last executing test programs: 2m44.547038529s ago: executing program 4 (id=52): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r1, &(0x7f0000000440)=""/4090, 0xffa) 2m44.447131691s ago: executing program 4 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd25, 0x2000000, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0xffff, 0xb11, 0x65, [{0x1, 0x2, 0x926, 0x9}, {0x0, 0x3, 0xa, 0x84}, {0x0, 0x32d, 0x2000000, 0x1}]}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040054) 2m44.317747008s ago: executing program 4 (id=54): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 2m44.120375704s ago: executing program 4 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 2m44.049122183s ago: executing program 4 (id=59): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 2m44.003814919s ago: executing program 4 (id=61): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100}, {0x2000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x5a0b, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m37.775280483s ago: executing program 32 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = fsopen(&(0x7f0000000580)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee2003001a000000", 0x33a) 2m23.238314581s ago: executing program 0 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x3b, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0xe2f, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0xffffffff, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x3, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x4, 0x0, 0x414d, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 2m22.983621315s ago: executing program 0 (id=493): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2m22.892402427s ago: executing program 0 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m22.833038274s ago: executing program 0 (id=498): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) 2m22.568821938s ago: executing program 0 (id=496): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 2m22.527518614s ago: executing program 34 (id=496): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1m43.687740342s ago: executing program 7 (id=1498): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB='flush,fmask=00000000000000000006675,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',check=strict,nodots,dots,allow_utime=00000000000000000000002,nodots,check=normal,dots,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,dots,dots,subj_user=$],\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 1m43.334938368s ago: executing program 7 (id=1502): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x9, 0xfffffffffe000001}) 1m42.996598941s ago: executing program 7 (id=1513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 1m42.85771262s ago: executing program 7 (id=1515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6110}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x38}}, 0x0) 1m42.77603509s ago: executing program 7 (id=1517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m42.736886145s ago: executing program 7 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1m27.630088607s ago: executing program 35 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1m11.519190759s ago: executing program 8 (id=2160): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xad}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) sync() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20040010, &(0x7f00000001c0)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 1m11.380002517s ago: executing program 8 (id=2162): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1m11.342349121s ago: executing program 8 (id=2163): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) 1m11.298377117s ago: executing program 8 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 1m11.267232371s ago: executing program 8 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m11.179188383s ago: executing program 8 (id=2172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1m11.143707427s ago: executing program 36 (id=2172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1m10.775130255s ago: executing program 1 (id=2189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}], 0x2}}], 0x1, 0x4000000) 1m10.670694049s ago: executing program 1 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m10.639237642s ago: executing program 1 (id=2183): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0}, 0x44048850) 1m10.586456639s ago: executing program 1 (id=2184): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 1m10.551075164s ago: executing program 1 (id=2186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.297105137s ago: executing program 1 (id=2191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1f}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.266557381s ago: executing program 37 (id=2191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1f}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.268677766s ago: executing program 3 (id=4382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000300), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x40010020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.172709189s ago: executing program 3 (id=4388): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.15848707s ago: executing program 3 (id=4390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) 1.122309275s ago: executing program 3 (id=4393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') 1.072237431s ago: executing program 3 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 649.598826ms ago: executing program 9 (id=4413): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0xa4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x15, 0x1, {{0x1, 0x1, 0x7, 0xfc, 0x3}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x80000001, 0x8, 0xf7a, 0x2a7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xa4}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 618.45193ms ago: executing program 9 (id=4416): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 471.610029ms ago: executing program 6 (id=4422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) 444.843483ms ago: executing program 5 (id=4423): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) 416.305516ms ago: executing program 6 (id=4425): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x201}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x73b, &(0x7f0000000fc0)="$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") 360.476903ms ago: executing program 5 (id=4427): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 357.323144ms ago: executing program 2 (id=4428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100) 323.409928ms ago: executing program 2 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xac, 0x2, {{0x2, 0x80000000, 0x994, 0x1, 0x3}, 0x2, 0x0, 0x66a4, 0x6, 0x6, 0x10, 0x1f, 0x1e, 0x6, 0x8, {0x7, 0x6, 0x0, 0xae29, 0x9, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 291.708842ms ago: executing program 6 (id=4430): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 208.840743ms ago: executing program 5 (id=4432): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 208.364263ms ago: executing program 9 (id=4433): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x1, 0x7, 0x20000202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 206.876923ms ago: executing program 2 (id=4434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 204.365184ms ago: executing program 5 (id=4435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semop(r2, &(0x7f00000000c0)=[{}], 0x1) 198.556774ms ago: executing program 6 (id=4436): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_adjtime(0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="010000000000"], 0xc4}}, 0x4008800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) 155.20098ms ago: executing program 5 (id=4437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 154.78888ms ago: executing program 6 (id=4438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffec}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0xfffffff9, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {0xe}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x567c4e8f, 0x1ff, 0x7, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 142.243872ms ago: executing program 2 (id=4439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000100b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r1, 0x0, 0x80000001}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 90.117599ms ago: executing program 9 (id=4440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 89.567249ms ago: executing program 2 (id=4441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 73.26882ms ago: executing program 3 (id=4442): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) recvmsg$unix(r2, 0x0, 0x1) 61.099072ms ago: executing program 6 (id=4443): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 57.632313ms ago: executing program 5 (id=4444): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002064060000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 699.69µs ago: executing program 9 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 323.42µs ago: executing program 2 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 9 (id=4447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 167.303739][ T29] audit: type=1326 audit(1768379868.102:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 167.328288][ T29] audit: type=1326 audit(1768379868.112:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 167.352826][ T29] audit: type=1326 audit(1768379868.112:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 167.568575][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2527'. [ 167.637532][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'. [ 167.667210][ T29] audit: type=1326 audit(1768379868.642:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 167.723371][ T29] audit: type=1326 audit(1768379868.642:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 167.763867][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2534'. [ 167.773050][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2534'. [ 167.817453][T10546] loop6: detected capacity change from 0 to 128 [ 167.926121][T10555] loop6: detected capacity change from 0 to 512 [ 167.951616][T10555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 167.981545][T10567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10567 comm=syz.3.2543 [ 168.003341][T10555] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.020144][T10567] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 168.030950][T10555] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 168.051956][T10578] loop9: detected capacity change from 0 to 128 [ 168.066876][T10567] bond2: (slave bridge2): making interface the new active one [ 168.077606][T10555] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 168.085258][T10555] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.2539: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 168.105907][T10555] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2539: couldn't read orphan inode 13 (err -117) [ 168.118783][T10555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.135842][T10555] capability: warning: `syz.6.2539' uses 32-bit capabilities (legacy support in use) [ 168.136743][T10567] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 168.168373][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.258089][T10593] vhci_hcd vhci_hcd.0: invalid port number 23 [ 168.265161][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2556'. [ 168.308556][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2556'. [ 168.435400][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'. [ 168.551578][T10626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.592696][T10631] loop5: detected capacity change from 0 to 128 [ 168.593663][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 168.656273][T10645] macvtap1: entered promiscuous mode [ 168.661731][T10645] erspan0: entered promiscuous mode [ 168.667031][T10645] macvtap1: entered allmulticast mode [ 168.673496][T10645] erspan0: entered allmulticast mode [ 168.696717][T10645] erspan0: left allmulticast mode [ 168.701908][T10645] erspan0: left promiscuous mode [ 168.708754][T10649] loop9: detected capacity change from 0 to 128 [ 168.743343][T10653] loop5: detected capacity change from 0 to 1024 [ 168.754181][T10653] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2579: bad orphan inode 134217728 [ 168.785490][T10653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.886032][T10662] lo speed is unknown, defaulting to 1000 [ 169.011881][T10668] loop2: detected capacity change from 0 to 128 [ 169.053272][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.340831][T10693] loop3: detected capacity change from 0 to 128 [ 169.431053][T10703] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 169.613295][T10727] netlink: 'syz.6.2604': attribute type 21 has an invalid length. [ 169.621733][T10727] netlink: 'syz.6.2604': attribute type 1 has an invalid length. [ 169.629511][T10727] __nla_validate_parse: 9 callbacks suppressed [ 169.629529][T10727] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2604'. [ 169.668677][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2605'. [ 169.684789][T10733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10733 comm=syz.6.2615 [ 169.698452][T10733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10733 comm=syz.6.2615 [ 169.738784][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2605'. [ 169.778119][T10738] netlink: 'syz.9.2618': attribute type 2 has an invalid