last executing test programs: 1m32.566034007s ago: executing program 1 (id=213): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc020000000000000000000000000001fc02000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000017000000000050001100fe8000000000000000000000000000bb0a010100000000000000000000000000fc01000000000000000000000000326895c700014af945acc81683278e66a545b7000000060000000000000000000000003c000000000000000a"], 0xcc}}, 0x0) r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m32.501202388s ago: executing program 1 (id=216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) listen(r3, 0xeac4) close_range(r2, 0xffffffffffffffff, 0x0) 1m32.459433708s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m32.400703158s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 1m32.345953178s ago: executing program 1 (id=226): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e7fadeca8d79e34c8612886a99059e9e61be6c4cbded75a6b16d", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc8c4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 1m32.17263823s ago: executing program 1 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 1m32.1725144s ago: executing program 32 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 58.796299181s ago: executing program 5 (id=1391): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 58.717579062s ago: executing program 5 (id=1402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15606fd636acc1d7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 57.869936438s ago: executing program 5 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000002c0), &(0x7f0000000200)=r1}, 0x20) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 57.765267438s ago: executing program 5 (id=1419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000740)={[{@resgid}, {@mblk_io_submit}, {@noinit_itable}, {@i_version}, {@discard}, {@data_err_abort}, {@nodioread_nolock}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.56264396s ago: executing program 5 (id=1433): r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) 57.285506092s ago: executing program 5 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r4) 57.285161022s ago: executing program 33 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r4) 28.167263954s ago: executing program 0 (id=2478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf70008330020010010000000000000000000000000ff020000000000000000000000000001"], 0x0) 28.143126244s ago: executing program 0 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x0) 28.042518565s ago: executing program 0 (id=2481): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffa}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300, 0x200000005c831, 0xffffffffffffffff, 0x0) 28.041476015s ago: executing program 0 (id=2483): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}, {@data_err_ignore}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c6681000000000000000100"}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000}]) 27.753854037s ago: executing program 0 (id=2494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5ef2, 0x5}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 27.593504338s ago: executing program 2 (id=2506): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xef7f8a0472da7f47, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 27.578562088s ago: executing program 2 (id=2507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) shutdown(r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 27.534211779s ago: executing program 0 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f00000009c0)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000000)="e5", 0x1}], 0x2) 27.533689818s ago: executing program 2 (id=2510): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0', [{0x20, 'eX\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xb0G\\Hx\x12G'}, {0x20, ':@J\xb2,D\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xfb\xea\x16\x01^z\xb0\xb04z\xafE\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9cH\x9az\xbfE=)|\x18f6\xd8G\x99o\x02\x12\xd4\x9d\xfd\xb2\xe8\x8f\x06\x00\xc3N\xe3\xb3\xc8\r\xdb\x86\xdd\xd8J\x12&7\r\xf1\xc7a\f\x18n~\xc5\xd7\xc3\x06\x1d\xd5\xa8\x92F\x18\x9a\xb7]\x16\xa2j\xd8#92\x00\x00\x00\x00E\xc9r\x97\x9a\xd9\xd5\xb0\x85\xeb\x81\xe7\xcc\xe1\x01\xc0\x18\xb7\xff\x1f\xba\xb3\x86E39\x9e\x12G\x93\xda\xf2\xa9\xfd\xc7\xc9!A3&\xbf\xe6)\x06\x9e\xe8\x15\x19\x94CF\x16\xdb\xbc\xfe)\x85\xa6\xec\xea\xd7\xa8\xca,\x8a\xe7\x04\xf4\xa3\xfc@j7\xc1f\x1c\v?\x116viRwi\x06\x11\xc0\xb9\xa6\xe8\a\x04X\xfd\x9d\x9d\xf9\xc8|\x9f\xe8|\xd3\xb5D\xa3\x97M|):\xfc>\x93#\xb3/\x98(\xea\x1c\xd3\x1f\x8a5\xe5D\xafGX\x92\t^\xf7I\x9b\x9d\x02\x00\x00\x00\x00'}, {0x20, 'trusted./verlay.y\xc6per~\v\x17\xd7\x01d.O\xecTU\xa5\x011\xae\xcc\xf7{i8\xbe\x8b\x04\xb8mG\xea\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfeEO\xf2\x82f\xf1<\xe8*\xe8\x01/\xec\xd5\x91\xf3\xfb(|\x9f[\x04\xd3#@\x1e\x7f\xa6(\x9c\x17X\xc4\xc6@\"9\xd7\xe6\x91\xba\x03\xcd\xbaW9#\x15x\xf2\xf2>\x1fR\xcda\x8f<\xa8\xeaL\xc7\x18\xec\x0e\x8f\xd9\xdax\xf8\x81bm-b\x87D?\xa5\tQ\xdc\t\x8fT\xf0\xca\x0e2\xdf'}], 0xa, "98ff288c2c364aaca89c267b553864080076b2b41b014891ae518e3479ba3ddb672050faced143a22399a575e2f50ff2388b285e3779368d88a0be938144c48e94c179d2c68e1f208966cf2b40f3641701fb414cd8987df26f6c142ec80a0b05db2f33161bf65ee26eb4"}, 0x26f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f00", 0x1c) write$qrtrtun(r0, &(0x7f00000016c0)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930e9268649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f403000000203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b671ff8b0bf20420c462aa1bb93218edaa300311066bacbf43630a8388aff734a568a12", 0x1d4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 27.533492648s ago: executing program 34 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f00000009c0)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000000)="e5", 0x1}], 0x2) 27.491453298s ago: executing program 2 (id=2512): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 27.472802919s ago: executing program 2 (id=2513): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 27.29116778s ago: executing program 2 (id=2518): socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 27.27651406s ago: executing program 35 (id=2518): socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 26.051364119s ago: executing program 3 (id=2549): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_read_part_table(0x612, &(0x7f0000000f40)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 25.83940357s ago: executing program 3 (id=2554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 24.762312578s ago: executing program 3 (id=2574): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 24.49965237s ago: executing program 3 (id=2582): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 23.637779826s ago: executing program 3 (id=2623): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r1, 0x0, 0x800, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x4}) 23.358636557s ago: executing program 3 (id=2627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8.232988523s ago: executing program 36 (id=2627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.44892138s ago: executing program 4 (id=2961): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 1.074818392s ago: executing program 7 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb8ab}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd15}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) 1.074381132s ago: executing program 7 (id=2972): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000240)='syz0\x00', 0x1ff) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 1.073956022s ago: executing program 7 (id=2973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 981.049813ms ago: executing program 7 (id=2974): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendfile(r1, r1, 0x0, 0xfffe80) 768.217164ms ago: executing program 7 (id=2977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) fgetxattr(r0, &(0x7f00000001c0)=@random={'security.', ':}\x00'}, 0x0, 0x0) 590.106336ms ago: executing program 4 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 550.342096ms ago: executing program 7 (id=2986): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "f13d760700"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 549.663956ms ago: executing program 4 (id=2987): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 451.770816ms ago: executing program 4 (id=2992): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 424.816807ms ago: executing program 4 (id=2993): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 424.317767ms ago: executing program 6 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0xfff1, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(r0) 378.507497ms ago: executing program 8 (id=2996): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0xc410, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 377.733917ms ago: executing program 8 (id=2997): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 376.862687ms ago: executing program 8 (id=2998): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x1, 0x1, "cd"}, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 357.693337ms ago: executing program 6 (id=2999): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 332.918737ms ago: executing program 4 (id=3000): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x5, 0x0, 0x0, 0x0, "001bf100000000000000200000000000df00"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x20000001}) r3 = dup3(r1, r0, 0x0) write$sndseq(r3, 0x0, 0x0) 289.700437ms ago: executing program 9 (id=3001): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 289.165658ms ago: executing program 8 (id=3002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 288.838888ms ago: executing program 8 (id=3003): syz_open_dev$usbfs(0x0, 0x1ff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 288.241368ms ago: executing program 9 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x400, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000000)) 285.696438ms ago: executing program 6 (id=3005): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 262.263608ms ago: executing program 9 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "dd9dec79219eb549"}}}}, 0x0) 145.300559ms ago: executing program 6 (id=3007): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 135.441379ms ago: executing program 9 (id=3008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 96.379079ms ago: executing program 8 (id=3009): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 12.98775ms ago: executing program 9 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 12.04299ms ago: executing program 6 (id=3011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 11.64739ms ago: executing program 6 (id=3012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) 0s ago: executing program 9 (id=3013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): omiscuous mode [ 70.732805][ T7139] veth1_vlan: entered promiscuous mode [ 70.760771][ T7139] veth0_macvtap: entered promiscuous mode [ 70.785303][ T7139] veth1_macvtap: entered promiscuous mode [ 70.815319][ T7139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.825935][ T7139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.835764][ T7139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.846282][ T7139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.861962][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.871381][ T30] audit: type=1326 audit(1741453669.018:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 70.873511][ T7139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.905358][ T7139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.911085][ T30] audit: type=1326 audit(1741453669.048:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 70.915241][ T7139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.938684][ T30] audit: type=1326 audit(1741453669.048:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 70.949031][ T7139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.972612][ T30] audit: type=1326 audit(1741453669.048:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.005719][ T30] audit: type=1326 audit(1741453669.048:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.029140][ T30] audit: type=1326 audit(1741453669.048:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.052583][ T30] audit: type=1326 audit(1741453669.048:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.076028][ T30] audit: type=1326 audit(1741453669.048:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.099507][ T30] audit: type=1326 audit(1741453669.048:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3429d169 code=0x7ffc0000 [ 71.125403][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.146089][ T3509] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.172770][ T7139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181581][ T7139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190395][ T7139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.199179][ T7139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.303375][ T3509] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.329569][ T7277] lo speed is unknown, defaulting to 1000 [ 71.367192][ T3509] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.431678][ T3509] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.508926][ T7322] vlan1: entered allmulticast mode [ 71.515253][ T7322] bond0: entered allmulticast mode [ 71.520454][ T7322] bond_slave_0: entered allmulticast mode [ 71.526398][ T7322] bond_slave_1: entered allmulticast mode [ 71.538458][ T7322] bond0: left allmulticast mode [ 71.543383][ T7322] bond_slave_0: left allmulticast mode [ 71.548957][ T7322] bond_slave_1: left allmulticast mode [ 71.710575][ T3509] bond1 (unregistering): (slave gretap1): Releasing active interface [ 71.765893][ T3509] bond0 (unregistering): Released all slaves [ 71.778100][ T3509] bond1 (unregistering): Released all slaves [ 71.802768][ T7354] lo speed is unknown, defaulting to 1000 [ 71.855992][ T3509] hsr_slave_0: left promiscuous mode [ 71.861675][ T3509] hsr_slave_1: left promiscuous mode [ 71.868495][ T3509] veth1_macvtap: left allmulticast mode [ 71.874191][ T3509] veth1_macvtap: left promiscuous mode [ 71.879778][ T3509] veth0_macvtap: left promiscuous mode [ 71.888201][ T3509] veth1_vlan: left promiscuous mode [ 71.893543][ T3509] veth0_vlan: left promiscuous mode [ 71.995643][ T4209] lo speed is unknown, defaulting to 1000 [ 72.176249][ T7368] vlan2: entered allmulticast mode [ 72.181944][ T7368] bond0: entered allmulticast mode [ 72.187153][ T7368] bond_slave_0: entered allmulticast mode [ 72.192998][ T7368] bond_slave_1: entered allmulticast mode [ 72.199823][ T7368] bond0: left allmulticast mode [ 72.204804][ T7368] bond_slave_0: left allmulticast mode [ 72.210286][ T7368] bond_slave_1: left allmulticast mode [ 72.336190][ T7379] IPv6: Can't replace route, no match found [ 72.408964][ T3509] IPVS: stop unused estimator thread 0... [ 72.655845][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1536'. [ 72.987624][ T7436] netlink: 'syz.4.1550': attribute type 3 has an invalid length. [ 72.990433][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 73.030066][ T7439] rdma_op ffff88811734c580 conn xmit_rdma 0000000000000000 [ 73.118354][ T7446] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 73.146169][ T7454] loop4: detected capacity change from 0 to 256 [ 73.160320][ T7455] vlan2: entered allmulticast mode [ 73.167064][ T7455] bond0: entered allmulticast mode [ 73.174613][ T7455] bond0: left allmulticast mode [ 73.182675][ T7457] netlink: 'syz.0.1558': attribute type 5 has an invalid length. [ 73.559586][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'. [ 73.568751][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'. [ 73.610714][ T7480] netlink: 'syz.6.1568': attribute type 15 has an invalid length. [ 73.635478][ T7482] loop6: detected capacity change from 0 to 512 [ 73.642591][ T7482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.653464][ T7482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.666408][ T7482] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.701577][ T7482] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1569: corrupted inode contents [ 73.714400][ T7482] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #19: comm syz.6.1569: mark_inode_dirty error [ 73.726828][ T7482] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1569: corrupted inode contents [ 73.739249][ T7482] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.1569: mark_inode_dirty error [ 73.751798][ T7482] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.1569: mark inode dirty (error -117) [ 73.765128][ T7482] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 73.783712][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.829446][ T7496] netlink: 'syz.6.1574': attribute type 12 has an invalid length. [ 73.969918][ T7504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.493026][ T7550] loop6: detected capacity change from 0 to 512 [ 74.500171][ T7550] ext4: Unknown parameter 'dont_appraise' [ 74.577857][ T7559] ref_ctr increment failed for inode: 0x30b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104dba680 [ 74.590786][ T7558] uprobe: syz.2.1603:7558 failed to unregister, leaking uprobe [ 74.630731][ T7561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.859281][ T7582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.888167][ T7585] loop6: detected capacity change from 0 to 512 [ 74.906188][ T7585] EXT4-fs (loop6): 1 orphan inode deleted [ 74.912696][ T7585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.928066][ T4239] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:63: Failed to release dquot type 1 [ 74.944929][ T7585] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.975274][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.076089][ T7612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.083333][ T7612] IPv6: NLM_F_CREATE should be set when creating new route [ 75.090551][ T7612] IPv6: NLM_F_CREATE should be set when creating new route [ 75.097783][ T7612] IPv6: NLM_F_CREATE should be set when creating new route [ 75.206103][ T7625] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.213755][ T7625] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 75.241841][ T7629] netlink: 'syz.0.1634': attribute type 3 has an invalid length. [ 75.272534][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 75.272548][ T30] audit: type=1400 audit(1741453673.408:1839): avc: denied { bind } for pid=7635 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.419049][ T30] audit: type=1400 audit(1741453673.558:1840): avc: denied { bind } for pid=7658 comm="syz.6.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.439942][ T7659] loop6: detected capacity change from 0 to 512 [ 75.447253][ T7659] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.455613][ T7659] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.462472][ T7659] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated! [ 75.471560][ T7659] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 75.481356][ T7659] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1648: Failed to acquire dquot type 1 [ 75.493674][ T7659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1648: bg 0: block 40: padding at end of block bitmap is not set [ 75.508596][ T7659] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 75.518526][ T7659] EXT4-fs (loop6): 1 truncate cleaned up [ 75.525803][ T7659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.539512][ T7659] netlink: 'syz.6.1648': attribute type 10 has an invalid length. [ 75.540429][ T30] audit: type=1400 audit(1741453673.688:1841): avc: denied { setopt } for pid=7658 comm="syz.6.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.547399][ T7659] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1648'. [ 75.593653][ T7659] team0: Port device geneve1 added [ 75.617968][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.758892][ T7689] Invalid ELF header len 8 [ 75.758891][ T30] audit: type=1400 audit(1741453673.898:1842): avc: denied { module_load } for pid=7688 comm="syz.3.1662" path="/378/file0/bus" dev="ramfs" ino=19079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 75.787373][ T30] audit: type=1400 audit(1741453673.928:1843): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.926428][ T7702] loop6: detected capacity change from 0 to 512 [ 75.951647][ T30] audit: type=1326 audit(1741453674.088:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 75.975212][ T30] audit: type=1326 audit(1741453674.088:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 75.998719][ T30] audit: type=1326 audit(1741453674.088:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 76.015278][ T7702] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 76.045836][ T7702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 76.065870][ T7702] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1668: corrupted in-inode xattr: e_value size too large [ 76.087906][ T7702] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1668: couldn't read orphan inode 15 (err -117) [ 76.102869][ T7712] loop3: detected capacity change from 0 to 128 [ 76.109811][ T7702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.141152][ T7712] syz.3.1671: attempt to access beyond end of device [ 76.141152][ T7712] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 76.180400][ T7702] EXT4-fs (loop6): shut down requested (1) [ 76.228207][ T7712] syz.3.1671: attempt to access beyond end of device [ 76.228207][ T7712] loop3: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 76.247450][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.303544][ T7721] serio: Serial port ptm0 [ 76.404878][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1677'. [ 76.652738][ T7757] vlan2: entered allmulticast mode [ 76.658071][ T7757] bridge_slave_0: entered allmulticast mode [ 76.666098][ T7757] bridge_slave_0: left allmulticast mode [ 76.764077][ T7767] sd 0:0:1:0: device reset [ 76.957879][ T7801] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1711'. [ 77.005090][ T7807] loop4: detected capacity change from 0 to 128 [ 77.011745][ T7807] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.021307][ T7807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.035958][ T7807] ext2 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.084127][ T7807] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.1714: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 77.131729][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.177470][ T7826] loop4: detected capacity change from 0 to 128 [ 77.180123][ T7818] loop6: detected capacity change from 0 to 512 [ 77.191371][ T7826] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.205714][ T7818] EXT4-fs: Ignoring removed i_version option [ 77.211719][ T7818] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.218826][ T7826] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.229798][ T7818] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.261287][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.275560][ T7818] EXT4-fs (loop6): 1 truncate cleaned up [ 77.281815][ T7818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.307454][ T7835] SELinux: security_context_str_to_sid ({˙) failed with errno=-22 [ 77.358527][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.411941][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 77.428818][ T7848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.439187][ T7848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.512385][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 77.545676][ T7866] IPVS: Error joining to the multicast group [ 77.606503][ T7848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.616821][ T7848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.727493][ T7848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.737932][ T7848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.878456][ T7848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.888804][ T7848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.950097][ T7848] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.958408][ T7848] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004904][ T7848] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.013184][ T7848] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.032270][ T7848] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.040705][ T7848] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052889][ T7848] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.061121][ T7848] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072166][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 78.082557][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.114126][ T7901] bridge_slave_1 (unregistering): left allmulticast mode [ 78.121315][ T7901] bridge_slave_1 (unregistering): left promiscuous mode [ 78.128510][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.740618][ T7896] syz.6.1755 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 78.754762][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.6.1755 Not tainted 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 78.754788][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.754800][ T7896] Call Trace: [ 78.754807][ T7896] [ 78.754814][ T7896] dump_stack_lvl+0xf2/0x150 [ 78.754840][ T7896] dump_stack+0x15/0x1a [ 78.754859][ T7896] dump_header+0x83/0x2d0 [ 78.754896][ T7896] oom_kill_process+0x341/0x4c0 [ 78.754957][ T7896] out_of_memory+0x9af/0xbe0 [ 78.755032][ T7896] ? css_next_descendant_pre+0x11c/0x140 [ 78.755053][ T7896] mem_cgroup_out_of_memory+0x13e/0x190 [ 78.755086][ T7896] try_charge_memcg+0x508/0x7f0 [ 78.755112][ T7896] obj_cgroup_charge_pages+0xbd/0x1a0 [ 78.755136][ T7896] __memcg_kmem_charge_page+0x9d/0x170 [ 78.755169][ T7896] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 78.755207][ T7896] alloc_pages_mpol+0xb4/0x260 [ 78.755227][ T7896] alloc_pages_noprof+0xe8/0x130 [ 78.755252][ T7896] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 78.755314][ T7896] __kvmalloc_node_noprof+0x121/0x170 [ 78.755339][ T7896] ? ip_set_alloc+0x1f/0x30 [ 78.755361][ T7896] ip_set_alloc+0x1f/0x30 [ 78.755391][ T7896] hash_netiface_create+0x273/0x730 [ 78.755418][ T7896] ? __nla_parse+0x40/0x60 [ 78.755457][ T7896] ? __pfx_hash_netiface_create+0x10/0x10 [ 78.755480][ T7896] ip_set_create+0x3b1/0x970 [ 78.755516][ T7896] ? __nla_parse+0x40/0x60 [ 78.755618][ T7896] nfnetlink_rcv_msg+0x4a9/0x570 [ 78.755657][ T7896] netlink_rcv_skb+0x12c/0x230 [ 78.755683][ T7896] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.755772][ T7896] nfnetlink_rcv+0x16c/0x15d0 [ 78.755793][ T7896] ? kmem_cache_free+0xdc/0x2d0 [ 78.755817][ T7896] ? nlmon_xmit+0x51/0x60 [ 78.755857][ T7896] ? __kfree_skb+0x102/0x150 [ 78.755957][ T7896] ? consume_skb+0x49/0x160 [ 78.755976][ T7896] ? nlmon_xmit+0x51/0x60 [ 78.756027][ T7896] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 78.756053][ T7896] ? __dev_queue_xmit+0xb6e/0x2090 [ 78.756074][ T7896] ? ref_tracker_free+0x3a5/0x410 [ 78.756106][ T7896] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 78.756195][ T7896] netlink_unicast+0x599/0x670 [ 78.756290][ T7896] netlink_sendmsg+0x5cc/0x6e0 [ 78.756321][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.756348][ T7896] __sock_sendmsg+0x140/0x180 [ 78.756430][ T7896] ____sys_sendmsg+0x326/0x4b0 [ 78.756458][ T7896] __sys_sendmsg+0x19d/0x230 [ 78.756540][ T7896] __x64_sys_sendmsg+0x46/0x50 [ 78.756565][ T7896] x64_sys_call+0x2734/0x2dc0 [ 78.756653][ T7896] do_syscall_64+0xc9/0x1c0 [ 78.756680][ T7896] ? clear_bhb_loop+0x55/0xb0 [ 78.756702][ T7896] ? clear_bhb_loop+0x55/0xb0 [ 78.756724][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.756795][ T7896] RIP: 0033:0x7f582f5dd169 [ 78.756810][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.756825][ T7896] RSP: 002b:00007f582dc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.756841][ T7896] RAX: ffffffffffffffda RBX: 00007f582f7f5fa0 RCX: 00007f582f5dd169 [ 78.756851][ T7896] RDX: 0000000000000800 RSI: 0000400000000040 RDI: 0000000000000005 [ 78.756863][ T7896] RBP: 00007f582f65e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.756876][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.756963][ T7896] R13: 0000000000000000 R14: 00007f582f7f5fa0 R15: 00007ffd87ec0d58 [ 78.756978][ T7896] [ 78.756984][ T7896] memory: usage 307200kB, limit 307200kB, failcnt 100 [ 79.096956][ T7896] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 79.104869][ T7896] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 79.112150][ T7896] Memory cgroup stats for /syz6: [ 79.113901][ T7896] cache 0 [ 79.121899][ T7896] rss 0 [ 79.124697][ T7896] shmem 0 [ 79.127663][ T7896] mapped_file 0 [ 79.131137][ T7896] dirty 0 [ 79.134081][ T7896] writeback 0 [ 79.137363][ T7896] workingset_refault_anon 36 [ 79.142022][ T7896] workingset_refault_file 0 [ 79.146561][ T7896] swap 204800 [ 79.149843][ T7896] swapcached 0 [ 79.153264][ T7896] pgpgin 10226 [ 79.156653][ T7896] pgpgout 10225 [ 79.160155][ T7896] pgfault 14230 [ 79.163620][ T7896] pgmajfault 13 [ 79.167126][ T7896] inactive_anon 0 [ 79.170795][ T7896] active_anon 0 [ 79.174328][ T7896] inactive_file 0 [ 79.175857][ T7950] loop3: detected capacity change from 0 to 512 [ 79.177945][ T7896] active_file 4096 [ 79.177953][ T7896] unevictable 0 [ 79.177959][ T7896] hierarchical_memory_limit 314572800 [ 79.177967][ T7896] hierarchical_memsw_limit 9223372036854771712 [ 79.177976][ T7896] total_cache 0 [ 79.184942][ T7950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.187895][ T7896] total_rss 0 [ 79.187902][ T7896] total_shmem 0 [ 79.187909][ T7896] total_mapped_file 0 [ 79.202581][ T7950] EXT4-fs (loop3): 1 truncate cleaned up [ 79.202922][ T7896] total_dirty 0 [ 79.206765][ T7950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.216158][ T7896] total_writeback 0 [ 79.216167][ T7896] total_workingset_refault_anon 36 [ 79.216176][ T7896] total_workingset_refault_file 0 [ 79.261880][ T7896] total_swap 204800 [ 79.265688][ T7896] total_swapcached 0 [ 79.269607][ T7896] total_pgpgin 10226 [ 79.273546][ T7896] total_pgpgout 10225 [ 79.277523][ T7896] total_pgfault 14230 [ 79.281484][ T7896] total_pgmajfault 13 [ 79.285467][ T7896] total_inactive_anon 0 [ 79.289651][ T7896] total_active_anon 0 [ 79.293615][ T7896] total_inactive_file 0 [ 79.297773][ T7896] total_active_file 4096 [ 79.302031][ T7896] total_unevictable 0 [ 79.305999][ T7896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1755,pid=7895,uid=0 [ 79.320725][ T7896] Memory cgroup out of memory: Killed process 7895 (syz.6.1755) total-vm:93712kB, anon-rss:1044kB, file-rss:22064kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 79.361883][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.447933][ T7958] block device autoloading is deprecated and will be removed. [ 79.462637][ T7895] syz.6.1755 (7895) used greatest stack depth: 8904 bytes left [ 79.581325][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 79.590433][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 79.599525][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 79.714235][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 79.750342][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 79.891850][ T8017] loop4: detected capacity change from 0 to 8192 [ 79.899956][ T8017] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 79.907658][ T8017] FAT-fs (loop4): Filesystem has been set read-only [ 79.930883][ T7896] syz.6.1755 (7896) used greatest stack depth: 7368 bytes left [ 79.980856][ T8030] loop4: detected capacity change from 0 to 512 [ 79.988629][ T8030] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.995638][ T8031] loop6: detected capacity change from 0 to 2048 [ 80.017698][ T8031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.024907][ T8030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.059378][ T8030] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1813: corrupted inode contents [ 80.071413][ T8030] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.1813: mark_inode_dirty error [ 80.091261][ T8030] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1813: corrupted inode contents [ 80.148729][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.181064][ T8041] loop4: detected capacity change from 0 to 128 [ 80.247145][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1820'. [ 80.256212][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1820'. [ 80.299569][ T8053] CĂ: renamed from team_slave_0 (while UP) [ 80.306953][ T8053] netlink: 'syz.4.1822': attribute type 3 has an invalid length. [ 80.315265][ T8053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1822'. [ 80.327638][ T8053] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 80.477318][ T8071] hub 9-0:1.0: USB hub found [ 80.482138][ T8071] hub 9-0:1.0: 8 ports detected [ 80.598527][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 80.598547][ T30] audit: type=1326 audit(1741453678.738:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.644178][ T30] audit: type=1326 audit(1741453678.738:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.667744][ T30] audit: type=1326 audit(1741453678.738:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.691246][ T30] audit: type=1326 audit(1741453678.738:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.714804][ T30] audit: type=1326 audit(1741453678.738:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.738275][ T30] audit: type=1326 audit(1741453678.738:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.761797][ T30] audit: type=1326 audit(1741453678.738:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.785248][ T30] audit: type=1326 audit(1741453678.738:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.808790][ T30] audit: type=1326 audit(1741453678.738:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.832231][ T30] audit: type=1326 audit(1741453678.738:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 80.918412][ T8101] pim6reg1: entered promiscuous mode [ 80.923786][ T8101] pim6reg1: entered allmulticast mode [ 80.936904][ T8103] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1845'. [ 80.954455][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.009215][ T8113] wg2: entered promiscuous mode [ 81.014152][ T8113] wg2: entered allmulticast mode [ 81.138900][ T8135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.162497][ T8139] vlan1: entered allmulticast mode [ 81.475461][ T8174] loop3: detected capacity change from 0 to 512 [ 81.482177][ T8174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.493317][ T8174] EXT4-fs (loop3): 1 truncate cleaned up [ 81.499253][ T8174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.564109][ T8174] loop3: detected capacity change from 512 to 64 [ 81.582673][ T3302] ------------[ cut here ]------------ [ 81.588273][ T3302] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 81.588475][ T3302] WARNING: CPU: 1 PID: 3302 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 81.608411][ T3302] Modules linked in: [ 81.612336][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 81.623271][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.633365][ T3302] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 81.639497][ T3302] Code: ff 48 c7 c7 9f f6 b2 86 e8 e9 60 c4 ff c6 05 71 62 0b 05 01 90 48 c7 c7 c1 3e 1b 86 4c 89 f6 89 ea 44 89 f9 e8 4d b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 81.659365][ T3302] RSP: 0018:ffffc90001603ac8 EFLAGS: 00010246 [ 81.665672][ T3302] RAX: ce40be77ad74d600 RBX: ffff888106a5fba8 RCX: ffff8881003fe300 [ 81.673819][ T3302] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.681858][ T3302] RBP: 0000000000000027 R08: ffffffff81344af7 R09: 0000000000000000 [ 81.689966][ T3302] R10: 0001ffffffffffff R11: ffff8881003fe300 R12: ffff888106a5fba8 [ 81.697961][ T3302] R13: ffff888106a5fbd0 R14: ffff888106a5fa80 R15: 000000000000001d [ 81.705959][ T3302] FS: 000055558ae5a500(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 81.714922][ T3302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.721520][ T3302] CR2: 000055558ae85528 CR3: 000000010363c000 CR4: 00000000003506f0 [ 81.729588][ T3302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.737737][ T3302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.745734][ T3302] Call Trace: [ 81.749044][ T3302] [ 81.751976][ T3302] ? __warn+0x141/0x350 [ 81.756410][ T3302] ? report_bug+0x315/0x420 [ 81.761027][ T3302] ? inode_set_cached_link+0xc4/0xd0 [ 81.766355][ T3302] ? handle_bug+0x60/0x90 [ 81.770752][ T3302] ? exc_invalid_op+0x1a/0x50 [ 81.775446][ T3302] ? asm_exc_invalid_op+0x1a/0x20 [ 81.780559][ T3302] ? __warn_printk+0x167/0x1b0 [ 81.785361][ T3302] ? inode_set_cached_link+0xc4/0xd0 [ 81.790673][ T3302] ? inode_set_cached_link+0xc3/0xd0 [ 81.796041][ T3302] __ext4_iget+0x1bb5/0x1e20 [ 81.800644][ T3302] ext4_lookup+0x15b/0x390 [ 81.805096][ T3302] __lookup_slow+0x18a/0x250 [ 81.809739][ T3302] lookup_slow+0x3c/0x60 [ 81.814056][ T3302] walk_component+0x1f5/0x230 [ 81.818753][ T3302] ? path_lookupat+0xfd/0x2b0 [ 81.823539][ T3302] path_lookupat+0x10a/0x2b0 [ 81.828171][ T3302] filename_lookup+0x150/0x340 [ 81.833004][ T3302] user_path_at+0x3c/0x120 [ 81.837489][ T3302] __x64_sys_umount+0x85/0xe0 [ 81.842336][ T3302] x64_sys_call+0x20cd/0x2dc0 [ 81.847135][ T3302] do_syscall_64+0xc9/0x1c0 [ 81.851654][ T3302] ? clear_bhb_loop+0x55/0xb0 [ 81.856462][ T3302] ? clear_bhb_loop+0x55/0xb0 [ 81.861156][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.867066][ T3302] RIP: 0033:0x7f3b3429e497 [ 81.871474][ T3302] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 81.891097][ T3302] RSP: 002b:00007ffc6c1ea018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.899588][ T3302] RAX: ffffffffffffffda RBX: 00007f3b3431e08c RCX: 00007f3b3429e497 [ 81.907563][ T3302] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6c1ea0d0 [ 81.915549][ T3302] RBP: 00007ffc6c1ea0d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.923691][ T3302] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6c1eb1c0 [ 81.931670][ T3302] R13: 00007f3b3431e08c R14: 0000000000013e97 R15: 00007ffc6c1ed380 [ 81.939688][ T3302] [ 81.942721][ T3302] ---[ end trace 0000000000000000 ]--- [ 81.949352][ T3302] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 81.973115][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.174292][ T8217] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 82.411921][ T8238] netlink: 'syz.4.1906': attribute type 4 has an invalid length. [ 82.466486][ T8239] netlink: 'syz.4.1906': attribute type 4 has an invalid length. [ 82.678102][ T8245] netlink: 'syz.6.1909': attribute type 1 has an invalid length. [ 83.158734][ T8283] loop3: detected capacity change from 0 to 128 [ 83.166194][ T8286] loop6: detected capacity change from 0 to 128 [ 83.231346][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.231346][ T8286] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 83.287848][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.287848][ T8286] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 83.334048][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.334048][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.374258][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.374258][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.420731][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.420731][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.454414][ T8295] Falling back ldisc for ttyS3. [ 83.462432][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.462432][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.484013][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.484013][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.506808][ T8300] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.539161][ T8302] __nla_validate_parse: 9 callbacks suppressed [ 83.539174][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1934'. [ 83.560676][ T8306] IPv4: Oversized IP packet from 127.202.26.0 [ 83.566908][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.566908][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.581261][ T8302] IPVS: Unknown mcast interface: vcan0 [ 83.602729][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.602729][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 83.638176][ T8286] syz.6.1928: attempt to access beyond end of device [ 83.638176][ T8286] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 84.182581][ T8364] loop6: detected capacity change from 0 to 128 [ 84.438575][ T8388] rdma_op ffff888102dbd180 conn xmit_rdma 0000000000000000 [ 84.525412][ T8392] Falling back ldisc for ttyS3. [ 84.560734][ T8399] netlink: 'syz.3.1976': attribute type 4 has an invalid length. [ 84.580674][ T8401] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.230214][ T8467] netlink: 'syz.2.2000': attribute type 3 has an invalid length. [ 85.258949][ T8469] netlink: 'syz.2.2001': attribute type 12 has an invalid length. [ 85.311683][ T8477] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 85.419868][ T8496] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 85.428712][ T8496] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 85.556607][ T8507] IPv4: Oversized IP packet from 127.202.26.0 [ 85.594232][ T8505] Falling back ldisc for ttyS3. [ 85.803364][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 85.803380][ T30] audit: type=1400 audit(1741453683.938:2160): avc: denied { name_bind } for pid=8521 comm="syz.2.2025" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.086244][ T8546] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.093630][ T8546] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 86.181719][ T8550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.362948][ T8558] loop4: detected capacity change from 0 to 512 [ 86.394755][ T30] audit: type=1400 audit(1741453684.498:2161): avc: denied { create } for pid=8555 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.414209][ T30] audit: type=1400 audit(1741453684.498:2162): avc: denied { connect } for pid=8555 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.433670][ T30] audit: type=1400 audit(1741453684.498:2163): avc: denied { write } for pid=8555 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.453039][ T30] audit: type=1400 audit(1741453684.498:2164): avc: denied { ioctl } for pid=8555 comm="syz.3.2049" path="socket:[21448]" dev="sockfs" ino=21448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.509593][ T8558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.530772][ T8558] EXT4-fs (loop4): 1 truncate cleaned up [ 86.536723][ T8558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.550001][ T30] audit: type=1400 audit(1741453684.698:2165): avc: denied { mount } for pid=8557 comm="syz.4.2037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.578347][ T30] audit: type=1400 audit(1741453684.718:2166): avc: denied { write } for pid=8557 comm="syz.4.2037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.600084][ T30] audit: type=1400 audit(1741453684.718:2167): avc: denied { add_name } for pid=8557 comm="syz.4.2037" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.620631][ T30] audit: type=1400 audit(1741453684.718:2168): avc: denied { create } for pid=8557 comm="syz.4.2037" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.642213][ T30] audit: type=1400 audit(1741453684.748:2169): avc: denied { write open } for pid=8557 comm="syz.4.2037" path="/392/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.764105][ T8558] loop4: detected capacity change from 512 to 64 [ 86.812731][ T3298] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 86.844649][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.040996][ T8636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.048230][ T8636] IPv6: NLM_F_CREATE should be set when creating new route [ 87.055485][ T8636] IPv6: NLM_F_CREATE should be set when creating new route [ 87.062675][ T8636] IPv6: NLM_F_CREATE should be set when creating new route [ 87.107012][ T8646] loop3: detected capacity change from 0 to 512 [ 87.128831][ T8646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.151412][ T8646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.164144][ T8646] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.202525][ T8646] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.2087: corrupted inode contents [ 87.215329][ T8646] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.2087: mark_inode_dirty error [ 87.226966][ T8646] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.2087: corrupted inode contents [ 87.241450][ T8646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.2087: mark_inode_dirty error [ 87.253605][ T8646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.2087: mark inode dirty (error -117) [ 87.267108][ T8646] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 87.288825][ T8656] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 87.299778][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.387856][ T8673] serio: Serial port ptm0 [ 87.578476][ T8701] netlink: 'syz.3.2102': attribute type 5 has an invalid length. [ 87.610525][ T8705] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 87.769950][ T8716] vlan0: entered allmulticast mode [ 88.198750][ T8742] pim6reg1: entered promiscuous mode [ 88.204121][ T8742] pim6reg1: entered allmulticast mode [ 88.604630][ T8755] serio: Serial port ptm0 [ 88.671442][ T8759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.736603][ T8766] loop6: detected capacity change from 0 to 512 [ 88.785710][ T8766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.834879][ T8766] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.943594][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.979777][ T8796] SELinux: security_context_str_to_sid ({˙) failed with errno=-22 [ 89.210870][ T8839] SELinux: security_context_str_to_sid ({˙) failed with errno=-22 [ 89.366101][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'. [ 89.375150][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'. [ 89.384119][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'. [ 89.525019][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 89.534028][ T8889] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2186'. [ 89.715058][ T8903] loop6: detected capacity change from 0 to 8192 [ 89.733261][ T8903] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 89.740880][ T8903] FAT-fs (loop6): Filesystem has been set read-only [ 89.806244][ T8922] ˙˙˙˙˙˙: renamed from vlan1 (while UP) [ 89.934807][ T8940] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2210'. [ 89.956111][ T8940] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2210'. [ 90.048157][ T8959] loop6: detected capacity change from 0 to 512 [ 90.065723][ T8959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.082258][ T8959] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.138398][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.180165][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2229'. [ 90.866488][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 90.866503][ T30] audit: type=1326 audit(1741453689.008:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 90.896134][ T30] audit: type=1326 audit(1741453689.008:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 90.920344][ T30] audit: type=1326 audit(1741453689.008:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 90.943814][ T30] audit: type=1326 audit(1741453689.008:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f429625d1a3 code=0x7ffc0000 [ 90.967155][ T30] audit: type=1326 audit(1741453689.008:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f429625bc1f code=0x7ffc0000 [ 90.990400][ T30] audit: type=1326 audit(1741453689.008:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f429625d1f7 code=0x7ffc0000 [ 91.013978][ T30] audit: type=1326 audit(1741453689.008:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f429625bad0 code=0x7ffc0000 [ 91.037439][ T30] audit: type=1326 audit(1741453689.008:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f429625bdca code=0x7ffc0000 [ 91.060745][ T30] audit: type=1326 audit(1741453689.008:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 91.084136][ T30] audit: type=1326 audit(1741453689.008:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.2.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429625d169 code=0x7ffc0000 [ 91.468665][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 91.478161][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 91.505719][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.530945][ T9049] bridge_slave_1 (unregistering): left allmulticast mode [ 91.538051][ T9049] bridge_slave_1 (unregistering): left promiscuous mode [ 91.545488][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.573654][ T9061] IPv6: Can't replace route, no match found [ 91.699934][ T9071] Invalid ELF header len 8 [ 91.718626][ T9069] loop6: detected capacity change from 0 to 8192 [ 92.113361][ T9088] loop6: detected capacity change from 0 to 128 [ 92.461396][ T9115] loop4: detected capacity change from 0 to 8192 [ 92.514076][ T9121] vlan0: entered allmulticast mode [ 92.536860][ T9125] loop6: detected capacity change from 0 to 1024 [ 92.566955][ T9125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.580341][ T9133] ref_ctr increment failed for inode: 0x8ff offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104db8580 [ 92.592037][ T9129] uprobe: syz.4.2294:9129 failed to unregister, leaking uprobe [ 92.702400][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.852076][ T9158] CĂ: renamed from team_slave_0 (while UP) [ 92.859154][ T9158] netlink: 'syz.3.2315': attribute type 3 has an invalid length. [ 92.867832][ T9158] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 93.231719][ T9166] wg2: entered promiscuous mode [ 93.236718][ T9166] wg2: entered allmulticast mode [ 93.479277][ T9183] loop3: detected capacity change from 0 to 1024 [ 93.495356][ T9183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.620227][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.635963][ T9206] wg2: left promiscuous mode [ 93.640556][ T9206] wg2: left allmulticast mode [ 93.650365][ T9206] wg2: entered promiscuous mode [ 93.655340][ T9206] wg2: entered allmulticast mode [ 93.677251][ T9211] loop3: detected capacity change from 0 to 512 [ 93.684993][ T9210] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.696324][ T9211] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.709317][ T9211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 93.728809][ T9211] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2324: corrupted in-inode xattr: e_value size too large [ 93.732055][ T9211] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2324: couldn't read orphan inode 15 (err -117) [ 93.756509][ T9211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.777662][ T9211] EXT4-fs (loop3): shut down requested (1) [ 93.787540][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.806865][ T9220] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.413655][ T9246] loop6: detected capacity change from 0 to 2048 [ 94.435775][ T9245] __nla_validate_parse: 13 callbacks suppressed [ 94.435865][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.435883][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.435918][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.439035][ T9252] loop3: detected capacity change from 0 to 128 [ 94.442873][ T9246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.457045][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.496564][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.525511][ T9252] bio_check_eod: 6207 callbacks suppressed [ 94.525558][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.525558][ T9252] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 94.539303][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539303][ T9252] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 94.539420][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539420][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539523][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539523][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539556][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539556][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539657][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539657][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539690][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539690][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539716][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539716][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539742][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539742][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.539784][ T9252] syz.3.2337: attempt to access beyond end of device [ 94.539784][ T9252] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.546085][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.704147][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.725465][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.734360][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.745720][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 94.810865][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'. [ 94.922490][ T9268] sd 0:0:1:0: device reset [ 95.237423][ T9288] dccp_close: ABORT with 34 bytes unread [ 95.413960][ T9305] loop3: detected capacity change from 0 to 164 [ 95.420936][ T9305] Unable to read rock-ridge attributes [ 95.431002][ T9305] Unable to read rock-ridge attributes [ 95.440600][ T9305] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.452218][ T9305] block device autoloading is deprecated and will be removed. [ 95.588079][ T9322] netlink: 'syz.6.2369': attribute type 4 has an invalid length. [ 95.705280][ T9331] loop0: detected capacity change from 0 to 128 [ 95.709585][ T9329] loop3: detected capacity change from 0 to 2048 [ 95.721618][ T9333] sd 0:0:1:0: device reset [ 95.745592][ T9329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.810022][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.850504][ T9340] loop6: detected capacity change from 0 to 1024 [ 95.857690][ T9340] EXT4-fs: Ignoring removed nobh option [ 95.863298][ T9340] EXT4-fs: Ignoring removed bh option [ 95.885473][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 95.885486][ T30] audit: type=1326 audit(1741453694.028:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b3429bc1f code=0x7ffc0000 [ 95.916757][ T9342] loop3: detected capacity change from 0 to 8192 [ 95.923641][ T30] audit: type=1326 audit(1741453694.038:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3b3429d1f7 code=0x7ffc0000 [ 95.946983][ T30] audit: type=1326 audit(1741453694.058:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b3429bad0 code=0x7ffc0000 [ 95.970454][ T30] audit: type=1326 audit(1741453694.058:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b3429cd6b code=0x7ffc0000 [ 95.993745][ T30] audit: type=1326 audit(1741453694.058:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3b3429bdca code=0x7ffc0000 [ 96.017007][ T30] audit: type=1326 audit(1741453694.058:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3b3429bdca code=0x7ffc0000 [ 96.040274][ T30] audit: type=1326 audit(1741453694.058:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3b3429b9d7 code=0x7ffc0000 [ 96.063672][ T30] audit: type=1326 audit(1741453694.058:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3b3429e90a code=0x7ffc0000 [ 96.091769][ T9340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.106693][ T30] audit: type=1326 audit(1741453694.248:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b3429bad0 code=0x7ffc0000 [ 96.130137][ T30] audit: type=1326 audit(1741453694.248:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.3.