last executing test programs: 1m23.822238645s ago: executing program 2 (id=340): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.551865789s ago: executing program 2 (id=341): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@mpls_newroute={0x24, 0x18, 0x300, 0x70bd29, 0x25dfdbfd, {0x1c, 0xf4, 0x20, 0x9, 0xff, 0x1, 0x0, 0x2, 0x200}, [@RTA_DST={0x8, 0x1, {0x6}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x45881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1m23.426774812s ago: executing program 2 (id=343): syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a30000000"], 0x54}}, 0x0) 1m23.260496604s ago: executing program 2 (id=346): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x113e, 0x2, 0x0, 0x10002}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=""/44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) fremovexattr(r2, &(0x7f0000000000)=@known='user.incfs.metadata\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 1m23.109846266s ago: executing program 2 (id=349): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) acct(&(0x7f00000001c0)='./file0\x00') 1m22.750312652s ago: executing program 2 (id=357): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f00000003c0)='cgroup\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0x63, 0x7a, &(0x7f00000000c0)="553d9a1440191198336c358a768d597d2f9b80f987a6ba57e62f6143efd4f6c948235993500b1ebaf5bdcb4809c1a46585e55dd332621f20c68b716987cd9caf483b427f89e1d9f6552b16683edaa08803fbef3c317e16420bacd9409da601f1cb972b", &(0x7f0000000140)=""/122, 0x80, 0x0, 0xc3, 0x73, &(0x7f00000005c0)="3b6196f2e9a518f0413a71576bdbfd212ed22efa03e71a28c2f56b3add0c0907426b0349babee78fb65c6cb7e0984a77ce796e7c880ec12fd3cea2e38889e9ad1a632560b952ebc0a7fd200a5691b7fae07e1d1ce7b6ed347632513db2d61a36d79a013524a0e1aa3dd702f7b8eda91eb12953d7096c8e519363ec8e0be8707e793f396e7b5dd7339a83b32b63f3944240f84bf9c726d748d5d1ee3f396c2ead6db5ff40b4e062e01a737fabefed1c3c2b3de20496c3e1b8fa9406eaaf36337630a207", &(0x7f00000004c0)="0aa7d9842633a39b6ab5caddacf7008a6dbbe58352a48da792d88a8571ebc8fbec1746e0e020e9b3104cd3c45e48ce117827d8112cd18b49dde11d8910cd5a983bdcb248c4f56ae51115083559c6217b1ad060fecbbd2bca7087ad2cc45e400c6c904e49b731f7e544fa9572b2d38d4ef8edb8", 0x5, 0x0, 0xffffabff}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) 1m22.742692161s ago: executing program 32 (id=357): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f00000003c0)='cgroup\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0x63, 0x7a, &(0x7f00000000c0)="553d9a1440191198336c358a768d597d2f9b80f987a6ba57e62f6143efd4f6c948235993500b1ebaf5bdcb4809c1a46585e55dd332621f20c68b716987cd9caf483b427f89e1d9f6552b16683edaa08803fbef3c317e16420bacd9409da601f1cb972b", &(0x7f0000000140)=""/122, 0x80, 0x0, 0xc3, 0x73, &(0x7f00000005c0)="3b6196f2e9a518f0413a71576bdbfd212ed22efa03e71a28c2f56b3add0c0907426b0349babee78fb65c6cb7e0984a77ce796e7c880ec12fd3cea2e38889e9ad1a632560b952ebc0a7fd200a5691b7fae07e1d1ce7b6ed347632513db2d61a36d79a013524a0e1aa3dd702f7b8eda91eb12953d7096c8e519363ec8e0be8707e793f396e7b5dd7339a83b32b63f3944240f84bf9c726d748d5d1ee3f396c2ead6db5ff40b4e062e01a737fabefed1c3c2b3de20496c3e1b8fa9406eaaf36337630a207", &(0x7f00000004c0)="0aa7d9842633a39b6ab5caddacf7008a6dbbe58352a48da792d88a8571ebc8fbec1746e0e020e9b3104cd3c45e48ce117827d8112cd18b49dde11d8910cd5a983bdcb248c4f56ae51115083559c6217b1ad060fecbbd2bca7087ad2cc45e400c6c904e49b731f7e544fa9572b2d38d4ef8edb8", 0x5, 0x0, 0xffffabff}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) 1m16.739025132s ago: executing program 5 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(r4, 0x0, 0x0) tkill(r2, 0x7) 1m16.666424624s ago: executing program 5 (id=460): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2504000000080004000000000005000a000100000008000100", @ANYRES32, @ANYBLOB="080001"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) 1m16.603714594s ago: executing program 5 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 1m16.585122464s ago: executing program 5 (id=463): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 1m16.553412325s ago: executing program 5 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) timer_getoverrun(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1m15.626109289s ago: executing program 5 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) fcntl$setpipe(r2, 0x407, 0xe) 1m4.214525081s ago: executing program 0 (id=657): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) socket(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x7de, &(0x7f00000002c0)={0x0, 0x49cb, 0x10100, 0x1, 0x800249}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m4.188528292s ago: executing program 0 (id=659): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "7939bb101148662d", "0d41b4638c7af370b53564b5bfc1d5ae", "4b0404d3", "02dbb56a1c279d58"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x81ff) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) 1m3.927448496s ago: executing program 0 (id=672): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8b11e49fc67395a3}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000"], 0x98}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080841}, 0x44) 1m3.762657478s ago: executing program 0 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(0x0, 0x1) 1m3.63098721s ago: executing program 0 (id=665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 1m3.63074807s ago: executing program 0 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0xffff, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'syz_tun\x00'}) 1m3.6305227s ago: executing program 33 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0xffff, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'syz_tun\x00'}) 1m0.597704196s ago: executing program 34 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) fcntl$setpipe(r2, 0x407, 0xe) 53.156302308s ago: executing program 3 (id=861): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xa, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0x5c) 52.901665682s ago: executing program 3 (id=864): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 51.980868566s ago: executing program 3 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_io_uring_setup(0x4bc3, &(0x7f0000001500), &(0x7f0000001580), &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) 51.906106007s ago: executing program 3 (id=878): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x50]}, 0x2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x80000000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 50.913070792s ago: executing program 3 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x50) 50.683257105s ago: executing program 1 (id=887): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd74d4000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 50.580437236s ago: executing program 3 (id=889): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0xc221000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 50.517755978s ago: executing program 35 (id=889): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0xc221000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 49.338022696s ago: executing program 1 (id=899): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 49.300749376s ago: executing program 1 (id=901): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4048091) r3 = dup3(r1, r2, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 49.222192867s ago: executing program 1 (id=903): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20085a, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpid}, {@jqfmt_vfsv0}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2009800, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 48.831700253s ago: executing program 1 (id=904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 48.542993567s ago: executing program 1 (id=907): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 48.538948468s ago: executing program 36 (id=907): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.334639774s ago: executing program 4 (id=1774): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x4, 0x7, 0x7}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}}], 0x1, 0x0) 2.206420166s ago: executing program 4 (id=1776): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 2.159559916s ago: executing program 4 (id=1778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) close(0x3) 2.024459459s ago: executing program 4 (id=1785): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r4 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x40, 0xd, 0x0, 0xfffffffffffffffe, 0x4080048, r5}) 1.385382019s ago: executing program 7 (id=1796): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4001c00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x4c, 0x232, 0x0, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev, [0xffffffff]}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.380999289s ago: executing program 4 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 1.275337s ago: executing program 4 (id=1801): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) accept4$unix(r2, &(0x7f0000000300), &(0x7f0000000100)=0x6e, 0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.243637791s ago: executing program 7 (id=1802): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 1.002995014s ago: executing program 7 (id=1804): pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 986.980214ms ago: executing program 7 (id=1805): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 907.252866ms ago: executing program 7 (id=1810): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x1d, &(0x7f0000000440)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0xffffffffffffff90, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 