length. [ 169.786878][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2618'. [ 169.796491][T10738] netlink: 'syz.9.2618': attribute type 2 has an invalid length. [ 169.804295][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2618'. [ 169.809738][T10737] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 169.822293][T10739] loop5: detected capacity change from 0 to 128 [ 169.909080][T10749] syzkaller1: entered promiscuous mode [ 169.914759][T10749] syzkaller1: entered allmulticast mode [ 170.317389][T10759] EXT4-fs: inline encryption not supported [ 170.324279][T10759] EXT4-fs: Ignoring removed orlov option [ 170.366306][T10759] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.388097][T10767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 170.414091][T10759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 170.422524][T10767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.440121][T10759] System zones: 0-1, 3-12 [ 170.444717][T10767] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 170.559939][T10759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.573562][T10767] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 170.581333][T10767] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.2621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 170.610726][T10767] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2621: couldn't read orphan inode 13 (err -117) [ 170.674817][T10767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.708932][T10783] syzkaller0: entered allmulticast mode [ 170.721308][T10783] syzkaller0: entered promiscuous mode [ 170.738547][T10783] syzkaller0 (unregistering): left allmulticast mode [ 170.745459][T10783] syzkaller0 (unregistering): left promiscuous mode [ 170.782093][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.834032][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 170.843658][T10791] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 170.852349][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 170.865865][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 170.875145][T10791] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 170.879205][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.887838][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 170.979759][T10807] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2639'. [ 171.020468][T10811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 171.028688][T10811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.030564][T10814] EXT4-fs: inline encryption not supported [ 171.039092][T10811] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 171.043245][T10814] EXT4-fs: Ignoring removed orlov option [ 171.056709][T10811] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 171.062507][T10814] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.081183][T10811] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.2641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 171.100692][T10811] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2641: couldn't read orphan inode 13 (err -117) [ 171.102752][T10814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 171.116822][T10811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.121118][T10814] System zones: 0-1, 3-12 [ 171.139698][T10814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.166094][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.280801][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.311733][T10823] lo speed is unknown, defaulting to 1000 [ 171.477420][T10827] netlink: 'syz.5.2645': attribute type 2 has an invalid length. [ 171.486545][T10827] netlink: 'syz.5.2645': attribute type 2 has an invalid length. [ 171.585429][T10835] netlink: 'syz.2.2649': attribute type 29 has an invalid length. [ 171.703171][T10849] set_capacity_and_notify: 4 callbacks suppressed [ 171.703238][T10849] loop9: detected capacity change from 0 to 1024 [ 171.717558][T10849] EXT4-fs: inline encryption not supported [ 171.732071][T10849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.780845][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.934440][T10880] loop6: detected capacity change from 0 to 1024 [ 171.944170][T10880] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2668: bad orphan inode 134217728 [ 171.955545][T10880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.010518][T10886] syzkaller0: entered allmulticast mode [ 172.016406][T10886] syzkaller0: entered promiscuous mode [ 172.023985][T10886] syzkaller0 (unregistering): left allmulticast mode [ 172.031908][T10886] syzkaller0 (unregistering): left promiscuous mode [ 172.237069][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.366864][T10898] netlink: 'syz.2.2674': attribute type 29 has an invalid length. [ 172.488307][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 172.488337][ T29] audit: type=1326 audit(1768379873.462:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.518878][T10912] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.518945][T10912] vhci_hcd vhci_hcd.2: invalid port number 96 [ 172.518965][T10912] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 172.541813][ T29] audit: type=1326 audit(1768379873.462:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.565505][ T29] audit: type=1326 audit(1768379873.472:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.588942][ T29] audit: type=1326 audit(1768379873.472:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.613463][ T29] audit: type=1326 audit(1768379873.472:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.637012][ T29] audit: type=1326 audit(1768379873.472:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.669992][ T29] audit: type=1326 audit(1768379873.642:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.694733][ T29] audit: type=1326 audit(1768379873.642:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 172.697197][T10917] netlink: 'syz.2.2682': attribute type 3 has an invalid length. [ 172.767755][ T29] audit: type=1400 audit(1768379873.742:4920): avc: denied { relabelfrom } for pid=10922 comm="syz.6.2686" name="NETLINK" dev="sockfs" ino=31920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.797412][ T29] audit: type=1400 audit(1768379873.782:4921): avc: denied { relabelto } for pid=10922 comm="syz.6.2686" name="NETLINK" dev="sockfs" ino=31920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 173.374592][T10991] loop2: detected capacity change from 0 to 1024 [ 173.391241][T10991] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2717: bad orphan inode 134217728 [ 173.403019][T10991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.860769][T11039] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.868574][T11039] vhci_hcd vhci_hcd.2: invalid port number 96 [ 173.875725][T11039] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 173.910155][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.107177][T11060] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.233786][T11070] loop9: detected capacity change from 0 to 1024 [ 174.257366][T11070] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2752: bad orphan inode 134217728 [ 174.269986][T11070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.362136][T11084] loop2: detected capacity change from 0 to 1024 [ 174.369174][T11084] EXT4-fs: Ignoring removed bh option [ 174.382383][T11084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.403369][T11084] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.2757: inode #50331648: comm syz.2.2757: iget: illegal inode # [ 174.418340][T11084] EXT4-fs (loop2): Remounting filesystem read-only [ 174.425310][T11084] EXT4-fs warning (device loop2): ext4_xattr_block_set:2199: inode #19: comm syz.2.2757: dec ref error=-30 [ 174.451639][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.576022][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.653374][T11099] netlink: 'syz.9.2763': attribute type 13 has an invalid length. [ 174.667346][T11099] gretap0: refused to change device tx_queue_len [ 174.675199][T11099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.831851][T11111] atomic_op ffff888116c2c128 conn xmit_atomic 0000000000000000 [ 174.894135][T11115] __nla_validate_parse: 11 callbacks suppressed [ 174.894151][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2782'. [ 174.934068][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2782'. [ 174.994808][T11120] loop3: detected capacity change from 0 to 1024 [ 175.023710][T11120] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2773: bad orphan inode 134217728 [ 175.332734][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2781'. [ 175.747499][T11169] xt_connbytes: Forcing CT accounting to be enabled [ 175.775350][T11172] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2793'. [ 175.837215][T11176] loop3: detected capacity change from 0 to 512 [ 175.897045][T11176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 175.992050][T11176] System zones: 0-2, 18-18, 34-34 [ 176.017570][T11176] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2795: bg 0: block 248: padding at end of block bitmap is not set [ 176.083492][T11176] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2795: Failed to acquire dquot type 1 [ 176.101618][T11185] loop9: detected capacity change from 0 to 2048 [ 176.121641][T11187] loop6: detected capacity change from 0 to 1024 [ 176.129798][T11176] EXT4-fs (loop3): 1 truncate cleaned up [ 176.137726][T11187] EXT4-fs: Ignoring removed bh option [ 176.144136][T11176] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.157975][T11185] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 176.177159][T11176] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 176.196276][T11185] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 176.208814][T11185] EXT4-fs (loop9): This should not happen!! Data will be lost [ 176.208814][T11185] [ 176.213624][T11187] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.2799: inode #50331648: comm syz.6.2799: iget: illegal inode # [ 176.221171][T11185] EXT4-fs (loop9): Total free blocks count 0 [ 176.238372][T11185] EXT4-fs (loop9): Free/Dirty block details [ 176.245263][T11185] EXT4-fs (loop9): free_blocks=2415919504 [ 176.251102][T11185] EXT4-fs (loop9): dirty_blocks=48 [ 176.256237][T11185] EXT4-fs (loop9): Block reservation details [ 176.262325][T11185] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 176.273223][T11187] EXT4-fs (loop6): Remounting filesystem read-only [ 176.281283][T11187] EXT4-fs warning (device loop6): ext4_xattr_block_set:2199: inode #19: comm syz.6.2799: dec ref error=-30 [ 176.342018][ T7985] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.354282][ T7985] EXT4-fs (loop9): This should not happen!! Data will be lost [ 176.354282][ T7985] [ 176.595224][T11215] bridge0: entered promiscuous mode [ 176.612737][T11215] bridge0: port 3(macsec1) entered blocking state [ 176.619346][T11215] bridge0: port 3(macsec1) entered disabled state [ 176.628836][T11215] macsec1: entered allmulticast mode [ 176.635316][T11215] bridge0: entered allmulticast mode [ 176.651253][T11215] macsec1: left allmulticast mode [ 176.656534][T11215] bridge0: left allmulticast mode [ 176.667230][T11215] bridge0: left promiscuous mode [ 176.830866][T11212] loop5: detected capacity change from 0 to 8192 [ 177.176478][T11253] loop9: detected capacity change from 0 to 128 [ 177.272220][T11257] netlink: 'syz.3.2830': attribute type 13 has an invalid length. [ 177.284896][T11257] gretap0: refused to change device tx_queue_len [ 177.293453][T11257] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.342493][T11259] loop9: detected capacity change from 0 to 512 [ 177.360090][T11261] bridge0: port 3(macsec1) entered blocking state [ 177.366682][T11261] bridge0: port 3(macsec1) entered disabled state [ 177.374355][T11259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 177.390009][T11259] System zones: 0-2, 18-18, 34-34 [ 177.396423][T11259] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2841: bg 0: block 248: padding at end of block bitmap is not set [ 177.401538][T11261] macsec1: entered allmulticast mode [ 177.416199][T11261] bridge0: entered allmulticast mode [ 177.423145][T11259] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2841: Failed to acquire dquot type 1 [ 177.435064][T11261] macsec1: left allmulticast mode [ 177.436053][T11259] EXT4-fs (loop9): 1 truncate cleaned up [ 177.442517][T11261] bridge0: left allmulticast mode [ 177.447506][T11259] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.493270][T11259] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.549392][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 177.549408][ T29] audit: type=1326 audit(1768379878.522:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.581327][ T29] audit: type=1326 audit(1768379878.562:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.605068][ T29] audit: type=1326 audit(1768379878.562:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.629627][ T29] audit: type=1326 audit(1768379878.562:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.654319][ T29] audit: type=1326 audit(1768379878.562:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.679022][ T29] audit: type=1326 audit(1768379878.562:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.703692][ T29] audit: type=1326 audit(1768379878.562:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.727915][ T29] audit: type=1326 audit(1768379878.562:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.752674][ T29] audit: type=1326 audit(1768379878.562:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 177.776425][ T29] audit: type=1326 audit(1768379878.562:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 