: entered promiscuous mode [ 106.263839][ T8357] wireguard0: entered allmulticast mode [ 106.290449][ T8354] EXT4-fs: Ignoring removed orlov option [ 106.306085][ T8354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.610887][ T8368] loop9: detected capacity change from 0 to 7 [ 106.618366][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.627805][ T8368] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.636929][ T8368] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.637433][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.644785][ T8368] loop9: unable to read partition table [ 106.644980][ T8368] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.644980][ T8368] ) failed (rc=-5) [ 106.701937][ T8375] loop2: detected capacity change from 0 to 512 [ 106.722507][ T8375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.765991][ T8375] EXT4-fs (loop2): 1 truncate cleaned up [ 106.847692][ T8375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.874454][ T8394] tipc: Enabled bearer , priority 0 [ 106.890807][ T8394] tipc: Disabling bearer [ 106.962623][ T8400] loop7: detected capacity change from 0 to 1024 [ 106.969258][ T8400] EXT4-fs: Ignoring removed orlov option [ 107.095607][ T8400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.251016][ T8410] netlink: 'syz.3.1362': attribute type 3 has an invalid length. [ 107.845325][ T4551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.907538][ T8418] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 107.958223][ T8422] netlink: 'syz.7.1368': attribute type 1 has an invalid length. [ 108.011911][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.013111][ T8422] bond2: entered promiscuous mode [ 108.031273][ T8425] loop0: detected capacity change from 0 to 764 [ 108.043933][ T8425] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 108.053456][ T8422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.065090][ T8428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.099794][ T8428] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 108.110361][ T8428] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 108.126917][ T8428] bond2: (slave wireguard0): making interface the new active one [ 108.134814][ T8428] wireguard0: entered promiscuous mode [ 108.191390][ T8436] loop2: detected capacity change from 0 to 1024 [ 108.217492][ T8428] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 108.234188][ T8436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.244499][ T8422] syz_tun: left allmulticast mode [ 108.250280][ T8422] syz_tun: left promiscuous mode [ 108.255457][ T8422] bridge0: port 4(syz_tun) entered disabled state [ 108.264316][ T8422] bridge_slave_0: left allmulticast mode [ 108.270028][ T8422] bridge_slave_0: left promiscuous mode [ 108.275697][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.284995][ T8436] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 108.306031][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.362947][ T8422] bridge_slave_1: left allmulticast mode [ 108.368677][ T8422] bridge_slave_1: left promiscuous mode [ 108.375136][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.385107][ T8422] bond0: (slave bond_slave_0): Releasing backup interface [ 108.394205][ T8422] team0: Port device team_slave_0 removed [ 108.406442][ T8422] team0: Port device team_slave_1 removed [ 108.415618][ T8436] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.430723][ T8436] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1374: iget: bad extended attribute block 8388352 [ 108.452800][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.471200][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.500363][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.512795][ T8422] batadv1: left allmulticast mode [ 108.517818][ T8422] batadv1: left promiscuous mode [ 108.522943][ T8422] bridge0: port 3(batadv1) entered disabled state [ 108.544208][ T8422] bond2: (slave wireguard0): Releasing backup interface [ 108.551234][ T8422] wireguard0: left promiscuous mode [ 108.564073][ T8462] loop3: detected capacity change from 0 to 512 [ 108.574099][ T8462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.598177][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1385'. [ 108.599041][ T8462] EXT4-fs (loop3): 1 truncate cleaned up [ 108.614774][ T8462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.693449][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.739849][ T8473] netlink: 'syz.3.1387': attribute type 17 has an invalid length. [ 108.747775][ T8473] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1387'. [ 108.827837][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 108.827851][ T29] audit: type=1326 audit(1754977818.514:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.873273][ T29] audit: type=1326 audit(1754977818.514:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.896755][ T29] audit: type=1326 audit(1754977818.554:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.920162][ T29] audit: type=1326 audit(1754977818.554:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.943713][ T29] audit: type=1326 audit(1754977818.554:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.967113][ T29] audit: type=1326 audit(1754977818.554:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.970215][ T4019] batman_adv: batadv0: IGMP Querier appeared [ 108.990527][ T29] audit: type=1326 audit(1754977818.554:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.990625][ T29] audit: type=1326 audit(1754977818.554:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.990650][ T29] audit: type=1326 audit(1754977818.554:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 108.990674][ T29] audit: type=1326 audit(1754977818.554:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ecbebe9 code=0x7ffc0000 [ 109.092530][ T4019] batman_adv: batadv0: MLD Querier appeared [ 109.115445][ T8492] loop8: detected capacity change from 0 to 164 [ 109.125181][ T8492] bio_check_eod: 119 callbacks suppressed [ 109.125193][ T8492] syz.8.1396: attempt to access beyond end of device [ 109.125193][ T8492] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 109.145254][ T8492] syz.8.1396: attempt to access beyond end of device [ 109.145254][ T8492] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 109.229330][ T8502] lo speed is unknown, defaulting to 1000 [ 109.245971][ T8502] lo speed is unknown, defaulting to 1000 [ 109.252276][ T8502] lo speed is unknown, defaulting to 1000 [ 109.259225][ T8502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.271566][ T8502] lo speed is unknown, defaulting to 1000 [ 109.277749][ T8502] lo speed is unknown, defaulting to 1000 [ 109.284279][ T8502] lo speed is unknown, defaulting to 1000 [ 109.290961][ T8502] lo speed is unknown, defaulting to 1000 [ 109.298157][ T8502] lo speed is unknown, defaulting to 1000 [ 109.326618][ T8514] IPVS: Error connecting to the multicast addr [ 109.335960][ T8513] : renamed from vlan1 (while UP) [ 109.376792][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.395624][ T8518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.414172][ T8522] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 109.420757][ T8522] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.428969][ T8522] vhci_hcd vhci_hcd.0: Device attached [ 109.459215][ T8522] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 109.465768][ T8522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.473359][ T8522] vhci_hcd vhci_hcd.0: Device attached [ 109.490741][ T8522] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 109.497267][ T8522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.505005][ T8522] vhci_hcd vhci_hcd.0: Device attached [ 109.512246][ T8534] IPVS: Error connecting to the multicast addr [ 109.561961][ T8532] vhci_hcd: connection closed [ 109.562230][ T4019] vhci_hcd: stop threads [ 109.562325][ T8527] vhci_hcd: connection closed [ 109.566954][ T4019] vhci_hcd: release socket [ 109.571491][ T8523] vhci_hcd: connection closed [ 109.575887][ T4019] vhci_hcd: disconnect device [ 109.603094][ T8537] netlink: 'syz.8.1413': attribute type 17 has an invalid length. [ 109.611036][ T8537] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1413'. [ 109.620729][ T4019] vhci_hcd: stop threads [ 109.624980][ T4019] vhci_hcd: release socket [ 109.629523][ T4019] vhci_hcd: disconnect device [ 109.634397][ T10] vhci_hcd: vhci_device speed not set [ 109.642114][ T4019] vhci_hcd: stop threads [ 109.646445][ T4019] vhci_hcd: release socket [ 109.650929][ T4019] vhci_hcd: disconnect device [ 109.709920][ T10] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 109.717415][ T10] usb 5-1: enqueue for inactive port 0 [ 109.723066][ T10] usb 5-1: enqueue for inactive port 0 [ 109.729944][ T10] usb 5-1: enqueue for inactive port 0 [ 109.799643][ T10] vhci_hcd: vhci_device speed not set [ 110.207484][ T8545] loop8: detected capacity change from 0 to 1024 [ 110.218850][ T8547] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 110.225647][ T8545] EXT4-fs: Ignoring removed orlov option [ 110.240191][ T8545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.255786][ T8550] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1418'. [ 110.301168][ T8556] siw: device registration error -23 [ 110.322002][ T8559] loop2: detected capacity change from 0 to 512 [ 110.336008][ T8559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.348626][ T8559] EXT4-fs (loop2): 1 truncate cleaned up [ 110.355776][ T8559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.557169][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.583717][ T8586] loop8: detected capacity change from 0 to 128 [ 110.603053][ T8584] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 110.613177][ T8586] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.626297][ T8586] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.841638][ T8596] loop7: detected capacity change from 0 to 164 [ 110.853596][ T8596] syz.7.1435: attempt to access beyond end of device [ 110.853596][ T8596] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 110.867758][ T8596] syz.7.1435: attempt to access beyond end of device [ 110.867758][ T8596] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.482258][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.725206][ T4602] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.769554][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 111.844821][ T8627] loop0: detected capacity change from 0 to 764 [ 111.946410][ T8634] syzkaller0: entered allmulticast mode [ 111.952750][ T8634] syzkaller0: entered promiscuous mode [ 111.963303][ T8634] syzkaller0 (unregistering): left allmulticast mode [ 111.970069][ T8634] syzkaller0 (unregistering): left promiscuous mode [ 112.032875][ T8641] loop3: detected capacity change from 0 to 128 [ 112.042520][ T8641] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 112.051143][ T8641] FAT-fs (loop3): Filesystem has been set read-only [ 112.057741][ T8641] syz.3.1449: attempt to access beyond end of device [ 112.057741][ T8641] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 112.071711][ T8641] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 112.080055][ T8641] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 112.088157][ T8641] syz.3.1449: attempt to access beyond end of device [ 112.088157][ T8641] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.101722][ T8641] syz.3.1449: attempt to access beyond end of device [ 112.101722][ T8641] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.116297][ T8644] syz.3.1449: attempt to access beyond end of device [ 112.116297][ T8644] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 112.129564][ T8644] Buffer I/O error on dev loop3, logical block 2065, async page read [ 112.137671][ T8644] syz.3.1449: attempt to access beyond end of device [ 112.137671][ T8644] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 112.151564][ T8644] Buffer I/O error on dev loop3, logical block 2066, async page read [ 112.161410][ T8644] syz.3.1449: attempt to access beyond end of device [ 112.161410][ T8644] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 112.174715][ T8644] Buffer I/O error on dev loop3, logical block 2067, async page read [ 112.193285][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 112.202287][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 112.217234][ T8644] Buffer I/O error on dev loop3, logical block 2068, async page read [ 112.225499][ T8644] Buffer I/O error on dev loop3, logical block 2069, async page read [ 112.233701][ T8644] Buffer I/O error on dev loop3, logical block 2070, async page read [ 112.242226][ T8644] Buffer I/O error on dev loop3, logical block 2071, async page read [ 112.250318][ T8644] Buffer I/O error on dev loop3, logical block 2072, async page read [ 112.258444][ T8641] Buffer I/O error on dev loop3, logical block 2065, async page read [ 112.266544][ T8641] Buffer I/O error on dev loop3, logical block 2066, async page read [ 112.336672][ T8657] netlink: 'syz.0.1454': attribute type 3 has an invalid length. [ 112.347511][ T8656] loop8: detected capacity change from 0 to 8192 [ 112.355899][ T8654] lo speed is unknown, defaulting to 1000 [ 112.389697][ T8656] loop8: p1 p2[DM] p4 [ 112.394740][ T8656] loop8: p1 size 196608 extends beyond EOD, truncated [ 112.420148][ T8656] loop8: p2 start 4292936063 is beyond EOD, truncated [ 112.426939][ T8656] loop8: p4 size 50331648 extends beyond EOD, truncated [ 112.467635][ T8659] lo: left allmulticast mode [ 112.473132][ T8659] netlink: 'syz.0.1456': attribute type 13 has an invalid length. [ 112.482159][ T8659] tunl0: left allmulticast mode [ 112.487935][ T8659] gre0: left allmulticast mode [ 112.497545][ T8659] 0{X: left allmulticast mode [ 112.503383][ T8659] 0{X: refused to change device tx_queue_len [ 112.510363][ T8659] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 112.705825][ T8668] : renamed from vlan0 [ 112.768485][ T8670] IPVS: Error connecting to the multicast addr [ 112.880110][ T8681] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1465'. [ 112.893898][ T8679] loop0: detected capacity change from 0 to 2048 [ 112.931341][ T8679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.025720][ T8679] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.066808][ T8679] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 668 with error 28 [ 113.079256][ T8679] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.079256][ T8679] [ 113.088882][ T8679] EXT4-fs (loop0): Total free blocks count 0 [ 113.094939][ T8679] EXT4-fs (loop0): Free/Dirty block details [ 113.100995][ T8679] EXT4-fs (loop0): free_blocks=2415919104 [ 113.106854][ T8679] EXT4-fs (loop0): dirty_blocks=672 [ 113.112079][ T8679] EXT4-fs (loop0): Block reservation details [ 113.118086][ T8679] EXT4-fs (loop0): i_reserved_data_blocks=42 [ 113.122665][ T8695] loop2: detected capacity change from 0 to 164 [ 113.325838][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 113.385913][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.401558][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.423018][ T8722] netlink: 'syz.8.1478': attribute type 11 has an invalid length. [ 113.438043][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 113.456791][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1483'. [ 113.535965][ T8733] loop8: detected capacity change from 0 to 512 [ 113.542938][ T8733] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 113.554488][ T8733] EXT4-fs (loop8): 1 truncate cleaned up [ 113.560844][ T8733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.940637][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 113.940650][ T29] audit: type=1400 audit(1754977823.634:6002): avc: denied { bind } for pid=8737 comm="syz.7.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.967065][ T29] audit: type=1400 audit(1754977823.654:6003): avc: denied { listen } for pid=8737 comm="syz.7.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.986531][ T29] audit: type=1400 audit(1754977823.654:6004): avc: denied { accept } for pid=8737 comm="syz.7.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.186381][ T29] audit: type=1326 audit(1754977823.874:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.209880][ T29] audit: type=1326 audit(1754977823.874:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.239801][ T29] audit: type=1326 audit(1754977823.874:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.263123][ T29] audit: type=1326 audit(1754977823.874:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.286574][ T29] audit: type=1326 audit(1754977823.874:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.310014][ T29] audit: type=1326 audit(1754977823.874:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.333426][ T29] audit: type=1326 audit(1754977823.874:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc6f8ebe9 code=0x7ffc0000 [ 114.487255][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.625267][ T8757] loop8: detected capacity change from 0 to 1024 [ 114.777377][ T8761] loop2: detected capacity change from 0 to 1024 [ 114.787959][ T8757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.826311][ T8761] EXT4-fs: Ignoring removed orlov option [ 114.856277][ T8757] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.894354][ T8761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.962993][ T8757] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 115.018447][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.158472][ T8765] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1496'. [ 115.383479][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.409130][ T8786] syzkaller0: entered allmulticast mode [ 115.415788][ T8783] tipc: Started in network mode [ 115.420969][ T8783] tipc: Node identity 120430655078, cluster identity 4711 [ 115.428142][ T8783] tipc: Enabled bearer , priority 0 [ 115.434776][ T8786] syzkaller0: entered promiscuous mode [ 115.441945][ T8783] tipc: Disabling bearer [ 115.452066][ T8786] syzkaller0 (unregistering): left allmulticast mode [ 115.458752][ T8786] syzkaller0 (unregistering): left promiscuous mode [ 115.500180][ T8789] loop0: detected capacity change from 0 to 2048 [ 115.511008][ T8791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.531318][ T8789] Alternate GPT is invalid, using primary GPT. [ 115.537625][ T8789] loop0: p2 p3 p7 [ 115.586851][ T8793] lo speed is unknown, defaulting to 1000 [ 115.592539][ T8797] tipc: New replicast peer: 255.255.255.255 [ 115.598724][ T8797] tipc: Enabled bearer , priority 10 [ 115.605088][ T8798] netlink: 'syz.7.1507': attribute type 3 has an invalid length. [ 115.758199][ T8802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1511'. [ 116.212989][ T8809] loop3: detected capacity change from 0 to 164 [ 116.223973][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1513'. [ 116.234591][ T8814] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 116.244224][ T8810] loop7: detected capacity change from 0 to 