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3b3429beb7 code=0x7ffc0000 [ 96.190178][ T9340] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.2387: Allocating blocks 497-513 which overlap fs metadata [ 96.217729][ T9340] EXT4-fs (loop6): pa ffff8881068e01c0: logic 256, phys. 385, len 8 [ 96.225859][ T9340] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 96.261499][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.376778][ T9365] loop4: detected capacity change from 0 to 164 [ 96.385123][ T9365] Unable to read rock-ridge attributes [ 96.393246][ T9365] Unable to read rock-ridge attributes [ 96.413804][ T9365] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.664509][ T9393] loop4: detected capacity change from 0 to 512 [ 96.685322][ T9393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.731675][ T9393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.754611][ T9393] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.855172][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.978192][ T9423] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.509575][ T9472] loop0: detected capacity change from 0 to 128 [ 97.851164][ T9517] lo speed is unknown, defaulting to 1000 [ 97.857289][ T9517] lo speed is unknown, defaulting to 1000 [ 97.883740][ T9517] lo speed is unknown, defaulting to 1000 [ 97.897007][ T9517] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.919682][ T9517] lo speed is unknown, defaulting to 1000 [ 97.931179][ T9517] lo speed is unknown, defaulting to 1000 [ 97.937312][ T9517] lo speed is unknown, defaulting to 1000 [ 97.943513][ T9517] lo speed is unknown, defaulting to 1000 [ 97.978907][ T9517] lo speed is unknown, defaulting to 1000 [ 97.995022][ T9517] lo speed is unknown, defaulting to 1000 [ 98.154478][ T9548] xt_CT: No such helper "pptp" [ 98.198610][ T9555] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 98.362662][ T9570] loop3: detected capacity change from 0 to 512 [ 98.369751][ T9570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.389899][ T9570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.404197][ T9570] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.433528][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.498732][ T9585] loop0: detected capacity change from 0 to 512 [ 98.538452][ T9585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.552883][ T9585] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.584359][ T9585] loop0: detected capacity change from 512 to 64 [ 98.592061][ T9585] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Out of memory [ 98.601527][ T9585] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #18: comm syz.0.2483: mark_inode_dirty error [ 98.613089][ T9585] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Out of memory [ 98.631985][ T9585] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #18: comm syz.0.2483: mark_inode_dirty error [ 98.643480][ T9585] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Out of memory [ 98.652754][ T9585] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #18: comm syz.0.2483: mark_inode_dirty error [ 98.665090][ T9585] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Out of memory [ 98.674557][ T9585] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #18: comm syz.0.2483: mark_inode_dirty error [ 98.686414][ T9585] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Out of memory [ 98.696341][ T9585] EXT4-fs error (device loop0): ext4_truncate:4240: inode #18: comm syz.0.2483: mark_inode_dirty error [ 98.746235][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.754863][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.763790][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.772564][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.805018][ T8776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.841891][ T9614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.934878][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.162517][ T9648] lo speed is unknown, defaulting to 1000 [ 99.228216][ T9666] SELinux: failed to load policy [ 99.228565][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 99.267417][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.274502][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.281890][ T9648] bridge_slave_0: entered allmulticast mode [ 99.288399][ T9648] bridge_slave_0: entered promiscuous mode [ 99.311444][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.318567][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.327349][ T9648] bridge_slave_1: entered allmulticast mode [ 99.333870][ T9648] bridge_slave_1: entered promiscuous mode [ 99.363442][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.374246][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.404618][ T9648] team0: Port device team_slave_0 added [ 99.412673][ T9648] team0: Port device team_slave_1 added [ 99.439184][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.446178][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.472122][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.498802][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.505805][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.532028][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.595306][ T9703] dvmrp1: entered allmulticast mode [ 99.602831][ T9648] hsr_slave_0: entered promiscuous mode [ 99.609452][ T9648] hsr_slave_1: entered promiscuous mode [ 99.617031][ T9648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.626720][ T9648] Cannot create hsr debugfs directory [ 99.633107][ T9673] lo speed is unknown, defaulting to 1000 [ 99.736818][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 99.757333][ T9648] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 99.771046][ T9648] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 99.780092][ T9648] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 99.800971][ T9648] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 99.834770][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.841952][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.850878][ T9673] bridge_slave_0: entered allmulticast mode [ 99.857467][ T9673] bridge_slave_0: entered promiscuous mode [ 99.863419][ T9743] loop3: detected capacity change from 0 to 164 [ 99.870253][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.877347][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.877938][ T9743] Unable to read rock-ridge attributes [ 99.884914][ T9673] bridge_slave_1: entered allmulticast mode [ 99.895645][ T9743] Unable to read rock-ridge attributes [ 99.896557][ T9673] bridge_slave_1: entered promiscuous mode [ 99.901713][ T9743] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.934024][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.944034][ T9745] loop3: detected capacity change from 0 to 2048 [ 99.946613][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.950652][ T9745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.962804][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.985896][ T9745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.000045][ T9673] team0: Port device team_slave_0 added [ 100.006469][ T9745] tipc: Enabled bearer , priority 10 [ 100.013332][ T9648] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.021115][ T9673] team0: Port device team_slave_1 added [ 100.031870][ T9745] tipc: Disabling bearer [ 100.039642][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.046712][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.055036][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.066876][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.073981][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.083481][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.090515][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.116598][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.128524][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.135498][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.161619][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.201423][ T9673] hsr_slave_0: entered promiscuous mode [ 100.207458][ T9673] hsr_slave_1: entered promiscuous mode [ 100.213442][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.222327][ T9673] Cannot create hsr debugfs directory [ 100.248578][ T9758] loop3: detected capacity change from 0 to 128 [ 100.261645][ T9758] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.274003][ T9758] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.305107][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.308437][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.356201][ T9673] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.365546][ T9673] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.376425][ T9673] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.386456][ T9673] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.439212][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.453199][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.467316][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.474504][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.488613][ T9783] loop3: detected capacity change from 0 to 2048 [ 100.496516][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.503622][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.521516][ T9648] veth0_vlan: entered promiscuous mode [ 100.527591][ T9783] loop3: p1 < > p4 [ 100.532067][ T9783] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.542034][ T9648] veth1_vlan: entered promiscuous mode [ 100.569352][ T9648] veth0_macvtap: entered promiscuous mode [ 100.579599][ T9648] veth1_macvtap: entered promiscuous mode [ 100.595659][ T9791] loop4: detected capacity change from 0 to 2048 [ 100.616956][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.627456][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.637285][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.640349][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.647851][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.669659][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.680124][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.695375][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.708574][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.719158][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.729049][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.739525][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.749431][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.759870][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.770746][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.781241][ T9648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.784612][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.789986][ T9648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.807746][ T9648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816787][ T9648] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.831399][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.878291][ T9817] __nla_validate_parse: 7 callbacks suppressed [ 100.878307][ T9817] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2554'. [ 100.893987][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 100.903013][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 100.970866][ T9830] loop6: detected capacity change from 0 to 1024 [ 101.028506][ T9673] veth0_vlan: entered promiscuous mode [ 101.039678][ T9673] veth1_vlan: entered promiscuous mode [ 101.055016][ T9673] veth0_macvtap: entered promiscuous mode [ 101.062078][ T9673] veth1_macvtap: entered promiscuous mode [ 101.072616][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.083123][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.092987][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.103431][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.113285][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.123736][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.133577][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.144004][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.158919][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.171527][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2562'. [ 101.202066][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.212694][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.222671][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.233189][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.243143][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.244428][ T9830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.253622][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.275573][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.286144][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.308036][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.318734][ T9673] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.327507][ T9673] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.336250][ T9673] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.345107][ T9673] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.383387][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.455458][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 101.455472][ T30] audit: type=1400 audit(1741453699.598:2589): avc: denied { nlmsg_write } for pid=9853 comm="syz.7.