178.001979][T11295] loop2: detected capacity change from 0 to 1024 [ 178.009352][T11295] EXT4-fs: test_dummy_encryption option not supported [ 178.036815][T11300] loop9: detected capacity change from 0 to 1024 [ 178.051470][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 178.072630][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 178.082586][T11300] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2849: bad orphan inode 134217728 [ 178.434853][T11327] loop5: detected capacity change from 0 to 1024 [ 178.441925][T11327] EXT4-fs: Ignoring removed bh option [ 178.457884][T11327] EXT4-fs error (device loop5): ext4_xattr_block_find:1878: inode #15: comm syz.5.2857: corrupted xattr block 113: invalid header [ 178.472770][T11327] EXT4-fs (loop5): Remounting filesystem read-only [ 178.503627][T11334] loop9: detected capacity change from 0 to 1024 [ 178.512437][T11334] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2870: bad orphan inode 134217728 [ 178.633512][T11347] loop2: detected capacity change from 0 to 512 [ 178.654771][T11347] EXT4-fs: Ignoring removed oldalloc option [ 178.660804][T11347] EXT4-fs: inline encryption not supported [ 178.672391][T11347] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.726873][T11347] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2864: bg 0: block 64: padding at end of block bitmap is not set [ 178.771306][T11347] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2864: Failed to acquire dquot type 0 [ 178.797206][T11347] EXT4-fs (loop2): 1 truncate cleaned up [ 178.942361][T11363] loop9: detected capacity change from 0 to 1024 [ 178.957918][T11363] EXT4-fs: Ignoring removed bh option [ 178.968206][T11366] xt_connbytes: Forcing CT accounting to be enabled [ 179.015478][T11363] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.2872: inode #50331648: comm syz.9.2872: iget: illegal inode # [ 179.035048][T11363] EXT4-fs (loop9): Remounting filesystem read-only [ 179.047980][T11373] loop5: detected capacity change from 0 to 128 [ 179.069759][T11363] EXT4-fs warning (device loop9): ext4_xattr_block_set:2199: inode #19: comm syz.9.2872: dec ref error=-30 [ 179.099066][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2877'. [ 179.311480][T11383] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 179.329121][T11383] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 179.342571][T11383] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.342571][T11383] [ 179.352485][T11383] EXT4-fs (loop6): Total free blocks count 0 [ 179.358550][T11383] EXT4-fs (loop6): Free/Dirty block details [ 179.364525][T11383] EXT4-fs (loop6): free_blocks=2415919504 [ 179.371295][T11383] EXT4-fs (loop6): dirty_blocks=48 [ 179.376457][T11383] EXT4-fs (loop6): Block reservation details [ 179.382524][T11383] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 179.418165][T11394] EXT4-fs: test_dummy_encryption option not supported [ 179.432089][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 179.442847][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 179.513212][ T1525] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 179.525506][ T1525] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.525506][ T1525] [ 179.542533][T11401] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 179.660854][T11413] xt_connbytes: Forcing CT accounting to be enabled [ 180.011020][T11432] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.024195][T11430] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.041894][T11432] EXT4-fs (loop3): mount failed [ 180.050751][T11430] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 180.063266][T11430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.063266][T11430] [ 180.073090][T11430] EXT4-fs (loop2): Total free blocks count 0 [ 180.079118][T11430] EXT4-fs (loop2): Free/Dirty block details [ 180.086424][T11430] EXT4-fs (loop2): free_blocks=2415919504 [ 180.092460][T11430] EXT4-fs (loop2): dirty_blocks=48 [ 180.097608][T11430] EXT4-fs (loop2): Block reservation details [ 180.103746][T11430] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 180.164009][ T7985] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 180.176477][ T7985] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.176477][ T7985] [ 180.193468][T11446] atomic_op ffff888120756128 conn xmit_atomic 0000000000000000 [ 180.194194][ T9547] EXT4-fs unmount: 23 callbacks suppressed [ 180.208780][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2906'. [ 180.231947][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2906'. [ 180.408125][T11476] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2919: bad orphan inode 15 [ 180.418951][T11476] ext4_test_bit(bit=14, block=5) = 0 [ 180.436029][T11476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.464850][T11476] EXT4-fs (loop2): can't disable delalloc during remount [ 180.500865][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'. [ 180.514872][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.547905][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'. [ 180.865703][T11496] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 180.879198][T11499] EXT4-fs: Ignoring removed oldalloc option [ 180.896570][T11499] ext4: Unknown parameter 'nouser_xattr' [ 181.080596][T11519] lo speed is unknown, defaulting to 1000 [ 181.198896][T11527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 181.403102][ T8021] bio_check_eod: 40 callbacks suppressed [ 181.403117][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.403117][ T8021] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 181.463669][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.463669][ T8021] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 181.518110][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.518110][ T8021] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 181.533619][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.533619][ T8021] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 181.547909][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.547909][ T8021] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 181.583971][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.583971][ T8021] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 181.610404][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.610404][ T8021] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 181.625235][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.625235][ T8021] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 181.639089][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.639089][ T8021] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 181.653613][ T8021] kworker/u8:67: attempt to access beyond end of device [ 181.653613][ T8021] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 181.828817][T11576] atomic_op ffff88811b5bd528 conn xmit_atomic 0000000000000000 [ 181.895263][T11572] lo speed is unknown, defaulting to 1000 [ 182.085494][T11597] set_capacity_and_notify: 7 callbacks suppressed [ 182.085513][T11597] loop2: detected capacity change from 0 to 764 [ 182.166614][T11604] loop5: detected capacity change from 0 to 512 [ 182.192617][T11604] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2977: bad orphan inode 15 [ 182.205506][T11610] atomic_op ffff88811b5bd128 conn xmit_atomic 0000000000000000 [ 182.223523][T11604] ext4_test_bit(bit=14, block=5) = 0 [ 182.229317][T11604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.251151][T11604] EXT4-fs (loop5): can't disable delalloc during remount [ 182.271186][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 182.292155][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.312597][T11618] loop6: detected capacity change from 0 to 128 [ 182.510129][T11635] netlink: 284 bytes leftover after parsing attributes in process `syz.9.2990'. [ 182.527372][T11635] netlink: 'syz.9.2990': attribute type 9 has an invalid length. [ 182.535281][T11635] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2990'. [ 182.544381][T11635] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2990'. [ 182.687401][T11656] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3001'. [ 182.838810][T11671] team0: Device gtp0 is of different type [ 182.901334][T11677] loop9: detected capacity change from 0 to 128 [ 182.937287][T11679] loop3: detected capacity change from 0 to 512 [ 182.948588][T11679] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3008: bad orphan inode 15 [ 182.980900][T11679] ext4_test_bit(bit=14, block=5) = 0 [ 182.986963][T11679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.020502][T11679] EXT4-fs (loop3): can't disable delalloc during remount [ 183.068317][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.110200][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 183.110220][ T29] audit: type=1326 audit(1768379884.092:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.150265][ T29] audit: type=1326 audit(1768379884.122:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.174945][ T29] audit: type=1326 audit(1768379884.122:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.198697][ T29] audit: type=1326 audit(1768379884.122:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.223414][ T29] audit: type=1326 audit(1768379884.122:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.246966][ T29] audit: type=1326 audit(1768379884.122:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.271554][ T29] audit: type=1326 audit(1768379884.122:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.295304][ T29] audit: type=1326 audit(1768379884.122:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.319073][ T29] audit: type=1326 audit(1768379884.122:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4ced21667 code=0x7ffc0000 [ 183.343488][ T29] audit: type=1326 audit(1768379884.122:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.5.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 183.394023][T11712] loop3: detected capacity change from 0 to 1024 [ 183.413682][T11712] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3023: bad orphan inode 134217728 [ 183.415162][T11713] lo speed is unknown, defaulting to 1000 [ 183.438930][T11712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.596279][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3027'. [ 183.955022][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.979972][T11748] wg2: entered promiscuous mode [ 183.984915][T11748] wg2: entered allmulticast mode [ 184.127349][T11771] loop2: detected capacity change from 0 to 1024 [ 184.152839][T11771] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3047: bad orphan inode 134217728 [ 184.167929][T11771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.288239][T11789] team0: Port device gtp0 added [ 184.373416][T11793] vhci_hcd vhci_hcd.4: default hub control req: 0015 v0001 i0003 l0 [ 184.483249][ T3492] kernel write not supported for file bpf-prog (pid: 3492 comm: kworker/0:5) [ 184.573396][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.594144][T11808] netlink: 'syz.9.3064': attribute type 29 has an invalid length. [ 184.652782][T11814] netlink: 'syz.3.3066': attribute type 13 has an invalid length. [ 184.833629][ T8013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.859590][ T8013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.903178][ T8013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.917269][T11839] loop3: detected capacity change from 0 to 1024 [ 184.922554][ T8013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.961916][T11839] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3076: bad orphan inode 134217728 [ 185.014318][T11839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.328585][T11856] __nla_validate_parse: 10 callbacks suppressed [ 185.328606][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 185.363731][T11853] lo speed is unknown, defaulting to 1000 [ 185.383040][T11857] wg2: entered promiscuous mode [ 185.387958][T11857] wg2: entered allmulticast mode [ 185.490142][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.591861][T11874] team0: Device gtp0 is of different type [ 185.695384][T11883] netlink: 'syz.5.3091': attribute type 29 has an invalid length. [ 185.779181][T11893] wg2: entered promiscuous mode [ 185.784202][T11893] wg2: entered allmulticast mode [ 185.843781][T11900] vlan2: entered allmulticast mode [ 185.849152][T11900] dummy0: entered allmulticast mode [ 186.066486][T11925] wg2: entered promiscuous mode [ 186.072650][T11925] wg2: entered allmulticast mode [ 186.254631][T11934] lo speed is unknown, defaulting to 1000 [ 186.382713][T11942] SELinux: failed to load policy [ 186.565212][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 186.874129][T11977] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.892190][T11977] vhci_hcd vhci_hcd.2: invalid port number 96 [ 186.898340][T11977] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 187.153367][T12006] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3141'. [ 187.393670][T12027] netlink: 'syz.6.3150': attribute type 3 has an invalid length. [ 187.409858][T12029] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 187.500338][T12034] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3152'. [ 187.853279][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 187.862350][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 187.965821][T12051] loop2: detected capacity change from 0 to 7 [ 188.253240][T12068] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3170'. [ 188.373293][T12084] SELinux: failed to load policy [ 188.396196][T12082] bridge0: port 3(macsec1) entered blocking state [ 188.403684][T12082] bridge0: port 3(macsec1) entered disabled state [ 188.413494][T12082] macsec1: entered allmulticast mode [ 188.423158][T12082] macsec1: left allmulticast mode [ 188.492615][T12091] bond_slave_1: mtu less than device minimum [ 188.525398][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 188.525416][ T29] audit: type=1400 audit(1768379889.502:5389): avc: denied { mount } for pid=12095 comm="syz.9.3182" name="/" dev="hugetlbfs" ino=35544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 188.598098][ T29] audit: type=1400 audit(1768379889.562:5390): avc: denied { write } for pid=12100 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.632048][T12105] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3187'. [ 188.644585][T12104] netlink: 'syz.9.3186': attribute type 13 has an invalid length. [ 188.694131][T12110] netlink: 'syz.2.3188': attribute type 3 has an invalid length. [ 188.722072][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.729317][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.744101][T12112] SELinux: failed to load policy [ 188.769375][ T29] audit: type=1326 audit(1768379889.742:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.794030][ T29] audit: type=1326 audit(1768379889.742:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.818544][ T29] audit: type=1326 audit(1768379889.742:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.842930][ T29] audit: type=1326 audit(1768379889.742:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.906348][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.917063][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.944646][ T29] audit: type=1326 audit(1768379889.742:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.969487][ T29] audit: type=1326 audit(1768379889.752:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 188.994301][ T29] audit: type=1326 audit(1768379889.752:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 189.018328][ T29] audit: type=1326 audit(1768379889.752:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.6.