1024 [ 116.256763][ T8809] bio_check_eod: 49783 callbacks suppressed [ 116.256845][ T8809] syz.3.1512: attempt to access beyond end of device [ 116.256845][ T8809] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.259785][ T8810] EXT4-fs: Ignoring removed orlov option [ 116.262958][ T8809] syz.3.1512: attempt to access beyond end of device [ 116.262958][ T8809] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.282648][ T8810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.311226][ T8817] loop8: detected capacity change from 0 to 1024 [ 116.318052][ T8817] EXT4-fs: Ignoring removed orlov option [ 116.342738][ T8817] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.441475][ T8825] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1517'. [ 116.474226][ T8827] siw: device registration error -23 [ 116.499358][ T8829] syzkaller0: entered allmulticast mode [ 116.505336][ T8829] syzkaller0: entered promiscuous mode [ 116.514709][ T8829] syzkaller0 (unregistering): left allmulticast mode [ 116.521542][ T8829] syzkaller0 (unregistering): left promiscuous mode [ 116.684149][ T4602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.709229][ T3382] tipc: Node number set to 718332817 [ 116.746147][ T8834] lo speed is unknown, defaulting to 1000 [ 117.035144][ T8851] ref_ctr increment failed for inode: 0x65e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005d640 [ 117.046602][ T8810] ================================================================== [ 117.054685][ T8810] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 117.061800][ T8810] [ 117.064106][ T8810] write to 0xffff888119df7b04 of 4 bytes by task 8821 on cpu 0: [ 117.071719][ T8810] xas_set_mark+0x12b/0x140 [ 117.076211][ T8810] __folio_start_writeback+0x1dd/0x440 [ 117.081664][ T8810] ext4_bio_write_folio+0x5ad/0x9f0 [ 117.086852][ T8810] mpage_process_page_bufs+0x4a1/0x620 [ 117.092990][ T8810] mpage_prepare_extent_to_map+0x786/0xc00 [ 117.098779][ T8810] ext4_do_writepages+0xa05/0x2750 [ 117.103882][ T8810] ext4_writepages+0x176/0x300 [ 117.108628][ T8810] do_writepages+0x1c3/0x310 [ 117.113211][ T8810] file_write_and_wait_range+0x156/0x2c0 [ 117.118835][ T8810] generic_buffers_fsync_noflush+0x45/0x120 [ 117.124712][ T8810] ext4_sync_file+0x1ab/0x690 [ 117.129383][ T8810] vfs_fsync_range+0x10d/0x130 [ 117.134130][ T8810] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.139669][ T8810] ext4_file_write_iter+0x383/0xf00 [ 117.144857][ T8810] iter_file_splice_write+0x666/0x9e0 [ 117.150210][ T8810] direct_splice_actor+0x153/0x2a0 [ 117.155306][ T8810] splice_direct_to_actor+0x30f/0x680 [ 117.160666][ T8810] do_splice_direct+0xda/0x150 [ 117.165414][ T8810] do_sendfile+0x380/0x650 [ 117.169821][ T8810] __x64_sys_sendfile64+0x105/0x150 [ 117.175015][ T8810] x64_sys_call+0x2bb0/0x2ff0 [ 117.179680][ T8810] do_syscall_64+0xd2/0x200 [ 117.184171][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.190049][ T8810] [ 117.192356][ T8810] read to 0xffff888119df7b04 of 4 bytes by task 8810 on cpu 1: [ 117.199879][ T8810] xas_find_marked+0x5dc/0x620 [ 117.204634][ T8810] find_get_entry+0x5d/0x380 [ 117.209224][ T8810] filemap_get_folios_tag+0x92/0x210 [ 117.214490][ T8810] mpage_prepare_extent_to_map+0x320/0xc00 [ 117.220281][ T8810] ext4_do_writepages+0xa05/0x2750 [ 117.225381][ T8810] ext4_writepages+0x176/0x300 [ 117.230128][ T8810] do_writepages+0x1c3/0x310 [ 117.234707][ T8810] file_write_and_wait_range+0x156/0x2c0 [ 117.240331][ T8810] generic_buffers_fsync_noflush+0x45/0x120 [ 117.246208][ T8810] ext4_sync_file+0x1ab/0x690 [ 117.250878][ T8810] vfs_fsync_range+0x10d/0x130 [ 117.255626][ T8810] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.261170][ T8810] ext4_file_write_iter+0x383/0xf00 [ 117.266361][ T8810] iter_file_splice_write+0x666/0x9e0 [ 117.271714][ T8810] direct_splice_actor+0x153/0x2a0 [ 117.276807][ T8810] splice_direct_to_actor+0x30f/0x680 [ 117.282162][ T8810] do_splice_direct+0xda/0x150 [ 117.286908][ T8810] do_sendfile+0x380/0x650 [ 117.291316][ T8810] __x64_sys_sendfile64+0x105/0x150 [ 117.296502][ T8810] x64_sys_call+0x2bb0/0x2ff0 [ 117.301165][ T8810] do_syscall_64+0xd2/0x200 [ 117.305658][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.311535][ T8810] [ 117.313849][ T8810] value changed: 0x0a000021 -> 0x04000021 [ 117.319543][ T8810] [ 117.321851][ T8810] Reported by Kernel Concurrency Sanitizer on: [ 117.327984][ T8810] CPU: 1 UID: 0 PID: 8810 Comm: syz.7.1522 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 117.341943][ T8810] Tainted: [W]=WARN [ 117.345728][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.355762][ T8810] ================================================================== [ 117.367962][ T8851] uprobe: syz.3.1527:8851 failed to unregister, leaking uprobe