644.96584ms ago: executing program 9 (id=1827): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x108) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 562.952501ms ago: executing program 9 (id=1830): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x129d, &(0x7f0000001ec0)="$eJzs3U9ro0UcB/Bf2rSbdu0fdV3dBXHQiyLEtgdPeymyC2JBqXZBBeFZm2po+ocmFCri1pMnweu+A1GP3gTxDfTixbMgiPTizT2IjzRJa9Om3XbbbEE+n0seZuabmWGSwMAzebZvfLW0uFAvL2SN6CsUotgfUbyfIkVf9EfLZrx0+5dfn3373ffemJ6ZuTmb0q3pdyZfTSmNPvfj+59+9/xPjcu3vx/94VJsjX+w/efUb1tXt65t//NtVOupWk/LK42UpTsrK43sTq2S5qv1xXJKb9UqWb2Sqsv1ylpH/UJtZXV1I2XL8yPDq2uVej1lyxtpsbKRGoXUWNtI2UdZdTmVy+U0Mhycxdw39/M8j8jzgRiMPM/zoRiOy/FYjMRojMV4PB5PxJNxJf7Kr8bT8Uxca7a66HEDAAAAAAAAAAAAAAAAAADA/8sDzv8Xds//PxXO/wMAAAAAAAAAAAAAAAAAAECvHDz/X4zo+vx/5/8BAAAAAAAAAAAAAAAAAACgdx7w/P8D5/9fdv4fAAAAAAAAAAAAAAAAAAAAeqHUeplNqRSx9MX63Ppc67VVPr0Q1ahFJSZiLP6OuHEvmv8A0PrXgDy/9frMzYnUNB6vLN1t5++uz/V35icHxmK80M525idb+dSZvxTD+/NTMRZXomt+6nC+GHOlePGFnfznrXw5xuLnD2MlajEfUWjPvpn/bDKl196cGers//pOuyP193hZAAAA4DyV055D+/fibqOu9a2q9v48tVsWuu3PJ7ru74txvXhBk2ZPfeOTxaxWq6w95MXg0e8zuK+kdDjed9q+ChGRxf6S0eHfZ3c6f9jBn9tF/wkblyLi7J0OHN/mDGu685U/bWqg/Qk4ps29vvP5sJ344o+v95WUYrcq+iJ633t7spHVNk+83LGZ5z0d2GC3qkvHpY7+zSj08geJR6q51hGVtfpFjwQAAAAAAAAAAIDT6Hr331A07wjrrPr4UMnmf7cC7qs6/M4H+xzYu/ryEc0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiXHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAP//FlXBuA==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 455.027413ms ago: executing program 9 (id=1835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 454.757062ms ago: executing program 9 (id=1836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@nodelalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) 315.050155ms ago: executing program 8 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 282.184526ms ago: executing program 8 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 199.866816ms ago: executing program 8 (id=1843): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 143.706367ms ago: executing program 6 (id=1846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) futex(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) set_mempolicy(0x4005, &(0x7f0000000580)=0x7, 0x7) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e000000ffff080211e500010000000000000000000064000000000602020202020201000301003c"], 0x78}}, 0x0) 90.597208ms ago: executing program 6 (id=1847): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x23, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x9f, &(0x7f0000001040), &(0x7f00000000c0)=0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000013c0)=""/102369, 0xda6f, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = dup(r3) setsockopt$inet_int(r4, 0x0, 0xce, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 90.322658ms ago: executing program 6 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2ab}, 0x18) r2 = io_uring_setup(0x25d8, &(0x7f0000000440)={0x0, 0xdf05, 0x2, 0x1002}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 90.151888ms ago: executing program 8 (id=1849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r2, r3, 0x0) 89.723118ms ago: executing program 9 (id=1850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000c8fd2cc12600"/27], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) 66.157148ms ago: executing program 6 (id=1851): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) shmat(0x0, &(0x7f0000ff4000/0xb000)=nil, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 65.881568ms ago: executing program 8 (id=1852): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0x3, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 34.353859ms ago: executing program 8 (id=1853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept(r0, 0x0, 0x0) 34.082039ms ago: executing program 7 (id=1854): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) 32.310499ms ago: executing program 6 (id=1855): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x800714, &(0x7f00000002c0)={[{@nodiscard}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@acl}]}, 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==") r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) unshare(0x28020480) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 419.18µs ago: executing program 9 (id=1856): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008011}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000900)="747043c7", 0x4) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.163586][ T6251] RSP: 002b:00007efef5727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.163610][ T6251] RAX: ffffffffffffffda RBX: 00007efef72d5fa0 RCX: 00007efef70bd169 [ 80.163627][ T6251] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 80.163638][ T6251] RBP: 00007efef713e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.163652][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.163663][ T6251] R13: 0000000000000000 R14: 00007efef72d5fa0 R15: 00007ffc5b163a38 [ 80.163681][ T6251] [ 80.163688][ T6251] memory: usage 307200kB, limit 307200kB, failcnt 90 [ 80.177017][ T6278] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 80.185774][ T6251] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 80.185793][ T6251] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 80.185807][ T6251] Memory cgroup stats for /syz6: [ 80.540568][ T6251] cache 0 [ 80.548580][ T6251] rss 4096 [ 80.551613][ T6251] shmem 0 [ 80.554612][ T6251] mapped_file 0 [ 80.558073][ T6251] dirty 0 [ 80.561017][ T6251] writeback 0 [ 80.563327][ T6278] EXT4-fs (loop3): 1 truncate cleaned up [ 80.564377][ T6251] workingset_refault_anon 35 [ 80.571283][ T6278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.574593][ T6251] workingset_refault_file 0 [ 80.591467][ T6251] swap 176128 [ 80.594789][ T6251] swapcached 4096 [ 80.598423][ T6251] pgpgin 8859 [ 80.601821][ T6251] pgpgout 8856 [ 80.605352][ T6251] pgfault 10353 [ 80.608919][ T6251] pgmajfault 30 [ 80.612376][ T6251] inactive_anon 0 [ 80.616115][ T6251] active_anon 8192 [ 80.619845][ T6251] inactive_file 0 [ 80.623529][ T6251] active_file 4096 [ 80.627331][ T6251] unevictable 0 [ 80.630837][ T6251] hierarchical_memory_limit 314572800 [ 80.636246][ T6251] hierarchical_memsw_limit 9223372036854771712 [ 80.642436][ T6251] total_cache 0 [ 80.645951][ T6251] total_rss 4096 [ 80.649506][ T6251] total_shmem 0 [ 80.653008][ T6251] total_mapped_file 0 [ 80.657036][ T6251] total_dirty 0 [ 80.660532][ T6251] total_writeback 0 [ 80.664373][ T6251] total_workingset_refault_anon 35 [ 80.669516][ T6251] total_workingset_refault_file 0 [ 80.674567][ T6251] total_swap 176128 [ 80.678428][ T6251] total_swapcached 4096 [ 80.682686][ T6251] total_pgpgin 8859 [ 80.686561][ T6251] total_pgpgout 8856 [ 80.690506][ T6251] total_pgfault 10353 [ 80.694524][ T6251] total_pgmajfault 30 [ 80.698554][ T6251] total_inactive_anon 0 [ 80.702786][ T6251] total_active_anon 8192 [ 80.707066][ T6251] total_inactive_file 0 [ 80.711300][ T6251] total_active_file 4096 [ 80.715600][ T6251] total_unevictable 0 [ 80.719589][ T6251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.868,pid=6250,uid=0 [ 80.734208][ T6251] Memory cgroup out of memory: Killed process 6250 (syz.6.868) total-vm:95636kB, anon-rss:1044kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 80.745176][ T6283] loop4: detected capacity change from 0 to 512 [ 80.767440][ T6278] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 80.794871][ T6278] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 80.807748][ T6283] EXT4-fs (loop4): too many log groups per flexible block group [ 80.815483][ T6283] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 80.852547][ T6283] EXT4-fs (loop4): mount failed [ 80.857725][ T6278] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 80.867515][ T6290] lo speed is unknown, defaulting to 1000 [ 80.937984][ T3305] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 80.966356][ T6298] loop4: detected capacity change from 0 to 1024 [ 80.983145][ T3305] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 80.995087][ T6298] EXT4-fs: Ignoring removed nobh option [ 80.999415][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 81.000647][ T6298] EXT4-fs: Ignoring removed bh option [ 81.037650][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.068940][ T6298] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.884: Allocating blocks 385-513 which overlap fs metadata [ 81.097397][ T6300] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6300 comm=syz.1.886 [ 81.113765][ T6298] EXT4-fs (loop4): pa ffff888106542380: logic 16, phys. 129, len 24 [ 81.121848][ T6298] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 81.158568][ T6298] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 81.170831][ T6298] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.170831][ T6298] [ 81.180537][ T6298] EXT4-fs (loop4): Total free blocks count 0 [ 81.186570][ T6298] EXT4-fs (loop4): Free/Dirty block details [ 81.192463][ T6298] EXT4-fs (loop4): free_blocks=128 [ 81.197672][ T6298] EXT4-fs (loop4): dirty_blocks=0 [ 81.202756][ T6298] EXT4-fs (loop4): Block reservation details [ 81.208800][ T6298] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 81.575450][ T6316] lo speed is unknown, defaulting to 1000 [ 81.608661][ T6326] loop4: detected capacity change from 0 to 512 [ 81.646917][ T6326] EXT4-fs (loop4): 1 orphan inode deleted [ 81.663220][ T6326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.676032][ T4177] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 81.689409][ T6326] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.770328][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 