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.455924][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2568'. [ 101.495330][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.496468][ T9857] loop6: detected capacity change from 0 to 512 [ 101.502822][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.510794][ T9857] EXT4-fs: Ignoring removed bh option [ 101.522630][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.523652][ T9857] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.530173][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.542806][ T9857] EXT4-fs (loop6): 1 truncate cleaned up [ 101.553523][ T9857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.574463][ T30] audit: type=1326 audit(1741453699.718:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.598533][ T30] audit: type=1400 audit(1741453699.718:2591): avc: denied { setattr } for pid=9855 comm="syz.6.2569" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.621188][ T30] audit: type=1326 audit(1741453699.748:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.644659][ T30] audit: type=1326 audit(1741453699.748:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.667702][ T30] audit: type=1326 audit(1741453699.748:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.692071][ T30] audit: type=1326 audit(1741453699.748:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.714945][ T30] audit: type=1326 audit(1741453699.748:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.737806][ T30] audit: type=1326 audit(1741453699.748:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.760708][ T30] audit: type=1326 audit(1741453699.768:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02d3d169 code=0x7ffc0000 [ 101.785844][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.865755][ T9875] uprobe: syz.3.2574:9875 failed to unregister, leaking uprobe [ 101.896345][ T9879] netlink: 'syz.8.2579': attribute type 21 has an invalid length. [ 101.904257][ T9879] netlink: 'syz.8.2579': attribute type 4 has an invalid length. [ 101.911983][ T9879] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2579'. [ 101.990154][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88812d23aa00: rx timeout, send abort [ 101.998483][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88812d23ac00: rx timeout, send abort [ 102.006851][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88812d23aa00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.021252][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88812d23ac00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.105684][ T9895] netlink: 'syz.8.2585': attribute type 21 has an invalid length. [ 102.113532][ T9895] netlink: 'syz.8.2585': attribute type 20 has an invalid length. [ 102.121386][ T9895] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.134485][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2587'. [ 102.143448][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2587'. [ 102.196661][ T9905] loop4: detected capacity change from 0 to 512 [ 102.203181][ T9905] journal_path: Non-blockdev passed as './bus' [ 102.209527][ T9905] EXT4-fs: error: could not find journal device path [ 102.291923][ T9914] loop4: detected capacity change from 0 to 2048 [ 102.301368][ T9914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.325921][ T9914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.344780][ T9914] tipc: Started in network mode [ 102.349726][ T9914] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.356812][ T9914] tipc: Enabled bearer , priority 10 [ 102.363752][ T9914] tipc: Disabling bearer [ 102.379098][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.452810][ T9936] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 102.462527][ T9936] team0: Device hsr_slave_0 failed to register rx_handler [ 102.542411][ T9948] loop8: detected capacity change from 0 to 1024 [ 102.567298][ T9948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.642340][ T9956] loop6: detected capacity change from 0 to 2048 [ 102.649081][ T9955] netlink: 'syz.4.2612': attribute type 30 has an invalid length. [ 102.657234][ T9956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.673658][ T9673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.694029][ T9956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.711201][ T9956] tipc: Started in network mode [ 102.716429][ T9956] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.724909][ T9956] tipc: Enabled bearer , priority 10 [ 102.736695][ T9956] tipc: Disabling bearer [ 102.752763][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.799488][ T9968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.830006][ T9978] bridge0: entered promiscuous mode [ 102.839152][ T9978] bridge0: port 3(macsec1) entered blocking state [ 102.845652][ T9978] bridge0: port 3(macsec1) entered disabled state [ 102.853789][ T9978] macsec1: entered allmulticast mode [ 102.859228][ T9978] bridge0: entered allmulticast mode [ 102.874148][ T9978] macsec1: left allmulticast mode [ 102.879213][ T9978] bridge0: left allmulticast mode [ 102.885204][ T9978] bridge0: left promiscuous mode [ 102.902975][ T9980] Cannot find add_set index 0 as target [ 102.912269][ T9983] loop3: detected capacity change from 0 to 512 [ 102.994288][ T9983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.047245][ T9983] ext4 filesystem being mounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.150905][ T3302] EXT4-fs error (device loop3): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /581/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 103.219390][ T9992] SELinux: failed to load policy [ 103.350778][ T9996] loop8: detected capacity change from 0 to 2048 [ 103.367749][ T9996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.411724][ T9996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.429676][ T9996] tipc: Started in network mode [ 103.434574][ T9996] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.441739][ T9996] tipc: Enabled bearer , priority 10 [ 103.449669][ T9996] tipc: Disabling bearer [ 103.464364][ T9673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.846853][T10019] Cannot find add_set index 0 as target [ 103.970825][T10023] SELinux: failed to load policy [ 103.972769][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 103.983520][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 103.991504][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.999375][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.007196][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.014876][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.022500][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.030163][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.037816][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.045464][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.053100][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.060750][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.068410][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.076175][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.083812][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.091501][ T3376] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 104.099839][ T3376] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.277155][T10028] netlink: 'syz.4.2642': attribute type 3 has an invalid length. [ 104.284949][T10028] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2642'. [ 104.295496][T10028] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 104.427913][T10040] geneve0: entered allmulticast mode [ 104.433889][ T3374] IPVS: starting estimator thread 0... [ 104.442415][T10038] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.544017][T10042] IPVS: using max 3024 ests per chain, 151200 per kthread [ 104.599083][T10056] netlink: 'syz.6.2653': attribute type 10 has an invalid length. [ 104.617520][T10056] team0: Device hsr_slave_0 failed to register rx_handler [ 104.674195][T10062] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 104.742876][T10069] bridge0: entered promiscuous mode [ 104.762596][T10069] bridge0: port 3(macsec1) entered blocking state [ 104.769159][T10069] bridge0: port 3(macsec1) entered disabled state [ 104.870378][T10069] macsec1: entered allmulticast mode [ 104.875743][T10069] bridge0: entered allmulticast mode [ 104.884092][T10069] macsec1: left allmulticast mode [ 104.889134][T10069] bridge0: left allmulticast mode [ 104.899433][T10069] bridge0: left promiscuous mode [ 104.981746][T10080] netlink: 'syz.7.2662': attribute type 30 has an invalid length. [ 105.059335][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 105.069259][T10086] netlink: 'syz.7.2665': attribute type 10 has an invalid length. [ 105.079253][T10086] team0: Device hsr_slave_0 failed to register rx_handler [ 105.148624][T10095] bridge0: port 3(vlan2) entered blocking state [ 105.155072][T10095] bridge0: port 3(vlan2) entered disabled state [ 105.162899][T10093] loop4: detected capacity change from 0 to 512 [ 105.170585][T10095] vlan2: entered allmulticast mode [ 105.175785][T10095] bridge0: entered allmulticast mode [ 105.181807][T10093] EXT4-fs: Ignoring removed bh option [ 105.188078][T10095] vlan2: left allmulticast mode [ 105.193025][T10095] bridge0: left allmulticast mode [ 105.202135][T10093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.215394][T10093] EXT4-fs (loop4): 1 truncate cleaned up [ 105.221377][T10093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.255367][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.455519][T10115] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 105.522641][T10123] loop7: detected capacity change from 0 to 512 [ 105.542908][T10123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.681523][T10123] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2680: Unimplemented hash flags: 0x0001 [ 105.693058][T10123] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2680: Corrupt directory, running e2fsck is recommended [ 105.748516][T10133] SELinux: ebitmap: truncated map [ 105.757321][T10123] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2680: Unimplemented hash flags: 0x0001 [ 105.768839][T10123] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2680: Corrupt directory, running e2fsck is recommended [ 105.785488][T10133] SELinux: failed to load policy [ 105.844072][T10123] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2680: Unimplemented hash flags: 0x0001 [ 105.855807][T10123] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2680: Corrupt directory, running e2fsck is recommended [ 105.889420][T10123] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2680: Unimplemented hash flags: 0x0001 [ 105.900973][T10123] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2680: Corrupt directory, running e2fsck is recommended [ 105.923194][T10137] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2684'. [ 105.932386][T10123] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2680: Unimplemented hash flags: 0x0001 [ 105.943961][T10123] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2680: Corrupt directory, running e2fsck is recommended [ 105.995910][T10123] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 3: comm syz.7.2680: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 106.094934][ T9648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.128269][ T3539] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.209557][ T3539] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.249618][ T3539] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.311300][ T3539] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.387561][ T3539] bridge_slave_1: left allmulticast mode [ 106.393215][ T3539] bridge_slave_1: left promiscuous mode [ 106.399181][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.436757][ T3539] bridge_slave_0: left allmulticast mode [ 106.442416][ T3539] bridge_slave_0: left promiscuous mode [ 106.448119][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.579539][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.595960][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.618232][ T3539] bond0 (unregistering): Released all slaves [ 106.666278][T10151] lo speed is unknown, defaulting to 1000 [ 106.701625][ T3539] tipc: Left network mode [ 106.756494][ T3539] hsr_slave_0: left promiscuous mode [ 106.762336][ T3539] hsr_slave_1: left promiscuous mode [ 106.770198][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.777623][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.826279][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.833785][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.862144][ T3539] veth1_macvtap: left promiscuous mode [ 106.874217][ T3539] veth0_macvtap: left promiscuous mode [ 106.885012][ T3539] veth1_vlan: left promiscuous mode [ 106.895801][ T3539] veth0_vlan: left promiscuous mode [ 107.003007][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 107.016838][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 107.052002][T10151] chnl_net:caif_netlink_parms(): no params data found [ 107.109125][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.116272][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.123469][T10151] bridge_slave_0: entered allmulticast mode [ 107.129935][T10151] bridge_slave_0: entered promiscuous mode [ 107.136842][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.143883][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.151096][T10151] bridge_slave_1: entered allmulticast mode [ 107.157406][T10151] bridge_slave_1: entered promiscuous mode [ 107.174765][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.185081][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.204332][T10151] team0: Port device team_slave_0 added [ 107.210813][T10151] team0: Port device team_slave_1 added [ 107.226244][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.233187][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.259250][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.271794][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.278760][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.304719][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.331905][T10151] hsr_slave_0: entered promiscuous mode [ 107.337982][T10151] hsr_slave_1: entered promiscuous mode [ 107.344104][T10151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.351820][T10151] Cannot create hsr debugfs directory [ 107.637852][T10151] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 107.647190][T10151] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 107.656448][T10151] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.665535][T10151] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.699975][T10151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.711198][T10151] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.719983][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.727089][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.738838][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.745904][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.802687][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.890239][T10151] veth0_vlan: entered promiscuous mode [ 107.897840][T10151] veth1_vlan: entered promiscuous mode [ 107.911785][T10151] veth0_macvtap: entered promiscuous mode [ 107.919239][T10151] veth1_macvtap: entered promiscuous mode [ 107.929625][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.940146][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.949961][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.960375][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.970291][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.980774][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.991523][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.002364][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.012861][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.022690][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.033139][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.042955][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.053369][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.065385][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.075185][T10151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.083880][T10151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.092740][T10151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.101493][T10151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.324470][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 118.324483][ T30] audit: type=1326 audit(1741453716.468:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.407021][ T9237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.415636][T10215] loop4: detected capacity change from 0 to 2048 [ 118.433975][ T30] audit: type=1326 audit(1741453716.498:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.457873][ T30] audit: type=1326 audit(1741453716.498:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.481503][ T30] audit: type=1326 audit(1741453716.498:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.488979][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2708'. [ 118.505029][ T30] audit: type=1326 audit(1741453716.498:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.505057][ T30] audit: type=1326 audit(1741453716.498:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 118.559505][T10207] lo speed is unknown, defaulting to 1000 [ 118.568362][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.594077][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.654002][T10215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.722137][T10207] chnl_net:caif_netlink_parms(): no params data found [ 118.767960][ T30] audit: type=1400 audit(1741453716.908:2698): avc: denied { execute } for pid=10243 comm="syz.6.2712" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 118.798674][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.815389][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.822486][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.831113][T10207] bridge_slave_0: entered allmulticast mode [ 118.840040][T10207] bridge_slave_0: entered promiscuous mode [ 118.850299][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.857584][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.857973][T10207] bridge_slave_1: entered allmulticast mode [ 118.858459][T10207] bridge_slave_1: entered promiscuous mode [ 118.900786][T10255] loop6: detected capacity change from 0 to 1024 [ 118.913598][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.914682][T10255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.944475][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.956094][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.977166][T10207] team0: Port device team_slave_0 added [ 118.983794][T10207] team0: Port device team_slave_1 added [ 118.990492][ T30] audit: type=1400 audit(1741453717.138:2699): avc: denied { listen } for pid=10261 comm="syz.6.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.010802][ T30] audit: type=1400 audit(1741453717.138:2700): avc: denied { accept } for pid=10261 comm="syz.6.2719" lport=60849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.041855][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.048871][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.074878][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.085998][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.093099][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.119003][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.162806][T10207] hsr_slave_0: entered promiscuous mode [ 119.168884][T10207] hsr_slave_1: entered promiscuous mode [ 119.175041][T10207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.182724][T10207] Cannot create hsr debugfs directory [ 119.207455][T10275] pim6reg: entered allmulticast mode [ 119.220025][T10275] pim6reg: left allmulticast mode [ 119.259817][T10286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.267125][T10286] IPv6: NLM_F_CREATE should be set when creating new route [ 119.300847][T10207] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 119.309465][T10207] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 119.318158][T10207] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 119.327319][T10207] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 119.349761][T10290] bridge0: entered promiscuous mode [ 119.356636][T10290] bridge0: port 2(macsec1) entered blocking state [ 119.363165][T10290] bridge0: port 2(macsec1) entered disabled state [ 119.369830][T10290] macsec1: entered allmulticast mode [ 119.375162][T10290] bridge0: entered allmulticast mode [ 119.382607][T10290] macsec1: left allmulticast mode [ 119.387773][T10290] bridge0: left allmulticast mode [ 119.394266][T10290] bridge0: left promiscuous mode [ 119.399778][T10298] loop4: detected capacity change from 0 to 1024 [ 119.415601][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.422672][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.429967][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.437079][T10207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.446346][T10298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.463157][T10207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.474274][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.496930][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.515809][T10207] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.535574][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.542732][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.565884][T10298] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 119.572523][T10207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.591081][T10207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.602446][T10298] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 119.614933][T10298] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.614933][T10298] [ 119.624638][T10298] EXT4-fs (loop4): Total free blocks count 0 [ 119.630620][T10298] EXT4-fs (loop4): Free/Dirty block details [ 119.636343][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.636581][T10298] EXT4-fs (loop4): free_blocks=68451041280 [ 119.643529][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.656634][T10298] EXT4-fs (loop4): dirty_blocks=2640 [ 119.661917][T10298] EXT4-fs (loop4): Block reservation details [ 119.667915][T10298] EXT4-fs (loop4): i_reserved_data_blocks=165 [ 119.743157][T10207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.784283][ T3541] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.908098][T10207] veth0_vlan: entered promiscuous mode [ 119.919759][T10207] veth1_vlan: entered promiscuous mode [ 119.956914][T10207] veth0_macvtap: entered promiscuous mode [ 119.964742][T10207] veth1_macvtap: entered promiscuous mode [ 119.971591][T10349] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 119.979939][T10349] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 119.995864][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.006433][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.016362][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.027063][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.037030][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.047699][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.049060][T10349] loop6: detected capacity change from 0 to 2048 [ 120.057677][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.074476][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.085114][T10207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.096807][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.107397][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.117407][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.127949][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.137903][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.148530][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.158522][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.169040][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.180090][T10207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.189565][T10207] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.198454][T10207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.200379][T10349] GPT:first_usable_lbas don't match. [ 120.207366][T10207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.212501][T10349] GPT:34 != 290 [ 120.212511][T10349] GPT: Use GNU Parted to correct GPT errors. [ 120.212650][T10349] loop6: p1 p2 p3 [ 120.221379][T10207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.288975][T10360] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 120.303103][T10360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.357945][ T30] audit: type=1326 audit(1741453718.498:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.8.