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff26663f749 code=0x7ffc0000 [ 189.049919][T12125] loop2: detected capacity change from 0 to 1024 [ 189.058911][T12125] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3196: bad orphan inode 134217728 [ 189.071684][T12125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.105165][ T8013] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.115225][ T8013] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.121853][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.126129][ T8013] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.160797][ T8013] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.313265][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3204'. [ 189.313511][T12149] SELinux: failed to load policy [ 189.868499][T12172] netlink: 'syz.2.3212': attribute type 13 has an invalid length. [ 189.955380][T12172] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.962681][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.020669][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.033130][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.233597][ T3686] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.250365][ T3686] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.271263][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3216'. [ 190.280443][ T3686] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.304618][ T3686] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.430562][T12198] netlink: 'syz.9.3222': attribute type 1 has an invalid length. [ 190.531214][T12202] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l65535 [ 190.597206][T12214] vlan2: entered allmulticast mode [ 190.603449][T12214] dummy0: entered allmulticast mode [ 190.680304][T12218] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.687673][T12218] vhci_hcd vhci_hcd.2: invalid port number 96 [ 190.694749][T12218] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 190.782921][T12229] netlink: 'syz.5.3237': attribute type 1 has an invalid length. [ 190.873370][T12241] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3242'. [ 191.054550][T12255] loop9: detected capacity change from 0 to 1024 [ 191.063680][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3249'. [ 191.085487][T12255] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3247: bad orphan inode 134217728 [ 191.118172][T12255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.172054][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.455437][T12293] netlink: 'syz.3.3262': attribute type 3 has an invalid length. [ 191.498753][T12298] loop3: detected capacity change from 0 to 1024 [ 191.508894][T12298] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3264: bad orphan inode 134217728 [ 191.520750][T12298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.539314][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3265'. [ 191.575109][T12305] SELinux: failed to load policy [ 191.587023][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.621693][T12313] loop3: detected capacity change from 0 to 512 [ 191.628934][T12313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.640700][T12313] EXT4-fs (loop3): 1 truncate cleaned up [ 191.646848][T12313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.677088][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.708487][T12323] vlan2: entered allmulticast mode [ 191.713897][T12323] dummy0: entered allmulticast mode [ 191.772515][T12328] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3277'. [ 191.821651][T12334] loop6: detected capacity change from 0 to 512 [ 191.828572][T12334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.838527][T12334] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3280: invalid block [ 191.852333][T12334] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3280: invalid indirect mapped block 4294967295 (level 1) [ 191.869291][T12334] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3280: invalid indirect mapped block 4294967295 (level 1) [ 191.884901][T12334] EXT4-fs (loop6): 2 truncates cleaned up [ 191.891267][T12334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.908263][T12337] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 191.925886][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.951694][T12341] loop6: detected capacity change from 0 to 1024 [ 191.960267][T12341] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3282: bad orphan inode 134217728 [ 191.972768][T12341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.005939][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.025196][T12347] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3284'. [ 192.035192][T12348] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3285'. [ 192.077485][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3286'. [ 192.135912][T12365] loop6: detected capacity change from 0 to 128 [ 192.144453][T12365] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.158208][T12365] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.158218][T12368] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3289'. [ 192.160681][T12365] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.3293: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 192.198714][T12365] EXT4-fs (loop6): Remounting filesystem read-only [ 192.215255][ T4568] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.243986][T12372] SELinux: failed to load policy [ 192.258728][T12370] SELinux: failed to load policy [ 192.358850][T12383] rdma_op ffff888116c2e980 conn xmit_rdma 0000000000000000 [ 192.468032][T12390] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3303'. [ 192.497603][T12392] loop5: detected capacity change from 0 to 128 [ 192.504214][T12392] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 192.514532][T12392] loop5: detected capacity change from 0 to 128 [ 192.523702][T12392] bio_check_eod: 162 callbacks suppressed [ 192.523718][T12392] syz.5.3304: attempt to access beyond end of device [ 192.523718][T12392] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 192.544093][T12392] syz.5.3304: attempt to access beyond end of device [ 192.544093][T12392] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 192.560574][T12392] syz.5.3304: attempt to access beyond end of device [ 192.560574][T12392] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 192.574292][T12392] buffer_io_error: 6 callbacks suppressed [ 192.574309][T12392] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 192.589517][T12393] syz.5.3304: attempt to access beyond end of device [ 192.589517][T12393] loop5: rw=8912896, sector=138, nr_sectors = 16 limit=128 [ 192.603533][T12393] syz.5.3304: attempt to access beyond end of device [ 192.603533][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.618400][T12393] syz.5.3304: attempt to access beyond end of device [ 192.618400][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.632268][T12393] syz.5.3304: attempt to access beyond end of device [ 192.632268][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.646959][T12393] syz.5.3304: attempt to access beyond end of device [ 192.646959][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.660790][T12393] syz.5.3304: attempt to access beyond end of device [ 192.660790][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.675539][T12393] syz.5.3304: attempt to access beyond end of device [ 192.675539][T12393] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 192.788534][T12397] SELinux: failed to load policy [ 192.965736][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3315'. [ 192.975833][T12415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.983842][T12414] loop3: detected capacity change from 0 to 2048 [ 192.984925][T12415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.044590][T12414] Alternate GPT is invalid, using primary GPT. [ 193.050985][T12414] loop3: p2 p3 p7 [ 193.225506][T12435] loop9: detected capacity change from 0 to 512 [ 193.242294][T12435] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 193.267758][T12435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 193.276400][T12435] System zones: 1-12 [ 193.281676][T12435] EXT4-fs (loop9): 1 truncate cleaned up [ 193.288112][T12435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.417689][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.437802][T12458] pimreg: entered allmulticast mode [ 193.461756][T12458] pimreg: left allmulticast mode [ 193.556510][T12468] SELinux: failed to load policy [ 193.852116][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 193.852131][ T29] audit: type=1326 audit(1768379894.832:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 193.910515][ T29] audit: type=1326 audit(1768379894.892:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 193.934860][ T29] audit: type=1326 audit(1768379894.892:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 193.959270][ T29] audit: type=1326 audit(1768379894.892:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 193.991302][T12498] SELinux: failed to load policy [ 193.996588][ T29] audit: type=1326 audit(1768379894.892:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.021202][ T29] audit: type=1326 audit(1768379894.892:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.044960][ T29] audit: type=1326 audit(1768379894.892:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.069393][ T29] audit: type=1326 audit(1768379894.972:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.094073][ T29] audit: type=1326 audit(1768379894.972:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.117772][ T29] audit: type=1326 audit(1768379894.972:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 194.241540][T12513] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 194.270079][ T52] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.278886][ T52] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.310600][ T52] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.323374][T12524] loop2: detected capacity change from 0 to 512 [ 194.331232][ T3686] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.367370][T12524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.404793][T12524] EXT4-fs (loop2): 1 truncate cleaned up [ 194.428497][T12524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.466195][T12539] pimreg: entered allmulticast mode [ 194.487233][T12539] pimreg: left allmulticast mode [ 194.502488][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.582892][T12547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12547 comm=syz.5.3372 [ 194.651107][T12556] netlink: 'syz.9.3378': attribute type 3 has an invalid length. [ 194.658896][T12556] netlink: 'syz.9.3378': attribute type 1 has an invalid length. [ 194.764590][T12568] loop9: detected capacity change from 0 to 512 [ 194.779744][T12568] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 194.793443][T12568] EXT4-fs (loop9): 1 truncate cleaned up [ 194.802488][T12568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.829690][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.848623][T12573] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 194.908437][T12579] loop2: detected capacity change from 0 to 512 [ 194.916738][T12579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.928555][T12579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 194.936539][T12579] System zones: 1-12 [ 194.941491][T12579] EXT4-fs (loop2): 1 truncate cleaned up [ 194.949846][T12579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.018481][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.060764][T12587] macsec1: entered promiscuous mode [ 195.066047][T12587] bridge0: entered promiscuous mode [ 195.072129][T12587] bridge0: port 3(macsec1) entered blocking state [ 195.078641][T12587] bridge0: port 3(macsec1) entered disabled state [ 195.085417][T12587] macsec1: entered allmulticast mode [ 195.091707][T12587] bridge0: entered allmulticast mode [ 195.097633][T12587] macsec1: left allmulticast mode [ 195.102728][T12587] bridge0: left allmulticast mode [ 195.108555][T12587] bridge0: left promiscuous mode [ 195.190888][T12589] loop9: detected capacity change from 0 to 512 [ 195.210350][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3403: corrupted inode contents [ 195.226410][T12597] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 195.232730][T12589] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #3: comm syz.9.3403: mark_inode_dirty error [ 195.234916][T12597] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 195.253742][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3403: corrupted inode contents [ 195.277513][T12589] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3403: mark_inode_dirty error [ 195.291275][T12589] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3403: Failed to acquire dquot type 0 [ 195.305031][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3403: corrupted inode contents [ 195.328551][T12589] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.3403: mark_inode_dirty error [ 195.340276][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3403: corrupted inode contents [ 195.353406][T12589] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3403: mark_inode_dirty error [ 195.365379][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3403: corrupted inode contents [ 195.378000][T12589] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 195.407844][T12589] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3403: corrupted inode contents [ 195.423255][T12607] netlink: 'syz.5.3400': attribute type 1 has an invalid length. [ 195.431431][T12589] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.3403: mark_inode_dirty error [ 195.443296][T12589] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 195.447827][T12601] SELinux: failed to load policy [ 195.456378][T12589] EXT4-fs (loop9): 1 truncate cleaned up [ 195.469886][T12589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.489207][T12607] bond3: (slave geneve3): making interface the new active one [ 195.497204][T12607] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 195.509047][ T8013] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.519537][T12589] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.520956][ T8013] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.550514][ T8013] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.559402][ T8013] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.571300][T12589] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.597757][T12612] loop5: detected capacity change from 0 to 512 [ 195.605998][T12612] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 195.646762][T12612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 195.654852][T12612] System zones: 1-12 [ 195.662651][T12612] EXT4-fs (loop5): 1 truncate cleaned up [ 195.668859][T12612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.708577][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.727651][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.913133][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.950658][T12646] __nla_validate_parse: 10 callbacks suppressed [ 195.950677][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3419'. [ 196.022896][T12648] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 196.032424][T12640] SELinux: failed to load policy [ 196.085081][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3424'. [ 196.294299][T12693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12693 comm=syz.6.3441 [ 196.375374][T12705] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 196.383325][T12705] netlink: 'syz.3.3447': attribute type 1 has an invalid length. [ 196.391979][T12705] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3447'. [ 196.451746][T12714] loop3: detected capacity change from 0 to 1024 [ 196.461567][T12714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.489009][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.563863][T12724] netlink: 'syz.2.3454': attribute type 13 has an invalid length. [ 197.032744][T12756] loop3: detected capacity change from 0 to 512 [ 197.060900][T12756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.081570][T12758] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 197.089922][T12758] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 197.122220][T12756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 197.145289][T12756] System zones: 1-12 [ 197.162167][T12756] EXT4-fs (loop3): 1 truncate cleaned up [ 197.168321][T12756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.255091][T12772] loop5: detected capacity change from 0 to 512 [ 197.304247][T12772] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 197.334260][T12772] EXT4-fs (loop5): invalid journal inode [ 197.343924][T12772] EXT4-fs (loop5): can't get journal size [ 197.365593][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.376928][T12772] EXT4-fs (loop5): 1 truncate cleaned up [ 197.396076][T12772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.445191][T12790] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 197.447205][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.453480][T12790] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 197.536449][T12796] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 197.687218][T12805] SELinux: failed to load policy [ 197.734051][T12810] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.757982][T12810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 197.773655][T12810] System zones: 1-12 [ 197.778859][T12810] EXT4-fs (loop6): 1 truncate cleaned up [ 197.785430][T12810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.821705][T12815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12815 comm=syz.2.3495 [ 197.899407][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.941321][T12829] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 197.949617][T12829] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 197.976105][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3504'. [ 197.996655][T12835] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3505'. [ 198.005936][T12835] unsupported nla_type 65024 [ 198.020141][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3506'. [ 198.040945][T12840] set_capacity_and_notify: 1 callbacks suppressed [ 198.040960][T12840] loop6: detected capacity change from 0 to 512 [ 198.091487][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.3507: corrupted inode contents [ 198.115425][T12851] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3513'. [ 198.147462][T12840] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.3507: mark_inode_dirty error [ 198.159318][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.3507: corrupted inode contents [ 198.190467][T12840] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3507: mark_inode_dirty error [ 198.206628][T12840] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3507: Failed to acquire dquot type 0 [ 198.237446][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3507: corrupted inode contents [ 198.261257][T12840] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.3507: mark_inode_dirty error [ 198.273268][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3507: corrupted inode contents [ 198.297593][T12840] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3507: mark_inode_dirty error [ 198.313391][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3507: corrupted inode contents [ 198.325817][T12840] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 198.334766][T12840] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3507: corrupted inode contents [ 198.359535][T12840] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.3507: mark_inode_dirty error [ 198.386656][T12840] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 198.396588][T12840] EXT4-fs (loop6): 1 truncate cleaned up [ 198.402819][T12840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.417930][T12840] ext4 filesystem being mounted at /643/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.429917][T12840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.460465][T12879] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 198.501865][T12879] bond3: (slave geneve3): making interface the new active one [ 198.509993][T12879] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 198.518773][ T8021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.549486][ T8021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.563645][ T8021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.591685][ T8021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.615153][T12888] loop9: detected capacity change from 0 to 7 [ 198.621616][T12888] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.629549][T12888] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.637582][T12888] loop9: unable to read partition table [ 198.645997][T12888] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 198.645997][T12888] ) failed (rc=-5) [ 198.683273][T12898] tipc: Started in network mode [ 198.688263][T12898] tipc: Node identity ac14140f, cluster identity 4711 [ 198.696088][T12898] tipc: New replicast peer: 255.255.255.255 [ 198.702210][T12898] tipc: Enabled bearer , priority 10 [ 198.747262][T12904] loop2: detected capacity change from 0 to 512 [ 198.757711][T12904] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3537: inode has both inline data and extents flags [ 198.771237][T12904] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3537: couldn't read orphan inode 15 (err -117) [ 198.784710][T12904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.830593][T12911] loop5: detected capacity change from 0 to 128 [ 198.838782][T12911] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.852270][T12911] ext4 filesystem being mounted at /735/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.866103][T12911] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.3540: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 198.887254][T12911] EXT4-fs (loop5): Remounting filesystem read-only [ 198.905417][ T4006] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.928542][T12914] netlink: 'syz.5.3541': attribute type 29 has an invalid length. [ 199.499577][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.499974][ T3837] Bluetooth: hci0: command 0x1003 tx timeout [ 199.643582][T12934] IPVS: Error connecting to the multicast addr [ 199.666705][T12937] netlink: 'syz.6.3553': attribute type 1 has an invalid length. [ 199.681863][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.688557][T12937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.691836][T12937] bond2: (slave batadv0): making interface the new active one [ 199.715737][T12937] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 199.732274][ T10] tipc: Node number set to 2886997007 [ 199.745276][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3553'. [ 199.769518][T12937] bond2 (unregistering): (slave batadv0): Releasing active interface [ 199.800755][T12937] bond2 (unregistering): Released all slaves [ 199.988290][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3562'. [ 199.999082][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3563'. [ 200.101520][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 200.101538][ T29] audit: type=1326 audit(1768379901.082:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.150525][ T29] audit: type=1326 audit(1768379901.092:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.175039][ T29] audit: type=1326 audit(1768379901.092:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.198657][ T29] audit: type=1326 audit(1768379901.112:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.223554][ T29] audit: type=1326 audit(1768379901.112:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.247104][ T29] audit: type=1326 audit(1768379901.112:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.271571][ T29] audit: type=1326 audit(1768379901.112:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.295159][ T29] audit: type=1326 audit(1768379901.112:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.319647][ T29] audit: type=1326 audit(1768379901.112:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.343280][ T29] audit: type=1326 audit(1768379901.112:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.5.