81.914392][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.921501][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.928699][ T6316] bridge_slave_0: entered allmulticast mode [ 81.935236][ T6316] bridge_slave_0: entered promiscuous mode [ 81.945089][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.952249][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.952254][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.972359][ T6316] bridge_slave_1: entered allmulticast mode [ 81.980601][ T6316] bridge_slave_1: entered promiscuous mode [ 82.072682][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.093852][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.108528][ T6346] loop4: detected capacity change from 0 to 512 [ 82.141262][ T6346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.164258][ T6346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 82.191633][ T6346] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 82.192744][ T6316] team0: Port device team_slave_0 added [ 82.206986][ T6346] EXT4-fs (loop4): 1 truncate cleaned up [ 82.225186][ T6346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.239880][ T6335] lo speed is unknown, defaulting to 1000 [ 82.250187][ T6316] team0: Port device team_slave_1 added [ 82.310504][ T6346] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 82.327958][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.334992][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.336953][ T6346] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 82.361035][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.396877][ T6346] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 82.432477][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.439590][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.465576][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.492256][ T6354] lo speed is unknown, defaulting to 1000 [ 82.503977][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.577817][ T6316] hsr_slave_0: entered promiscuous mode [ 82.583899][ T6316] hsr_slave_1: entered promiscuous mode [ 82.605801][ T6316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.623824][ T6316] Cannot create hsr debugfs directory [ 82.666538][ T6366] loop1: detected capacity change from 0 to 512 [ 82.679486][ T6366] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.740325][ T6366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.763356][ T6366] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.868858][ T6316] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 82.925602][ T6366] loop1: detected capacity change from 512 to 64 [ 82.937972][ T6316] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 82.979109][ T6316] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 83.013526][ T6316] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 83.030687][ T4663] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.067345][ T6373] loop4: detected capacity change from 0 to 512 [ 83.090169][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.098623][ T6373] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.109271][ T6373] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.905: bg 0: block 248: padding at end of block bitmap is not set [ 83.126424][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.134408][ T6373] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.905: Failed to acquire dquot type 1 [ 83.156743][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.164007][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.176753][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.183877][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.192076][ T6373] EXT4-fs (loop4): 1 truncate cleaned up [ 83.198769][ T6373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.221763][ T6316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.232147][ T6316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.243255][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.296034][ T6378] netlink: 96 bytes leftover after parsing attributes in process `syz.4.906'. [ 83.317826][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.536720][ T6316] veth0_vlan: entered promiscuous mode [ 83.546574][ T6316] veth1_vlan: entered promiscuous mode [ 83.569093][ T6316] veth0_macvtap: entered promiscuous mode [ 83.586254][ T6316] veth1_macvtap: entered promiscuous mode [ 83.606999][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.617545][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.627384][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.637914][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.647887][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.658411][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.668273][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.678873][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694212][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.704861][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.715458][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.725348][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.735811][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.745642][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.756091][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.765942][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.776417][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.787363][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.795664][ T6316] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.804482][ T6316] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.813193][ T6316] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822008][ T6316] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.832327][ T6382] lo speed is unknown, defaulting to 1000 [ 84.023415][ T6418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6418 comm=syz.8.890 [ 84.039377][ T6418] netlink: 'syz.8.890': attribute type 1 has an invalid length. [ 84.096896][ T6418] 8021q: VLANs not supported on tunl0 [ 84.135684][ T6421] loop4: detected capacity change from 0 to 512 [ 84.225229][ T6421] EXT4-fs (loop4): 1 orphan inode deleted [ 84.238522][ T6421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.251859][ T4204] __quota_error: 53 callbacks suppressed [ 84.251873][ T4204] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.267327][ T4204] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:38: Failed to release dquot type 1 [ 84.298935][ T6421] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.302104][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 84.488296][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.510221][ T6442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.552436][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 84.562074][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569301][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.577122][ T6382] bridge_slave_0: entered allmulticast mode [ 84.583881][ T6382] bridge_slave_0: entered promiscuous mode [ 84.608289][ T6442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.620292][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.627498][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.634688][ T6382] bridge_slave_1: entered allmulticast mode [ 84.641192][ T6382] bridge_slave_1: entered promiscuous mode [ 84.651646][ T6444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6444 comm=syz.4.920 [ 84.684994][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.728663][ T6442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.744240][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.772577][ T6382] team0: Port device team_slave_0 added [ 84.782503][ T6382] team0: Port device team_slave_1 added [ 84.803213][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.810222][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.836192][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.852902][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.859925][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.885968][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.905586][ T6442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.946393][ T6382] hsr_slave_0: entered promiscuous mode [ 84.952624][ T6382] hsr_slave_1: entered promiscuous mode [ 84.962220][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.970043][ T6382] Cannot create hsr debugfs directory [ 85.065976][ T6382] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 85.077754][ T6382] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 85.088581][ T6382] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 85.100246][ T6382] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 85.107243][ T6461] netlink: 'syz.7.926': attribute type 7 has an invalid length. [ 85.115062][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 85.139853][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.146961][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.154247][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.161462][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.182078][ T6463] loop7: detected capacity change from 0 to 512 [ 85.202489][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.212396][ T6463] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 85.221053][ T6463] System zones: 0-2, 18-18, 34-34 [ 85.228975][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.236656][ T6463] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.927: bg 0: block 248: padding at end of block bitmap is not set [ 85.251250][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.254726][ T6463] Quota