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16ee3d169 code=0x7ffc0000 [ 120.556639][T10400] veth1_macvtap: left promiscuous mode [ 120.572014][T10400] macsec0: entered promiscuous mode [ 120.585855][T10403] loop8: detected capacity change from 0 to 512 [ 120.616709][T10403] EXT4-fs (loop8): too many log groups per flexible block group [ 120.624463][T10403] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 120.646938][T10403] EXT4-fs (loop8): mount failed [ 121.283707][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2796'. [ 121.432105][T10485] loop9: detected capacity change from 0 to 128 [ 121.443808][T10486] loop4: detected capacity change from 0 to 128 [ 121.486266][T10492] loop6: detected capacity change from 0 to 512 [ 121.493733][T10492] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.525248][ T3509] bio_check_eod: 52049 callbacks suppressed [ 121.525261][ T3509] kworker/u8:20: attempt to access beyond end of device [ 121.525261][ T3509] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 121.542881][T10492] EXT4-fs (loop6): 1 truncate cleaned up [ 121.564498][T10492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.597732][T10492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.628654][T10497] loop4: detected capacity change from 0 to 512 [ 121.666668][T10497] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.694863][T10497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2810: bg 0: block 248: padding at end of block bitmap is not set [ 121.727345][T10497] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.2810: Failed to acquire dquot type 1 [ 121.791134][T10497] EXT4-fs (loop4): 1 truncate cleaned up [ 121.797489][T10497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.825853][T10497] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 121.866394][T10497] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.2810: Failed to acquire dquot type 1 [ 121.906003][T10497] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 121.949811][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.962408][T10527] syzkaller0: entered promiscuous mode [ 121.967974][T10527] syzkaller0: entered allmulticast mode [ 122.058058][T10536] loop6: detected capacity change from 0 to 128 [ 122.122491][T10549] loop9: detected capacity change from 0 to 1024 [ 122.129618][T10549] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 122.139433][T10549] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 122.149755][T10549] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.161034][T10549] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #5: comm syz.9.2831: unexpected bad inode w/o EXT4_IGET_BAD [ 122.177449][T10549] EXT4-fs (loop9): no journal found [ 122.182694][T10549] EXT4-fs (loop9): can't get journal size [ 122.200397][T10549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.228125][T10207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.267494][T10558] loop6: detected capacity change from 0 to 2048 [ 122.286558][T10558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.298845][T10558] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.439712][T10566] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2835: bg 0: block 345: padding at end of block bitmap is not set [ 122.455285][T10566] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 122.467854][T10566] EXT4-fs (loop6): This should not happen!! Data will be lost [ 122.467854][T10566] [ 122.529032][ T3541] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 122.541711][ T3541] EXT4-fs (loop6): This should not happen!! Data will be lost [ 122.541711][ T3541] [ 122.575955][T10574] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.579009][ T3541] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 122.595978][ T3541] EXT4-fs (loop6): This should not happen!! Data will be lost [ 122.595978][ T3541] [ 122.605634][ T3541] EXT4-fs (loop6): Total free blocks count 0 [ 122.611602][ T3541] EXT4-fs (loop6): Free/Dirty block details [ 122.617551][ T3541] EXT4-fs (loop6): free_blocks=0 [ 122.629634][T10577] loop9: detected capacity change from 0 to 512 [ 122.636261][T10577] EXT4-fs: Ignoring removed i_version option [ 122.651926][T10577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.665877][T10577] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.686960][T10577] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #4: comm syz.9.2844: corrupted inode contents [ 122.699152][T10577] EXT4-fs (loop9): Remounting filesystem read-only [ 122.707396][T10577] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 122.726675][T10207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.823325][T10608] veth0_macvtap: left promiscuous mode [ 122.832060][T10608] macvtap0: entered promiscuous mode [ 122.852074][T10608] veth0_macvtap: entered promiscuous mode [ 122.866481][T10608] team0: Device macvtap0 failed to register rx_handler [ 122.879469][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2858'. [ 122.889225][T10608] veth0_macvtap: left promiscuous mode [ 122.917551][T10615] team0 (unregistering): Port device team_slave_0 removed [ 122.927726][T10615] team0 (unregistering): Port device team_slave_1 removed [ 123.046212][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'. [ 123.342462][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 123.342476][ T30] audit: type=1400 audit(1741453721.478:2809): avc: denied { create } for pid=10676 comm="syz.9.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.374260][ T30] audit: type=1400 audit(1741453721.508:2810): avc: denied { ioctl } for pid=10676 comm="syz.9.2885" path="socket:[30357]" dev="sockfs" ino=30357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.421492][ T30] audit: type=1400 audit(1741453721.558:2811): avc: denied { create } for pid=10678 comm="syz.4.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.458663][ T30] audit: type=1400 audit(1741453721.588:2812): avc: denied { write } for pid=10678 comm="syz.4.2886" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.488991][ T30] audit: type=1326 audit(1741453721.628:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 123.512712][ T30] audit: type=1326 audit(1741453721.628:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 123.542135][ T30] audit: type=1326 audit(1741453721.678:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 123.565750][ T30] audit: type=1326 audit(1741453721.678:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 123.589410][ T30] audit: type=1326 audit(1741453721.678:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 123.612951][ T30] audit: type=1326 audit(1741453721.678:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517640d169 code=0x7ffc0000 [ 124.021433][T10723] loop7: detected capacity change from 0 to 1024 [ 124.028263][T10723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.045930][T10723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.058174][T10717] Falling back ldisc for ttyS3. [ 124.065328][T10723] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.2904: Allocating blocks 385-513 which overlap fs metadata [ 124.083478][T10723] EXT4-fs (loop7): pa ffff8881068e00e0: logic 16, phys. 129, len 24 [ 124.091637][T10723] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 124.104327][T10723] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 124.116721][T10723] EXT4-fs (loop7): This should not happen!! Data will be lost [ 124.116721][T10723] [ 124.126598][T10723] EXT4-fs (loop7): Total free blocks count 0 [ 124.132644][T10723] EXT4-fs (loop7): Free/Dirty block details [ 124.138551][T10723] EXT4-fs (loop7): free_blocks=128 [ 124.143655][T10723] EXT4-fs (loop7): dirty_blocks=0 [ 124.148703][T10723] EXT4-fs (loop7): Block reservation details [ 124.154775][T10723] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 124.286392][T10763] wireguard0: entered promiscuous mode [ 124.291888][T10763] wireguard0: entered allmulticast mode [ 124.291991][T10761] loop4: detected capacity change from 0 to 8192 [ 124.310258][T10761] syz.4.2921: attempt to access beyond end of device [ 124.310258][T10761] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 124.326699][T10761] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 124.334551][T10761] FAT-fs (loop4): Filesystem has been set read-only [ 124.341569][T10761] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 124.350916][T10761] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 124.355254][T10766] syzkaller1: entered promiscuous mode [ 124.364343][T10766] syzkaller1: entered allmulticast mode [ 124.535515][T10794] netlink: 240 bytes leftover after parsing attributes in process `syz.9.2927'. [ 124.621886][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.660373][T10809] syzkaller1: entered promiscuous mode [ 124.665959][T10809] syzkaller1: entered allmulticast mode [ 124.678939][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.880028][T10825] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.2952'. [ 124.940968][T10830] loop8: detected capacity change from 0 to 2048 [ 124.974994][T10830] loop8: p1 < > p4 [ 124.981729][T10830] loop8: p4 size 8388608 extends beyond EOD, truncated [ 125.156209][T10850] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.156209][T10850] The task syz.8.2957 (10850) triggered the difference, watch for misbehavior. [ 125.329945][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2968'. [ 125.353694][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2969'. [ 125.575804][T10879] loop7: detected capacity change from 0 to 2048 [ 125.586905][T10879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.599238][T10879] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.697750][T10885] pim6reg1: entered promiscuous mode [ 125.703102][T10885] pim6reg1: entered allmulticast mode [ 125.726857][T10883] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2974: bg 0: block 345: padding at end of block bitmap is not set [ 125.741435][T10883] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 125.754192][T10883] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.754192][T10883] [ 125.779701][ T134] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 125.792427][ T134] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.792427][ T134] [ 125.820848][ T1614] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 125.833615][ T1614] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.833615][ T1614] [ 125.843564][ T1614] EXT4-fs (loop7): Total free blocks count 0 [ 125.849578][ T1614] EXT4-fs (loop7): Free/Dirty block details [ 125.855568][ T1614] EXT4-fs (loop7): free_blocks=0 [ 126.015396][T10904] loop6: detected capacity change from 0 to 8192 [ 126.025849][T10904] syz.6.2984: attempt to access beyond end of device [ 126.025849][T10904] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 126.040478][T10904] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 126.048331][T10904] FAT-fs (loop6): Filesystem has been set read-only [ 126.056423][T10904] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 126.064782][T10904] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 126.194246][T10924] tipc: Cannot configure node identity twice [ 126.274488][T10947] loop6: detected capacity change from 0 to 512 [ 126.285189][T10943] loop8: detected capacity change from 0 to 8192 [ 126.293133][T10947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.305690][T10943] syz.8.3003: attempt to access beyond end of device [ 126.305690][T10943] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 126.319857][T10943] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 126.327728][T10943] FAT-fs (loop8): Filesystem has been set read-only [ 126.331342][T10947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.347529][T10943] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 126.348168][T10947] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.358800][T10943] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 126.376709][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3006'. [ 126.399079][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.538474][T10958] ================================================================== [ 126.546571][T10958] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 126.554293][T10958] [ 126.556604][T10958] write to 0xffff888237c2a928 of 1 bytes by task 10968 on cpu 0: [ 126.564306][T10958] folios_put_refs+0x26d/0x2b0 [ 126.569079][T10958] folio_batch_move_lru+0x202/0x230 [ 126.574280][T10958] folio_add_lru+0x145/0x1f0 [ 126.578857][T10958] folio_add_lru_vma+0x48/0x60 [ 126.583605][T10958] do_wp_page+0x17a2/0x2340 [ 126.588104][T10958] handle_mm_fault+0xc63/0x2ac0 [ 126.592939][T10958] exc_page_fault+0x3b9/0x650 [ 126.597607][T10958] asm_exc_page_fault+0x26/0x30 [ 126.602449][T10958] [ 126.604760][T10958] read to 0xffff888237c2a928 of 1 bytes by task 10958 on cpu 1: [ 126.612382][T10958] __lru_add_drain_all+0x136/0x3f0 [ 126.617500][T10958] lru_cache_disable+0x1f/0x30 [ 126.622276][T10958] __se_sys_mbind+0x4d2/0x11c0 [ 126.627045][T10958] __x64_sys_mbind+0x78/0x90 [ 126.631634][T10958] x64_sys_call+0x2662/0x2dc0 [ 126.636306][T10958] do_syscall_64+0xc9/0x1c0 [ 126.640811][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.646702][T10958] [ 126.649014][T10958] value changed: 0x01 -> 0x00 [ 126.653673][T10958] [ 126.655984][T10958] Reported by Kernel Concurrency Sanitizer on: [ 126.662133][T10958] CPU: 1 UID: 0 PID: 10958 Comm: syz.8.3009 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 126.674363][T10958] Tainted: [W]=WARN [ 126.678151][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.688194][T10958] ==================================================================