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ced1f749 code=0x7ffc0000 [ 200.386794][T12983] netlink: 'syz.6.3570': attribute type 1 has an invalid length. [ 200.411180][T12983] bond2: (slave geneve3): making interface the new active one [ 200.419160][T12983] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 200.428981][ T7984] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.438025][ T7984] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.446977][ T7984] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.457209][ T7984] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.703276][T13011] loop9: detected capacity change from 0 to 7 [ 200.709804][T13011] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.717724][T13011] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.725644][T13011] loop9: unable to read partition table [ 200.732274][T13011] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 200.732274][T13011] ) failed (rc=-5) [ 200.759225][T13015] program syz.9.3584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.819353][T13024] tipc: Started in network mode [ 200.824318][T13024] tipc: Node identity 2a85d4f370d2, cluster identity 4711 [ 200.832540][T13024] tipc: Enabled bearer , priority 0 [ 200.842973][T13024] tipc: Disabling bearer [ 201.162162][T13044] loop5: detected capacity change from 0 to 256 [ 201.364703][T13059] SELinux: failed to load policy [ 201.559014][T13082] loop9: detected capacity change from 0 to 512 [ 201.566101][T13082] EXT4-fs: Ignoring removed oldalloc option [ 201.572877][T13082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.590922][T13082] EXT4-fs (loop9): too many log groups per flexible block group [ 201.598946][T13082] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 201.606041][T13082] EXT4-fs (loop9): mount failed [ 201.636335][T13090] netlink: 'syz.9.3615': attribute type 1 has an invalid length. [ 201.659348][T13090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.669003][T13090] bond1: (slave batadv0): making interface the new active one [ 201.679812][T13090] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 201.694961][T13090] __nla_validate_parse: 3 callbacks suppressed [ 201.695010][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3615'. [ 201.712193][T13090] bond1 (unregistering): (slave batadv0): Releasing active interface [ 201.722111][T13090] bond1 (unregistering): Released all slaves [ 201.875905][T13108] netlink: 'syz.2.3623': attribute type 30 has an invalid length. [ 202.213966][T13151] loop5: detected capacity change from 0 to 128 [ 202.279766][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 202.326146][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 202.405434][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3652'. [ 202.421914][T13179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.438336][T13179] wireguard0: entered promiscuous mode [ 202.444903][T13179] wireguard0: entered allmulticast mode [ 202.460516][T13179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.468757][T13179] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 202.481624][T13179] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 202.504804][T13188] program syz.6.3655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.542532][ T409] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.617641][T13209] geneve4: entered promiscuous mode [ 202.623914][T13209] geneve4: entered allmulticast mode [ 202.630043][ T409] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.638915][ T409] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.647775][ T409] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.657927][ T409] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.692737][T13214] 9p: Bad value for 'rfdno' [ 202.717134][T13217] program syz.3.3668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.818672][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3674'. [ 202.874407][T13238] lo speed is unknown, defaulting to 1000 [ 202.978376][T13254] netlink: 'syz.3.3685': attribute type 1 has an invalid length. [ 203.002116][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.011545][T13254] bond4: (slave batadv0): making interface the new active one [ 203.020389][T13254] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 203.035044][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3685'. [ 203.045196][T13254] bond4 (unregistering): (slave batadv0): Releasing active interface [ 203.055622][T13254] bond4 (unregistering): Released all slaves [ 203.358252][T13290] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 203.390808][T13290] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.404599][T13290] bond1: (slave batadv1): making interface the new active one [ 203.413471][T13295] netlink: 'syz.3.3700': attribute type 1 has an invalid length. [ 203.421365][T13295] netlink: 'syz.3.3700': attribute type 4 has an invalid length. [ 203.429157][T13295] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3700'. [ 203.451202][T13290] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 203.459047][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 203.475190][T13297] bond1 (unregistering): (slave batadv1): Releasing active interface [ 203.526486][T13303] loop3: detected capacity change from 0 to 512 [ 203.543223][T13297] bond1 (unregistering): Released all slaves [ 203.568590][T13303] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3703: inode has both inline data and extents flags [ 203.603147][T13303] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3703: couldn't read orphan inode 15 (err -117) [ 203.617403][T13303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.673936][T13314] tipc: Started in network mode [ 203.678876][T13314] tipc: Node identity 0e97b6a9e4ba, cluster identity 4711 [ 203.686316][T13314] tipc: Enabled bearer , priority 0 [ 203.699919][T13314] tipc: Disabling bearer [ 203.842947][T13330] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.3717'. [ 203.860575][T13330] netlink: zone id is out of range [ 203.865809][T13330] netlink: zone id is out of range [ 203.871025][T13330] netlink: zone id is out of range [ 203.900426][T13330] netlink: zone id is out of range [ 203.905680][T13330] netlink: zone id is out of range [ 203.910887][T13330] netlink: zone id is out of range [ 203.916075][T13330] netlink: zone id is out of range [ 203.921379][T13330] netlink: zone id is out of range [ 203.926688][T13330] netlink: zone id is out of range [ 203.932716][T13330] netlink: zone id is out of range [ 204.313577][T13359] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3728'. [ 204.339761][T13359] 0X: renamed from caif0 [ 204.346911][T13359] 0X: entered allmulticast mode [ 204.491452][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.502118][T13372] loop9: detected capacity change from 0 to 1024 [ 204.524418][T13372] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 204.591414][T13382] loop3: detected capacity change from 0 to 512 [ 204.600557][T13382] EXT4-fs: Ignoring removed oldalloc option [ 204.619528][ T3837] Bluetooth: hci0: command 0x1003 tx timeout [ 204.625633][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.639534][T13382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.671831][T13391] loop6: detected capacity change from 0 to 128 [ 204.685448][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 204.695249][T13382] EXT4-fs (loop3): too many log groups per flexible block group [ 204.706328][T13382] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 204.744084][T13382] EXT4-fs (loop3): mount failed [ 204.762390][T13398] netlink: 'syz.5.3743': attribute type 1 has an invalid length. [ 204.801936][T13398] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 204.823896][T13398] bond5: (slave batadv2): making interface the new active one [ 204.845887][T13398] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 204.854941][T13406] loop9: detected capacity change from 0 to 512 [ 204.871997][T13406] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3746: inode has both inline data and extents flags [ 204.902878][T13407] bond5 (unregistering): (slave batadv2): Releasing active interface [ 204.981961][T13407] bond5 (unregistering): Released all slaves [ 205.029664][T13406] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3746: couldn't read orphan inode 15 (err -117) [ 205.060297][T13406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.196872][T13415] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 205.421320][ T5198] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.603970][T13429] loop2: detected capacity change from 0 to 512 [ 205.620767][T13429] EXT4-fs: Ignoring removed oldalloc option [ 205.631648][T13429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.661024][T13429] EXT4-fs (loop2): too many log groups per flexible block group [ 205.690461][T13429] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 205.723555][T13429] EXT4-fs (loop2): mount failed [ 205.745800][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.811289][T13437] netlink: 'syz.6.3759': attribute type 1 has an invalid length. [ 205.854543][T13437] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 205.891982][T13437] bond3: (slave batadv1): making interface the new active one [ 205.933047][T13437] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 205.975914][T13443] bond3 (unregistering): (slave batadv1): Releasing active interface [ 206.028260][T13443] bond3 (unregistering): Released all slaves [ 206.275152][T13475] loop6: detected capacity change from 0 to 512 [ 206.299966][T13475] EXT4-fs: Ignoring removed oldalloc option [ 206.318353][T13475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.344537][T13475] EXT4-fs (loop6): too many log groups per flexible block group [ 206.352665][T13475] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 206.358221][T13482] netlink: 'syz.5.3778': attribute type 1 has an invalid length. [ 206.359896][T13475] EXT4-fs (loop6): mount failed [ 206.401483][T13482] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 206.412011][T13482] bond5: (slave batadv3): making interface the new active one [ 206.424574][T13482] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 206.441477][T13482] bond5 (unregistering): (slave batadv3): Releasing active interface [ 206.458526][T13482] bond5 (unregistering): Released all slaves [ 206.474045][T13490] dvmrp1: entered allmulticast mode [ 206.493449][T13490] dvmrp1: left allmulticast mode [ 206.549118][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 206.549153][ T29] audit: type=1326 audit(1768379907.522:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.2.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 206.588604][ T29] audit: type=1326 audit(1768379907.522:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.2.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 206.613228][ T29] audit: type=1326 audit(1768379907.522:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.2.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 206.636768][ T29] audit: type=1326 audit(1768379907.522:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.2.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 206.661420][ T29] audit: type=1326 audit(1768379907.522:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.2.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 206.708588][T13510] loop5: detected capacity change from 0 to 512 [ 206.721087][T13510] EXT4-fs: Ignoring removed oldalloc option [ 206.724166][ T29] audit: type=1400 audit(1768379907.702:6495): avc: denied { ioctl } for pid=13512 comm="syz.6.3793" path="socket:[40094]" dev="sockfs" ino=40094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.752308][T13510] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.762967][T13510] EXT4-fs (loop5): too many log groups per flexible block group [ 206.771031][T13510] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 206.777896][T13510] EXT4-fs (loop5): mount failed [ 206.793030][ T29] audit: type=1326 audit(1768379907.772:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.9.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 206.817584][ T29] audit: type=1326 audit(1768379907.772:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.9.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 206.846486][ T29] audit: type=1326 audit(1768379907.822:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.9.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 206.871034][ T29] audit: type=1326 audit(1768379907.822:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.9.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 206.961545][T13531] netlink: 'syz.9.3800': attribute type 1 has an invalid length. [ 206.983220][T13531] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.992986][T13531] bond1: (slave batadv1): making interface the new active one [ 207.002368][T13531] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 207.017047][T13531] __nla_validate_parse: 6 callbacks suppressed [ 207.017067][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3800'. [ 207.034683][T13531] bond1 (unregistering): (slave batadv1): Releasing active interface [ 207.043831][T13531] bond1 (unregistering): Released all slaves [ 207.132555][T13549] netlink: 'syz.2.3807': attribute type 3 has an invalid length. [ 207.307627][T13562] loop5: detected capacity change from 0 to 512 [ 207.315474][T13562] EXT4-fs: Ignoring removed oldalloc option [ 207.323267][T13562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.350794][T13562] EXT4-fs (loop5): too many log groups per flexible block group [ 207.358672][T13562] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 207.365759][T13562] EXT4-fs (loop5): mount failed [ 207.500489][ T3837] Bluetooth: hci0: command 0x1003 tx timeout [ 207.506552][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.540650][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3812'. [ 207.550180][T13573] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3825'. [ 207.559538][T13573] 0X: renamed from caif0 [ 207.593897][T13573] 0X: entered allmulticast mode [ 207.650935][T13583] netlink: 'syz.9.3817': attribute type 4 has an invalid length. [ 207.698159][ T7999] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.840846][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3837'. [ 207.884365][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3837'. [ 208.150838][T13629] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 208.825338][T13652] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3854'. [ 208.834710][T13652] 0X: renamed from caif0 [ 208.843333][T13652] 0X: entered allmulticast mode [ 209.124066][T13677] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 209.205251][T13680] dvmrp1: entered allmulticast mode [ 