error (device loop7): write_blk: dquota write failed [ 85.265823][ T6463] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 85.278315][ T6463] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.927: Failed to acquire dquot type 1 [ 85.290365][ T6463] EXT4-fs (loop7): 1 truncate cleaned up [ 85.297931][ T6463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.310759][ T6463] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.322294][ T6463] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.333524][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.342729][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.349867][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.364672][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.371792][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.466538][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.570819][ T6382] veth0_vlan: entered promiscuous mode [ 85.585631][ T6382] veth1_vlan: entered promiscuous mode [ 85.607474][ T6382] veth0_macvtap: entered promiscuous mode [ 85.617869][ T6382] veth1_macvtap: entered promiscuous mode [ 85.630898][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.641541][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.651474][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.661923][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.671756][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.682274][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.692129][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.702634][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.712479][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.722948][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.738781][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.753867][ T6442] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.768550][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.779139][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.789021][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.799470][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.809389][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.819845][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.829716][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.840241][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.850124][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.860640][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.871514][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.880390][ T6382] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.889431][ T6382] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898258][ T6382] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.906989][ T6382] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.919670][ T6442] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933019][ T6442] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.947190][ T6442] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.009525][ T29] audit: type=1326 audit(1743570183.756:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.032941][ T29] audit: type=1326 audit(1743570183.756:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.056377][ T29] audit: type=1326 audit(1743570183.756:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.080336][ T29] audit: type=1326 audit(1743570183.756:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.104102][ T29] audit: type=1326 audit(1743570183.756:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.127508][ T29] audit: type=1326 audit(1743570183.756:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.150878][ T29] audit: type=1326 audit(1743570183.756:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 86.405207][ T6527] loop7: detected capacity change from 0 to 512 [ 86.440956][ T6527] loop7: detected capacity change from 0 to 512 [ 86.484685][ T6527] EXT4-fs (loop7): orphan cleanup on readonly fs [ 86.491059][ T6527] EXT4-fs error (device loop7): ext4_quota_enable:7122: comm syz.7.946: Bad quota inum: 5, type: 1 [ 86.543855][ T6527] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 86.571116][ T6527] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 86.578574][ T6527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.680827][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.721053][ T6544] loop7: detected capacity change from 0 to 128 [ 86.781119][ T6549] sd 0:0:1:0: device reset [ 86.802762][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.8.955'. [ 86.835698][ T6553] Cannot find del_set index 0 as target [ 86.981857][ T6544] syz.7.953: attempt to access beyond end of device [ 86.981857][ T6544] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 86.998180][ T6544] syz.7.953: attempt to access beyond end of device [ 86.998180][ T6544] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 87.014896][ T6544] syz.7.953: attempt to access beyond end of device [ 87.014896][ T6544] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 87.030432][ T6561] capability: warning: `syz.9.960' uses 32-bit capabilities (legacy support in use) [ 87.053688][ T6544] syz.7.953: attempt to access beyond end of device [ 87.053688][ T6544] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 87.067741][ T6544] syz.7.953: attempt to access beyond end of device [ 87.067741][ T6544] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 87.082472][ T6544] syz.7.953: attempt to access beyond end of device [ 87.082472][ T6544] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 87.096845][ T6544] syz.7.953: attempt to access beyond end of device [ 87.096845][ T6544] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 87.110511][ T6544] syz.7.953: attempt to access beyond end of device [ 87.110511][ T6544] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 87.124523][ T6544] syz.7.953: attempt to access beyond end of device [ 87.124523][ T6544] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 87.138425][ T6544] syz.7.953: attempt to access beyond end of device [ 87.138425][ T6544] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 87.260429][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.962'. [ 87.405542][ T6578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6578 comm=syz.6.966 [ 87.422153][ T6578] netlink: 'syz.6.966': attribute type 1 has an invalid length. [ 87.441641][ T6578] bond1: entered promiscuous mode [ 87.446727][ T6578] bond1: entered allmulticast mode [ 87.477939][ T6578] batadv1: entered allmulticast mode [ 87.483908][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.495794][ T6578] bond1: (slave batadv1): making interface the new active one [ 87.503294][ T6578] batadv1: entered promiscuous mode [ 87.526287][ T6578] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 87.591456][ T6557] loop8: detected capacity change from 0 to 2048 [ 87.624603][ T6557] loop8: p1 < > p4 < > [ 87.780749][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.8.978'. [ 87.797726][ T6610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6610 comm=syz.8.978 [ 88.170388][ T6622] ref_ctr increment failed for inode: 0x37 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b623700 [ 88.185382][ T6621] uprobe: syz.9.982:6621 failed to unregister, leaking uprobe [ 88.445727][ T6624] loop7: detected capacity change from 0 to 2048 [ 88.484687][ T6624] loop7: p1 < > p4 < > [ 88.553508][ T6634] lo speed is unknown, defaulting to 1000 [ 88.922555][ T6638] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 88.950515][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.989'. [ 88.996245][ T6641] SET target dimension over the limit! [ 89.047585][ T6648] loop8: detected capacity change from 0 to 2048 [ 89.094730][ T6648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.261678][ T4204] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.280402][ T6661] netlink: 76 bytes leftover after parsing attributes in process `syz.4.997'. [ 89.293866][ T4204] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 89.294154][ T6663] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 89.306106][ T4204] EXT4-fs (loop8): This should not happen!! Data will be lost [ 89.306106][ T4204] [ 89.306125][ T4204] EXT4-fs (loop8): Total free blocks count 0 [ 89.330187][ T4204] EXT4-fs (loop8): Free/Dirty block details [ 89.336146][ T4204] EXT4-fs (loop8): free_blocks=2415919104 [ 89.341880][ T4204] EXT4-fs (loop8): dirty_blocks=16 [ 89.347118][ T4204] EXT4-fs (loop8): Block reservation details [ 89.353139][ T4204] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 89.361463][ T4204] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 89.400838][ T6670] vlan2: entered allmulticast mode [ 89.430505][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 89.430523][ T29] audit: type=1326 audit(1743570187.176:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.460251][ T29] audit: type=1326 audit(1743570187.176:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.510205][ T29] audit: type=1326 audit(1743570187.176:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.533832][ T29] audit: type=1326 audit(1743570187.176:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.557420][ T29] audit: type=1326 audit(1743570187.176:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.580929][ T29] audit: type=1326 audit(1743570187.176:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.604526][ T29] audit: type=1326 audit(1743570187.186:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.628029][ T29] audit: type=1326 audit(1743570187.186:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.651639][ T29] audit: type=1326 audit(1743570187.206:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.675130][ T29] audit: type=1326 audit(1743570187.206:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.6.