209.229066][T13680] dvmrp1: left allmulticast mode [ 209.362009][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 209.391818][T13678] loop5: detected capacity change from 0 to 32768 [ 209.429991][T13678] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 209.435387][T13678] loop5: p1 start 460800 is beyond EOD, truncated [ 209.442983][T13678] loop5: p2 size 83886080 extends beyond EOD, truncated [ 209.451789][T13678] loop5: p5 start 460800 is beyond EOD, truncated [ 209.458265][T13678] loop5: p6 size 83886080 extends beyond EOD, truncated [ 209.493767][T13694] pim6reg: entered allmulticast mode [ 209.502167][T13694] pim6reg: left allmulticast mode [ 209.528135][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3874'. [ 209.571966][T13702] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 209.603399][T13707] dvmrp1: entered allmulticast mode [ 209.613890][T13702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.622647][T13702] bond4: (slave batadv1): making interface the new active one [ 209.631665][T13702] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 209.641377][T13707] dvmrp1: left allmulticast mode [ 209.650466][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3876'. [ 209.661280][T13702] bond4 (unregistering): (slave batadv1): Releasing active interface [ 209.672405][T13702] bond4 (unregistering): Released all slaves [ 209.740461][ T3837] Bluetooth: hci0: command 0x1003 tx timeout [ 209.746575][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.842989][T13723] netlink: 'syz.6.3886': attribute type 3 has an invalid length. [ 209.986943][ T9221] kernel write not supported for file bpf-prog (pid: 9221 comm: kworker/1:12) [ 210.052586][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3899'. [ 210.066639][T13752] hub 6-0:1.0: USB hub found [ 210.072444][T13752] hub 6-0:1.0: 8 ports detected [ 210.134020][T13758] xt_CT: No such helper "pptp" [ 210.304531][T13779] loop5: detected capacity change from 0 to 764 [ 210.319238][T13779] ISOFS: unable to read i-node block [ 210.745400][T13793] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 210.972903][T13814] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 211.042017][T13814] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 211.195419][T13828] netlink: 'syz.9.3932': attribute type 1 has an invalid length. [ 211.650217][T13857] net_ratelimit: 1746 callbacks suppressed [ 211.650235][T13857] netlink: zone id is out of range [ 211.662212][T13857] netlink: zone id is out of range [ 211.695322][T13857] netlink: zone id is out of range [ 211.713232][T13857] netlink: zone id is out of range [ 211.728750][T13857] netlink: zone id is out of range [ 211.739118][T13861] ip6gre0: entered promiscuous mode [ 211.745661][T13857] netlink: zone id is out of range [ 211.751848][T13857] netlink: zone id is out of range [ 211.757057][T13857] netlink: zone id is out of range [ 211.762227][T13857] netlink: zone id is out of range [ 211.767360][T13857] netlink: zone id is out of range [ 211.776084][T13861] team0: Device ip6gre0 is of different type [ 211.804956][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 211.804970][ T29] audit: type=1326 audit(1768379912.782:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.9.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 211.898797][ T29] audit: type=1326 audit(1768379912.782:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.9.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 211.923220][ T29] audit: type=1326 audit(1768379912.782:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.9.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 211.946799][ T29] audit: type=1326 audit(1768379912.782:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.9.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfd599f749 code=0x7ffc0000 [ 211.971188][ T29] audit: type=1326 audit(1768379912.782:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.9.3949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd599f749 code=0x0 [ 212.107963][T13880] loop3: detected capacity change from 0 to 512 [ 212.131481][T13880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.172263][T13882] bridge0: port 4(macsec0) entered blocking state [ 212.178804][T13882] bridge0: port 4(macsec0) entered disabled state [ 212.188583][T13880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.227713][T13882] macsec0: entered allmulticast mode [ 212.262864][T13882] macsec0: left allmulticast mode [ 212.269064][T13880] ext4 filesystem being mounted at /814/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.280485][ T29] audit: type=1326 audit(1768379913.222:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.2.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 212.304025][ T29] audit: type=1326 audit(1768379913.222:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.2.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 212.328425][ T29] audit: type=1326 audit(1768379913.222:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.2.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 212.353073][ T29] audit: type=1326 audit(1768379913.222:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.2.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 212.376596][ T29] audit: type=1326 audit(1768379913.222:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.2.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 212.513047][T13899] __nla_validate_parse: 4 callbacks suppressed [ 212.513073][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'. [ 212.561576][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.626709][T13909] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3969'. [ 212.688858][T13919] pim6reg: entered allmulticast mode [ 212.716283][T13919] pim6reg: left allmulticast mode [ 212.769582][T13929] GUP no longer grows the stack in syz.3.3978 (13929): 200000004000-20000000a000 (200000002000) [ 212.781196][T13929] CPU: 0 UID: 0 PID: 13929 Comm: syz.3.3978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.781283][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.781302][T13929] Call Trace: [ 212.781311][T13929] [ 212.781321][T13929] __dump_stack+0x1d/0x30 [ 212.781356][T13929] dump_stack_lvl+0x95/0xd0 [ 212.781386][T13929] dump_stack+0x15/0x1b [ 212.781414][T13929] __get_user_pages+0x1979/0x1ed0 [ 212.781489][T13929] ? __rcu_read_unlock+0x4f/0x70 [ 212.781513][T13929] get_user_pages_remote+0x1d5/0x6c0 [ 212.781574][T13929] __access_remote_vm+0x15c/0x590 [ 212.781630][T13929] access_remote_vm+0x32/0x40 [ 212.781660][T13929] proc_pid_cmdline_read+0x32b/0x6c0 [ 212.781687][T13929] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 212.781772][T13929] vfs_readv+0x3fb/0x690 [ 212.781814][T13929] __x64_sys_preadv+0xfd/0x1c0 [ 212.781897][T13929] x64_sys_call+0x2805/0x3000 [ 212.781921][T13929] do_syscall_64+0xca/0x2b0 [ 212.782003][T13929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.782028][T13929] RIP: 0033:0x7fa8dd37f749 [ 212.782056][T13929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.782089][T13929] RSP: 002b:00007fa8dbde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 212.782115][T13929] RAX: ffffffffffffffda RBX: 00007fa8dd5d5fa0 RCX: 00007fa8dd37f749 [ 212.782165][T13929] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 212.782188][T13929] RBP: 00007fa8dd403f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.782205][T13929] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 212.782221][T13929] R13: 00007fa8dd5d6038 R14: 00007fa8dd5d5fa0 R15: 00007ffc835e4748 [ 212.782247][T13929] [ 213.115448][T13958] loop5: detected capacity change from 0 to 128 [ 213.249101][T13958] bio_check_eod: 17287 callbacks suppressed [ 213.249123][T13958] syz.5.3991: attempt to access beyond end of device [ 213.249123][T13958] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 213.268738][T13958] syz.5.3991: attempt to access beyond end of device [ 213.268738][T13958] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 213.314765][T13967] loop9: detected capacity change from 0 to 512 [ 213.323195][T13958] syz.5.3991: attempt to access beyond end of device [ 213.323195][T13958] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 213.337153][T13958] syz.5.3991: attempt to access beyond end of device [ 213.337153][T13958] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 213.351296][T13967] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.366718][T13958] syz.5.3991: attempt to access beyond end of device [ 213.366718][T13958] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 213.366886][T13967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 213.380689][T13958] syz.5.3991: attempt to access beyond end of device [ 213.380689][T13958] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 213.380745][T13958] syz.5.3991: attempt to access beyond end of device [ 213.380745][T13958] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 213.380789][T13958] syz.5.3991: attempt to access beyond end of device [ 213.380789][T13958] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 213.380833][T13958] syz.5.3991: attempt to access beyond end of device [ 213.380833][T13958] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 213.380877][T13958] syz.5.3991: attempt to access beyond end of device [ 213.380877][T13958] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 213.561527][T13967] EXT4-fs (loop9): orphan cleanup on readonly fs [ 213.571557][T13967] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 213.587828][T13967] EXT4-fs (loop9): Remounting filesystem read-only [ 213.595591][T13967] EXT4-fs (loop9): 1 truncate cleaned up [ 213.601710][ T8011] EXT4-fs (loop9): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 213.612362][ T8011] EXT4-fs (loop9): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 213.642837][ T8011] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 213.663134][T13967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.696239][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4001'. [ 213.715063][T13988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.727583][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.737588][T13988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.803096][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.820060][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.870722][T14001] ip6t_rpfilter: unknown options [ 213.880867][T14003] loop5: detected capacity change from 0 to 1024 [ 213.887728][T14003] EXT4-fs: Ignoring removed orlov option [ 213.903101][T14003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.974373][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.027423][T14021] loop5: detected capacity change from 0 to 512 [ 214.035089][T14021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.049243][T14019] SELinux: failed to load policy [ 214.054817][T14021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.067754][T14021] ext4 filesystem being mounted at /828/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.085800][T14021] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4015: Failed to acquire dquot type 0 [ 214.110108][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 214.162685][T14031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.172039][T14031] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.235695][T14035] loop5: detected capacity change from 0 to 1024 [ 214.242852][T14035] EXT4-fs: inline encryption not supported [ 214.261349][T14035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.289803][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.360314][T14041] SELinux: failed to load policy [ 214.652572][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'. [ 214.662580][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4036'. [ 214.725930][T14074] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.748075][T14076] lo speed is unknown, defaulting to 1000 [ 214.786192][T14076] rdma_op ffff888125972d80 conn xmit_rdma 0000000000000000 [ 215.025776][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4058'. [ 215.035003][T14113] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4058'. [ 215.044014][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4058'. [ 215.054080][T14113] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4058'. [ 215.102635][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 215.222438][T14136] netlink: 'syz.3.4068': attribute type 4 has an invalid length. [ 215.237724][T14142] loop2: detected capacity change from 0 to 128 [ 215.497114][T14174] netlink: 'syz.5.4084': attribute type 4 has an invalid length. [ 215.718654][T14205] 9p: Bad value for 'rfdno' [ 215.742090][T14209] netlink: 'syz.2.4101': attribute type 4 has an invalid length. [ 216.295362][T14276] lo speed is unknown, defaulting to 1000 [ 216.504537][T14305] loop3: detected capacity change from 0 to 1024 [ 216.512391][T14305] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.524329][T14305] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.535822][T14305] JBD2: no valid journal superblock found [ 216.542226][T14305] EXT4-fs (loop3): Could not load journal inode [ 216.547803][T14307] loop5: detected capacity change from 0 to 2048 [ 216.590705][T14307] loop5: p1 p3 [ 216.595094][T14307] loop5: p3 start 8388352 is beyond EOD, truncated [ 216.873796][T14346] hub 2-0:1.0: USB hub found [ 216.880473][T14346] hub 2-0:1.0: 8 ports detected [ 216.905993][ T29] kauditd_printk_skb: 823 callbacks suppressed [ 216.906011][ T29] audit: type=1326 audit(1768379917.882:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 216.937340][T14351] loop9: detected capacity change from 0 to 2048 [ 216.945075][ T29] audit: type=1326 audit(1768379917.882:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 216.969657][ T29] audit: type=1326 audit(1768379917.882:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 216.993399][ T29] audit: type=1326 audit(1768379917.902:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 217.021710][T14351] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 217.031661][T14351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.051578][T14326] EXT4-fs error (device loop9): ext4_ext_precache:649: inode #2: comm syz.9.4154: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 217.068505][T14326] EXT4-fs (loop9): Remounting filesystem read-only [ 217.118897][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 217.134254][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.184368][ T29] audit: type=1326 audit(1768379918.162:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.209086][ T29] audit: type=1326 audit(1768379918.162:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.233764][ T29] audit: type=1326 audit(1768379918.162:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.257557][ T29] audit: type=1326 audit(1768379918.162:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.282124][ T29] audit: type=1326 audit(1768379918.162:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.305833][ T29] audit: type=1326 audit(1768379918.162:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8dd37f749 code=0x7ffc0000 [ 217.533328][T14399] __nla_validate_parse: 3 callbacks suppressed [ 217.533399][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4184'. [ 217.634005][T14411] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.4190'. [ 217.644403][T14411] net_ratelimit: 580 callbacks suppressed [ 217.644422][T14411] netlink: zone id is out of range [ 217.655347][T14411] netlink: zone id is out of range [ 217.660520][T14411] netlink: get zone limit has 4 unknown bytes [ 218.207064][T14451] rdma_op ffff88811b7d5d80 conn xmit_rdma 0000000000000000 [ 218.363140][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'. [ 218.372304][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'. [ 218.386614][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'. [ 218.395647][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'. [ 218.411359][T14479] netlink: 'syz.9.4219': attribute type 4 has an invalid length. [ 218.533700][T14494] loop9: detected capacity change from 0 to 2048 [ 218.584044][T14494] Alternate GPT is invalid, using primary GPT. [ 218.591616][T14494] loop9: p2 p3 p7 [ 218.650914][T14506] all: renamed from lo [ 218.872414][T14527] tipc: New replicast peer: 255.255.255.83 [ 218.878433][T14527] tipc: Enabled bearer , priority 10 [ 219.004888][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.014439][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.086074][T14541] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4246'. [ 219.096191][T14541] netem: unknown loss type 13 [ 219.101036][T14541] netem: change failed [ 219.162972][T14544] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 219.201640][T14547] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4249'. [ 219.284987][T14552] loop6: detected capacity change from 0 to 2048 [ 219.332913][T14552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.345564][T14559] loop9: detected capacity change from 0 to 512 [ 219.355672][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 219.370611][T14559] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.4255: error while reading EA inode 32 err=-116 [ 219.389705][T14559] EXT4-fs (loop9): Remounting filesystem read-only [ 219.396441][T14559] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 219.417606][T14559] EXT4-fs (loop9): 1 orphan inode deleted [ 219.428237][T14559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.443852][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 219.461558][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.480685][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.526616][T14567] lo speed is unknown, defaulting to 1000 [ 219.585153][T14573] loop9: detected capacity change from 0 to 512 [ 219.623003][T14573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.645046][T14573] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.901979][ T9496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.978348][T14588] loop3: detected capacity change from 0 to 8192 [ 220.084647][T14599] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.090466][ T3478] tipc: Node number set to 3928864425 [ 220.197386][T14606] hub 6-0:1.0: USB hub found [ 220.203440][T14606] hub 6-0:1.0: 8 ports detected [ 220.393276][T14630] netlink: 'syz.9.4286': attribute type 29 has an invalid length. [ 220.516662][T14642] lo speed is unknown, defaulting to 1000 [ 220.638410][T14652] loop2: detected capacity change from 0 to 1024 [ 220.652292][T14652] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.690303][T14652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 220.711016][T14652] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.4296: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.747233][T14652] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.4296: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.796597][T14660] rdma_op ffff8881037c3d80 conn xmit_rdma 0000000000000000 [ 220.809701][T14652] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4296: Failed to acquire dquot type 0 [ 220.838213][T14652] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 220.869388][T14652] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.4296: mark_inode_dirty error [ 220.883867][T14652] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 220.896013][T14652] EXT4-fs (loop2): 1 orphan inode deleted [ 220.902332][T14652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.916290][ T7980] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.932590][ T7980] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 0 [ 220.984864][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.001386][ T9547] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 221.045297][ T9547] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 221.072919][ T9547] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 221.132580][T14680] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 221.173036][T14682] loop6: detected capacity change from 0 to 512 [ 222.188678][T14741] lo speed is unknown, defaulting to 1000 [ 222.322689][T14759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.357423][T14759] bond1: option ad_select: unable to set because the bond device is up [ 222.549151][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 222.549169][ T29] audit: type=1326 audit(1768379923.522:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.589029][ T29] audit: type=1326 audit(1768379923.522:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.613596][ T29] audit: type=1326 audit(1768379923.522:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.637149][ T29] audit: type=1326 audit(1768379923.522:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.661688][ T29] audit: type=1326 audit(1768379923.542:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.685322][ T29] audit: type=1326 audit(1768379923.542:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.709996][ T29] audit: type=1326 audit(1768379923.542:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.733626][ T29] audit: type=1326 audit(1768379923.542:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.758224][ T29] audit: type=1326 audit(1768379923.542:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.782700][ T29] audit: type=1326 audit(1768379923.542:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb37f749 code=0x7ffc0000 [ 222.903841][T14794] loop2: detected capacity change from 0 to 256 [ 222.931931][T14794] FAT-fs (loop2): Directory bread(block 64) failed [ 222.938954][T14794] FAT-fs (loop2): Directory bread(block 65) failed [ 222.948910][T14794] FAT-fs (loop2): Directory bread(block 66) failed [ 222.956580][T14794] FAT-fs (loop2): Directory bread(block 67) failed [ 222.985014][T14794] FAT-fs (loop2): Directory bread(block 68) failed [ 223.011906][T14794] FAT-fs (loop2): Directory bread(block 69) failed [ 223.018519][T14794] FAT-fs (loop2): Directory bread(block 70) failed [ 223.035912][T14794] FAT-fs (loop2): Directory bread(block 71) failed [ 223.047758][T14810] __nla_validate_parse: 12 callbacks suppressed [ 223.047852][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 223.063953][T14794] FAT-fs (loop2): Directory bread(block 72) failed [ 223.071718][T14794] FAT-fs (loop2): Directory bread(block 73) failed [ 223.091049][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 223.130517][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 223.152281][T14794] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 223.161747][T14794] FAT-fs (loop2): Filesystem has been set read-only [ 223.175890][T14794] bio_check_eod: 98 callbacks suppressed [ 223.175911][T14794] syz.2.4352: attempt to access beyond end of device [ 223.175911][T14794] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 223.218940][T14794] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 223.229037][T14794] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 223.238199][T14794] syz.2.4352: attempt to access beyond end of device [ 223.238199][T14794] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 223.275484][T14794] syz.2.4352: attempt to access beyond end of device [ 223.275484][T14794] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 223.527044][T14855] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4379'. [ 223.634904][T14871] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 223.658421][T14871] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 223.716375][T14884] loop6: detected capacity change from 0 to 512 [ 223.733930][T14884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.803451][T14884] ext4 filesystem being mounted at /785/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.847295][T14884] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 4: comm syz.6.4392: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 223.939080][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.048332][T14915] bridge0: port 3(macsec1) entered blocking state [ 224.055028][T14915] bridge0: port 3(macsec1) entered disabled state [ 224.077147][T14915] macsec1: entered allmulticast mode [ 224.088709][T14915] macsec1: left allmulticast mode [ 224.229137][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4415'. [ 224.270402][T14935] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 224.318447][T14945] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.448860][T14955] loop6: detected capacity change from 0 to 2048 [ 224.475902][T14955] EXT4-fs (loop6): #clusters per group too big: 16384 [ 224.536200][T14964] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4429'. [ 224.690928][T14980] netlink: 'syz.5.4437': attribute type 1 has an invalid length. [ 224.698728][T14980] netlink: 'syz.5.4437': attribute type 4 has an invalid length. [ 224.707532][T14980] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4437'. [ 224.821169][T14998] ================================================================== [ 224.829319][T14998] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 224.835944][T14998] [ 224.838282][T14998] write to 0xffff88815a4f8870 of 104 bytes by task 14997 on cpu 1: [ 224.846194][T14998] __bpf_get_stackid+0x737/0x7d0 [ 224.851193][T14998] bpf_get_stackid+0xf3/0x130 [ 224.855910][T14998] bpf_get_stackid_raw_tp+0xf6/0x120 [ 224.861229][T14998] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 224.866721][T14998] bpf_trace_run2+0x107/0x1d0 [ 224.871428][T14998] kfree+0x353/0x3c0 [ 224.875344][T14998] _destroy_id+0x9ef/0xa60 [ 224.879788][T14998] destroy_id_handler_unlock+0x64/0x130 [ 224.885387][T14998] rdma_destroy_id+0x21/0x30 [ 224.890005][T14998] rds_ib_laddr_check+0x191/0x300 [ 224.895044][T14998] rds_bind+0x431/0xf10 [ 224.899237][T14998] __sys_bind+0x1d1/0x2a0 [ 224.903593][T14998] __x64_sys_bind+0x3f/0x50 [ 224.908138][T14998] x64_sys_call+0x2ceb/0x3000 [ 224.912853][T14998] do_syscall_64+0xca/0x2b0 [ 224.917398][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.923319][T14998] [ 224.925667][T14998] read to 0xffff88815a4f88c0 of 8 bytes by task 14998 on cpu 0: [ 224.933316][T14998] bcmp+0x23/0x90 [ 224.936977][T14998] __bpf_get_stackid+0x382/0x7d0 [ 224.941947][T14998] bpf_get_stackid+0xf3/0x130 [ 224.946658][T14998] bpf_get_stackid_raw_tp+0xf6/0x120 [ 224.951976][T14998] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 224.957468][T14998] bpf_trace_run2+0x107/0x1d0 [ 224.962198][T14998] kfree+0x353/0x3c0 [ 224.966117][T14998] security_compute_sid+0x11da/0x1290 [ 224.971607][T14998] security_transition_sid+0x5a/0x70 [ 224.976966][T14998] selinux_determine_inode_label+0x1e2/0x210 [ 224.982982][T14998] may_create+0x1e0/0x2b0 [ 224.987348][T14998] selinux_inode_symlink+0x22/0x30 [ 224.992485][T14998] security_inode_symlink+0x79/0xc0 [ 224.997700][T14998] vfs_symlink+0x8e/0x1f0 [ 225.002048][T14998] do_symlinkat+0xf0/0x470 [ 225.006483][T14998] __x64_sys_symlinkat+0x5a/0x70 [ 225.011467][T14998] x64_sys_call+0x2a36/0x3000 [ 225.016217][T14998] do_syscall_64+0xca/0x2b0 [ 225.020763][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.026686][T14998] [ 225.029025][T14998] value changed: 0xffffffff81953ab0 -> 0xffffffff8127603b [ 225.036149][T14998] [ 225.038483][T14998] Reported by Kernel Concurrency Sanitizer on: [ 225.044648][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.054644][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.064724][T14998] ==================================================================