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef70bd169 code=0x7ffc0000 [ 89.710757][ T6678] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.764872][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1004'. [ 89.781212][ T6689] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.793964][ T6687] Cannot find del_set index 0 as target [ 89.827580][ T6689] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.897723][ T6689] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.967832][ T6689] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.979565][ T6705] lo speed is unknown, defaulting to 1000 [ 90.032438][ T6689] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041382][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1016'. [ 90.047810][ T6689] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.088305][ T6689] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113127][ T6689] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.266028][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1020'. [ 90.293495][ T6724] Cannot find del_set index 0 as target [ 90.320082][ T6730] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 90.398036][ T6736] loop6: detected capacity change from 0 to 1024 [ 90.405102][ T6736] EXT4-fs: Ignoring removed nobh option [ 90.428352][ T6736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.458194][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.500399][ T6746] sd 0:0:1:0: device reset [ 90.670160][ T6755] loop4: detected capacity change from 0 to 512 [ 90.678134][ T6755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.708730][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.721631][ T6755] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.750649][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.771140][ T6763] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.082083][ T6770] loop7: detected capacity change from 0 to 512 [ 91.100389][ T6770] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.1040: casefold flag without casefold feature [ 91.116186][ T6770] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.1040: couldn't read orphan inode 15 (err -117) [ 91.130106][ T6770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.172664][ T6775] loop9: detected capacity change from 0 to 128 [ 91.256862][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.537624][ T6791] netlink: 'syz.9.1048': attribute type 1 has an invalid length. [ 91.594876][ T6795] lo speed is unknown, defaulting to 1000 [ 91.627613][ T6793] vlan2: entered allmulticast mode [ 91.717061][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.733050][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.847021][ T6810] loop6: detected capacity change from 0 to 1024 [ 91.853756][ T6810] EXT4-fs: Ignoring removed nobh option [ 92.003258][ T6818] loop7: detected capacity change from 0 to 2048 [ 92.033029][ T4211] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.048243][ T4211] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 92.060484][ T4211] EXT4-fs (loop7): This should not happen!! Data will be lost [ 92.060484][ T4211] [ 92.070204][ T4211] EXT4-fs (loop7): Total free blocks count 0 [ 92.076311][ T4211] EXT4-fs (loop7): Free/Dirty block details [ 92.082197][ T4211] EXT4-fs (loop7): free_blocks=2415919104 [ 92.087938][ T4211] EXT4-fs (loop7): dirty_blocks=16 [ 92.093050][ T4211] EXT4-fs (loop7): Block reservation details [ 92.099055][ T4211] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 92.105566][ T4181] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 92.117833][ T4181] EXT4-fs (loop7): This should not happen!! Data will be lost [ 92.117833][ T4181] [ 92.268934][ T6829] rdma_op ffff88810d68f580 conn xmit_rdma 0000000000000000 [ 92.342509][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1063'. [ 92.353880][ T6833] loop4: detected capacity change from 0 to 512 [ 92.366684][ T6833] EXT4-fs (loop4): 1 orphan inode deleted [ 92.373205][ T6833] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.384693][ T4177] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 92.733202][ T6842] loop9: detected capacity change from 0 to 1024 [ 92.740854][ T6842] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 92.775126][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1067'. [ 92.787791][ T6844] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.811777][ T6846] loop6: detected capacity change from 0 to 512 [ 92.825912][ T6846] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.841852][ T6846] EXT4-fs (loop6): mount failed [ 92.847720][ T6844] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.920707][ T6844] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.970756][ T6844] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.038764][ T6853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6853 comm=syz.8.1071 [ 93.043153][ T6844] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063169][ T6844] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077615][ T6844] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097326][ T6844] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.123997][ T6865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.167100][ T6869] loop8: detected capacity change from 0 to 1024 [ 93.173821][ T6869] EXT4-fs: Ignoring removed orlov option [ 93.204832][ T6869] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 93.214799][ T6871] netlink: 'syz.9.1078': attribute type 1 has an invalid length. [ 93.236156][ T6873] vlan2: entered allmulticast mode [ 93.251999][ T6869] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.1077: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 93.273436][ T6869] EXT4-fs (loop8): Remounting filesystem read-only [ 93.389674][ T6889] wireguard0: entered promiscuous mode [ 93.395301][ T6889] wireguard0: entered allmulticast mode [ 93.502016][ T6896] loop9: detected capacity change from 0 to 1024 [ 93.509044][ T6896] EXT4-fs: Ignoring removed orlov option [ 93.543684][ T6906] loop8: detected capacity change from 0 to 1024 [ 93.550543][ T6906] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.561521][ T6906] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.572291][ T6906] JBD2: no valid journal superblock found [ 93.578264][ T6906] EXT4-fs (loop8): Could not load journal inode [ 93.643959][ T6912] vlan2: entered allmulticast mode [ 93.796189][ T6916] uprobe: syz.8.1094:6916 failed to unregister, leaking uprobe [ 94.002592][ T6923] loop8: detected capacity change from 0 to 1024 [ 94.009525][ T6923] EXT4-fs: Ignoring removed orlov option [ 94.015285][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.438918][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 94.438999][ T29] audit: type=1326 audit(1743570192.186:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.457850][ T6939] bridge_slave_0: left promiscuous mode [ 94.468698][ T29] audit: type=1326 audit(1743570192.186:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.474388][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.511481][ T29] audit: type=1326 audit(1743570192.186:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.535081][ T29] audit: type=1326 audit(1743570192.186:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.558546][ T29] audit: type=1326 audit(1743570192.186:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.581968][ T29] audit: type=1326 audit(1743570192.186:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.605403][ T29] audit: type=1326 audit(1743570192.186:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.628893][ T29] audit: type=1326 audit(1743570192.186:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.647734][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a3dae00: rx timeout, send abort [ 94.652266][ T29] audit: type=1326 audit(1743570192.186:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.664331][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a3dae00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 94.683765][ T29] audit: type=1326 audit(1743570192.186:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.8.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 94.759218][ T6899] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 94.772261][ T6939] bridge_slave_1: left allmulticast mode [ 94.777994][ T6939] bridge_slave_1: left promiscuous mode [ 94.783680][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.838068][ T6939] bond0: (slave bond_slave_0): Releasing backup interface [ 94.856864][ T6939] bond0: (slave bond_slave_1): Releasing backup interface [ 94.872373][ T6939] team0: Port device team_slave_0 removed [ 94.886712][ T6939] team0: Port device team_slave_1 removed [ 94.893718][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.901259][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.917056][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.924843][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.163244][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1118'. [ 95.468981][ T6999] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 95.499306][ T6999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.559751][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.569561][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1129'. [ 95.577778][ T6999] bond2: (slave batadv1): making interface the new active one [ 95.587544][ T6999] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 95.598543][ T7002] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.617679][ T7006] pim6reg1: entered promiscuous mode [ 95.622999][ T7006] pim6reg1: entered allmulticast mode [ 95.655727][ T7002] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.725737][ T7002] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.775712][ T7002] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.840951][ T7002] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.851936][ T7002] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.862705][ T7002] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.873922][ T7002] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233762][ T7026] netlink: 'syz.9.1137': attribute type 4 has an invalid length. [ 96.246500][ T7026] netlink: 'syz.9.1137': attribute type 4 has an invalid length. [ 96.333704][ T7029] can0: slcan on ttyS3. [ 96.479026][ T7031] loop6: detected capacity change from 0 to 1024 [ 96.750035][ T5670] EXT4-fs unmount: 13 callbacks suppressed [ 96.750053][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.004435][ T7020] can0 (unregistered): slcan off ttyS3. [ 97.065577][ T7059] siw: device registration error -23 [ 97.095571][ T7062] loop7: detected capacity change from 0 to 1024 [ 97.103454][ T7062] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 97.141915][ T7066] loop7: detected capacity change from 0 to 128 [ 97.196335][ T7072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7072 comm=syz.9.1153 [ 97.217226][ T7072] batadv1: entered allmulticast mode [ 97.230328][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812f017200: rx timeout, send abort [ 97.238720][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812f017200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.257878][ T7019] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 97.409610][ T7076] lo speed is unknown, defaulting to 1000 [ 97.831298][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.838605][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.848395][ T7080] bridge0: entered allmulticast mode [ 97.865458][ T7080] bridge_slave_1: left allmulticast mode [ 97.871208][ T7080] bridge_slave_1: left promiscuous mode [ 97.877068][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.887847][ T7080] bridge_slave_0: left promiscuous mode [ 97.893572][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.033832][ T7088] random: crng reseeded on system resumption [ 98.099624][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1160'. [ 98.268514][ T7095] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.284056][ T7098] smc: net device bond0 erased user defined pnetid SYZ0 [ 98.295124][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 98.342836][ T7104] lo speed is unknown, defaulting to 1000 [ 98.415940][ T7114] vlan2: entered allmulticast mode [ 98.464838][ T7120] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 98.483922][ T7120] hsr_slave_0: left promiscuous mode [ 98.497890][ T7124] No such timeout policy "syz0" [ 98.517500][ T7120] hsr_slave_1: left promiscuous mode [ 98.581596][ T7125] lo speed is unknown, defaulting to 1000 [ 98.735340][ T7118] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.817033][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 98.849675][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 98.889246][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1189'. [ 98.898261][ T7158] bridge_slave_1: left allmulticast mode [ 98.903918][ T7158] bridge_slave_1: left promiscuous mode [ 98.909798][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.918558][ T7158] bridge_slave_0: left allmulticast mode [ 98.924363][ T7158] bridge_slave_0: left promiscuous mode [ 98.930096][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.959844][ T7166] tmpfs: Bad value for 'mpol' [ 98.989994][ T7162] loop7: detected capacity change from 0 to 4096 [ 99.006065][ T7163] uprobe: syz.4.1191:7163 failed to unregister, leaking uprobe [ 99.016420][ T7162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.047674][ T7172] loop8: detected capacity change from 0 to 2048 [ 99.054628][ T7173] loop6: detected capacity change from 0 to 512 [ 99.062576][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.079221][ T7172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.101883][ T7173] EXT4-fs (loop6): 1 orphan inode deleted [ 99.117974][ T3738] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 99.141784][ T7173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.163651][ T7173] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.213569][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 99.237235][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.246884][ T7191] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1198'. [ 99.258129][ T7186] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1198'. [ 99.752173][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1210'. [ 99.831855][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.833400][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 99.833417][ T29] audit: type=1326 audit(1743570197.576:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 99.870974][ T29] audit: type=1326 audit(1743570197.596:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 99.894505][ T29] audit: type=1326 audit(1743570197.596:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 99.918237][ T29] audit: type=1326 audit(1743570197.596:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 99.963108][ T29] audit: type=1326 audit(1743570197.616:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 99.986718][ T29] audit: type=1326 audit(1743570197.646:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65e219fa25 code=0x7ffc0000 [ 100.010212][ T29] audit: type=1326 audit(1743570197.696:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 100.033791][ T29] audit: type=1326 audit(1743570197.706:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 100.058535][ T29] audit: type=1326 audit(1743570197.786:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 100.096973][ T7228] loop8: detected capacity change from 0 to 2048 [ 100.112965][ T29] audit: type=1326 audit(1743570197.836:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65e2109359 code=0x7ffc0000 [ 100.165817][ T7228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.256268][ T7243] sch_fq: defrate 2048 ignored. [ 100.319698][ T7250] siw: device registration error -23 [ 100.413384][ T7257] loop7: detected capacity change from 0 to 1024 [ 100.449297][ T7257] EXT4-fs: Ignoring removed orlov option [ 100.469920][ T7257] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.518451][ T7257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.546051][ T7257] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.1225: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 100.596680][ T7257] EXT4-fs (loop7): Remounting filesystem read-only [ 100.642229][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.675367][ T7271] netlink: 'syz.7.1230': attribute type 7 has an invalid length. [ 100.683124][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1230'. [ 100.891073][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.105505][ T7283] loop8: detected capacity change from 0 to 128 [ 101.135574][ T7284] loop4: detected capacity change from 0 to 512 [ 101.142136][ T7284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.158830][ T7284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.167504][ T7284] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.176619][ T7284] EXT4-fs (loop4): blocks per group (39) and clusters per group (32768) inconsistent [ 101.190485][ T7286] loop6: detected capacity change from 0 to 2048 [ 101.224732][ T7286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.351386][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.561264][ T7305] random: crng reseeded on system resumption [ 101.689941][ T7313] lo speed is unknown, defaulting to 1000 [ 102.899291][ T7355] netlink: 'syz.7.1260': attribute type 15 has an invalid length. [ 103.083421][ T7376] loop6: detected capacity change from 0 to 2048 [ 103.119232][ T7379] loop7: detected capacity change from 0 to 512 [ 103.127427][ T7381] netlink: 'syz.8.1270': attribute type 1 has an invalid length. [ 103.138472][ T7376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.152490][ T7379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.174404][ T7379] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.175150][ T7381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.214372][ T7387] gretap1: entered promiscuous mode [ 103.222384][ T7387] bond1: (slave gretap1): making interface the new active one [ 103.230542][ T7387] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.249530][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.269209][ T7381] vlan2: entered promiscuous mode [ 103.274308][ T7381] bond1: entered promiscuous mode [ 103.287348][ T7381] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 103.322321][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.369629][ T7392] loop6: detected capacity change from 0 to 512 [ 103.377675][ T7392] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.393365][ T7392] EXT4-fs (loop6): 1 orphan inode deleted [ 103.399289][ T7392] EXT4-fs (loop6): 1 truncate cleaned up [ 103.412656][ T7392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.429408][ T7392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.611938][ T7404] loop4: detected capacity change from 0 to 512 [ 103.656514][ T7404] EXT4-fs (loop4): 1 orphan inode deleted [ 103.662677][ T7404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.675600][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 103.690327][ T7404] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.788717][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.973087][ T7420] loop7: detected capacity change from 0 to 512 [ 104.021139][ T7430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7430 comm=syz.9.1287 [ 104.081388][ T7420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.096275][ T7420] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.139399][ T7420] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.1283: corrupted inode contents [ 104.193664][ T7420] EXT4-fs error (device loop7): ext4_dirty_inode:6074: inode #2: comm syz.7.1283: mark_inode_dirty error [ 104.246904][ T7420] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.1283: corrupted inode contents [ 104.317679][ T7420] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1283: mark_inode_dirty error [ 104.468833][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.490336][ T7447] loop8: detected capacity change from 0 to 2048 [ 104.644637][ T7458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.673230][ T7458] lo speed is unknown, defaulting to 1000 [ 104.713564][ T7463] netlink: 'syz.8.1297': attribute type 27 has an invalid length. [ 104.829271][ T7463] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.837802][ T7463] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.846442][ T7463] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.855004][ T7463] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.868368][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 104.868378][ T29] audit: type=1326 audit(1743570202.616:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 104.897961][ T29] audit: type=1326 audit(1743570202.616:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a07d169 code=0x7ffc0000 [ 104.922689][ T7470] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.984349][ T29] audit: type=1326 audit(1743570202.726:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 105.008184][ T7478] loop4: detected capacity change from 0 to 164 [ 105.008294][ T29] audit: type=1326 audit(1743570202.736:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 105.038046][ T29] audit: type=1326 audit(1743570202.736:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f65e216d169 code=0x7ffc0000 [ 105.038276][ T7478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.061477][ T29] audit: type=1326 audit(1743570202.736:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65e216d1a3 code=0x7ffc0000 [ 105.061508][ T29] audit: type=1326 audit(1743570202.736:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65e216bc1f code=0x7ffc0000 [ 105.083035][ T7478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.092956][ T29] audit: type=1326 audit(1743570202.736:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f65e216d1f7 code=0x7ffc0000 [ 105.092991][ T29] audit: type=1326 audit(1743570202.756:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65e216bad0 code=0x7ffc0000 [ 105.171389][ T29] audit: type=1326 audit(1743570202.756:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65e216cd6b code=0x7ffc0000 [ 105.215459][ T7470] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.281599][ T7470] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.303289][ T7492] __nla_validate_parse: 6 callbacks suppressed [ 105.303303][ T7492] netlink: 360 bytes leftover after parsing attributes in process `syz.6.1308'. [ 105.321922][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1308'. [ 105.338785][ T7470] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.400094][ T7503] syz_tun: entered promiscuous mode [ 105.405679][ T7503] vlan2: entered promiscuous mode [ 105.425001][ T7470] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.434087][ T7505] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1310'. [ 105.446517][ T7470] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.458973][ T7470] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.467422][ T7499] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1310'. [ 105.486888][ T7470] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.518621][ T7507] loop4: detected capacity change from 0 to 2048 [ 105.553315][ T7512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7512 comm=syz.6.1317 [ 105.575977][ T7507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.591494][ T7517] loop8: detected capacity change from 0 to 4096 [ 105.599773][ T7517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.625571][ T7525] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1326'. [ 105.654851][ T7518] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1326'. [ 105.753531][ T7535] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 105.801085][ T7517] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.985941][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.182049][ T7551] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.489984][ T7558] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.508184][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1330'. [ 106.550692][ T7558] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.707817][ T7558] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.836843][ T7558] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.849834][ T7568] loop7: detected capacity change from 0 to 512 [ 106.879150][ T7568] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 106.933202][ T7558] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.998511][ T7558] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.027939][ T7568] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.1333: corrupted xattr entries [ 107.067454][ T7558] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.096983][ T7568] EXT4-fs (loop7): Remounting filesystem read-only [ 107.110419][ T7558] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.119118][ T7568] EXT4-fs (loop7): 1 truncate cleaned up [ 107.139552][ T7568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.166316][ T7586] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1340'. [ 107.190103][ T7586] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1340'. [ 107.272998][ T7591] SELinux: failed to load policy [ 107.354132][ T7608] lo speed is unknown, defaulting to 1000 [ 107.402537][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.428253][ T7615] loop4: detected capacity change from 0 to 1024 [ 107.451141][ T7615] EXT4-fs: inline encryption not supported [ 107.457161][ T7615] EXT4-fs: Ignoring removed i_version option [ 107.477992][ T7615] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.501865][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1351'. [ 107.522618][ T7615] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.1354: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.539073][ T7615] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.1354: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.567085][ T7615] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1354: Failed to acquire dquot type 0 [ 107.580637][ T7615] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 107.604419][ T7615] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.1354: mark_inode_dirty error [ 107.622905][ T7615] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 107.652663][ T7615] EXT4-fs (loop4): 1 orphan inode deleted [ 107.658996][ T7615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.660209][ T7625] veth0_to_batadv: entered promiscuous mode [ 107.677185][ T7625] veth0_to_batadv: entered allmulticast mode [ 107.684065][ T4186] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.709461][ T7615] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #2: block 16: comm syz.4.1354: lblock 0 mapped to illegal pblock 16 (length 1) [ 107.728611][ T7629] loop8: detected capacity change from 0 to 512 [ 107.735308][ T7627] loop9: detected capacity change from 0 to 512 [ 107.742207][ T7627] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 107.752598][ T4186] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 107.768468][ T7627] EXT4-fs (loop9): 1 orphan inode deleted [ 107.774309][ T7627] EXT4-fs (loop9): 1 truncate cleaned up [ 107.780401][ T7627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.780785][ T7629] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 107.809003][ T7629] EXT4-fs (loop8): 1 truncate cleaned up [ 107.815431][ T7629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.838930][ T7627] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.848782][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.860683][ T3302] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 107.890300][ T3302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 107.902091][ T3302] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 107.928220][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.142430][ T7665] loop8: detected capacity change from 0 to 8192 [ 108.149002][ T7669] wireguard0: entered promiscuous mode [ 108.154516][ T7669] wireguard0: entered allmulticast mode [ 108.285081][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.293734][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.514403][ T7679] SELinux: ebitmap: truncated map [ 108.520389][ T7679] SELinux: failed to load policy [ 108.593562][ T7681] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.665810][ T7681] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.726754][ T7681] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.776066][ T7681] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.829223][ T7690] netlink: 'syz.4.1382': attribute type 11 has an invalid length. [ 108.847868][ T7690] loop4: detected capacity change from 0 to 512 [ 108.849131][ T7681] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.864686][ T7690] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 108.874254][ T7681] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.895679][ T7681] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.910232][ T7681] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.031969][ T7697] futex_wake_op: syz.7.1385 tries to shift op by -1; fix this program [ 109.288105][ T7718] netlink: 'syz.4.1395': attribute type 4 has an invalid length. [ 109.312964][ T5038] lo speed is unknown, defaulting to 1000 [ 109.318874][ T5038] sz1: Port: 1 Link DOWN [ 109.338082][ T5038] lo speed is unknown, defaulting to 1000 [ 109.429824][ T7731] IPv6: sit1: Disabled Multicast RS [ 109.452383][ T5038] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 109.460027][ T7733] loop6: detected capacity change from 0 to 1024 [ 109.460562][ T5038] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.470369][ T7733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.483323][ T7733] EXT4-fs: Mount option(s) incompatible with ext2 [ 109.586861][ T7739] pim6reg1: entered promiscuous mode [ 109.592377][ T7739] pim6reg1: entered allmulticast mode [ 109.875184][ T7756] loop8: detected capacity change from 0 to 2048 [ 109.886562][ T7758] pim6reg: entered allmulticast mode [ 109.892479][ T7758] pim6reg: left allmulticast mode [ 109.899297][ T7756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.996547][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 109.996562][ T29] audit: type=1326 audit(1743570207.746:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.041857][ T7764] loop7: detected capacity change from 0 to 1024 [ 110.078945][ T7764] EXT4-fs: Ignoring removed orlov option [ 110.104013][ T29] audit: type=1326 audit(1743570207.776:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.127657][ T29] audit: type=1326 audit(1743570207.776:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.131969][ T7764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.151046][ T29] audit: type=1326 audit(1743570207.776:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.151080][ T29] audit: type=1326 audit(1743570207.776:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.151112][ T29] audit: type=1326 audit(1743570207.786:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.219487][ T7769] bond1: entered promiscuous mode [ 110.233862][ T29] audit: type=1326 audit(1743570207.786:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.238892][ T7769] bond1: entered allmulticast mode [ 110.267624][ T29] audit: type=1326 audit(1743570207.786:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.281033][ T7769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.291091][ T29] audit: type=1326 audit(1743570207.786:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.291125][ T29] audit: type=1326 audit(1743570207.786:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.7.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 110.357790][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.370607][ T7777] SELinux: Context system_u:object_r:devicekit_var_run_t:s0 is not valid (left unmapped). [ 110.371663][ T7769] bond1 (unregistering): Released all slaves [ 110.420689][ T7780] loop6: detected capacity change from 0 to 1024 [ 110.436279][ T7780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.476683][ T7780] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.1420: Allocating blocks 497-513 which overlap fs metadata [ 110.498330][ T7780] EXT4-fs (loop6): pa ffff8881065a8a80: logic 16, phys. 145, len 23 [ 110.506445][ T7780] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 110.517468][ T7780] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 110.525726][ T7791] hub 9-0:1.0: USB hub found [ 110.529857][ T7780] EXT4-fs (loop6): This should not happen!! Data will be lost [ 110.529857][ T7780] [ 110.541544][ T7791] hub 9-0:1.0: 8 ports detected [ 110.543977][ T7780] EXT4-fs (loop6): Total free blocks count 0 [ 110.554970][ T7780] EXT4-fs (loop6): Free/Dirty block details [ 110.560885][ T7780] EXT4-fs (loop6): free_blocks=16 [ 110.565961][ T7780] EXT4-fs (loop6): dirty_blocks=0 [ 110.570995][ T7780] EXT4-fs (loop6): Block reservation details [ 110.577073][ T7780] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 110.587264][ T7794] macsec0: entered promiscuous mode [ 110.819981][ T7806] loop8: detected capacity change from 0 to 2048 [ 110.826880][ T7806] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.848052][ T7808] loop6: detected capacity change from 0 to 256 [ 110.875823][ T7806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.890070][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.899754][ T7806] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.927106][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.946707][ T7815] __nla_validate_parse: 6 callbacks suppressed [ 110.946724][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1433'. [ 111.091382][ T7828] netlink: 'syz.7.1439': attribute type 27 has an invalid length. [ 111.124840][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.131993][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.247940][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.259457][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.296557][ T7828] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.305039][ T7828] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.313388][ T7828] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.321833][ T7828] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.450887][ T7829] lo speed is unknown, defaulting to 1000 [ 111.675871][ T7840] loop4: detected capacity change from 0 to 1024 [ 111.682815][ T7840] EXT4-fs: Ignoring removed orlov option [ 111.693024][ T7840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.884980][ T7846] syzkaller0: entered promiscuous mode [ 111.890514][ T7846] syzkaller0: entered allmulticast mode [ 112.051183][ T5036] Process accounting resumed [ 112.209549][ T7868] loop6: detected capacity change from 0 to 128 [ 112.219010][ T7868] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.247414][ T7868] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.282650][ T7875] netlink: 'syz.9.1458': attribute type 6 has an invalid length. [ 112.622994][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.836658][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1463'. [ 112.968876][ T7893] loop8: detected capacity change from 0 to 512 [ 113.057321][ T7893] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.070146][ T7893] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.090333][ T36] IPVS: starting estimator thread 0... [ 113.102587][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.184975][ T7899] IPVS: using max 2208 ests per chain, 110400 per kthread [ 113.374912][ T7919] loop8: detected capacity change from 0 to 1024 [ 113.386759][ T7919] EXT4-fs: Ignoring removed orlov option [ 113.404891][ T7919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.492612][ T7929] SELinux: ebitmap: truncated map [ 113.498451][ T7929] SELinux: failed to load policy [ 113.586677][ T7935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.669714][ T7939] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1481'. [ 113.679413][ T7938] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1481'. [ 114.387028][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.452087][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1490'. [ 114.462621][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1490'. [ 114.507611][ T7968] loop9: detected capacity change from 0 to 256 [ 114.592872][ T7978] netlink: 'syz.4.1498': attribute type 6 has an invalid length. [ 114.616565][ T7981] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1494'. [ 114.629641][ T7973] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1494'. [ 114.635089][ T7983] futex_wake_op: syz.4.1500 tries to shift op by -1; fix this program [ 114.701389][ T7988] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1502'. [ 114.737293][ T7992] loop6: detected capacity change from 0 to 256 [ 114.749136][ T7992] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.791545][ T7996] lo speed is unknown, defaulting to 1000 [ 114.838757][ T8002] pim6reg1: entered promiscuous mode [ 114.844110][ T8002] pim6reg1: entered allmulticast mode [ 114.865993][ T8005] loop4: detected capacity change from 0 to 128 [ 114.873077][ T8005] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.906305][ T8005] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.026228][ T8012] futex_wake_op: syz.6.1513 tries to shift op by -1; fix this program [ 115.050456][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'. [ 115.147476][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 115.147489][ T29] audit: type=1400 audit(1743570212.896:4600): avc: denied { ioctl } for pid=8021 comm="syz.7.1517" path="socket:[22737]" dev="sockfs" ino=22737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.149478][ T5038] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 115.182455][ T29] audit: type=1400 audit(1743570212.896:4601): avc: denied { read write } for pid=8021 comm="syz.7.1517" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.209548][ T29] audit: type=1400 audit(1743570212.896:4602): avc: denied { open } for pid=8021 comm="syz.7.1517" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.243168][ T8022] loop7: detected capacity change from 0 to 1024 [ 115.250361][ T8022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.258949][ T5038] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.269934][ T8022] EXT4-fs: Mount option(s) incompatible with ext2 [ 115.280521][ T29] audit: type=1400 audit(1743570213.026:4603): avc: denied { write } for pid=8021 comm="syz.7.1517" name="hidraw0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.341785][ T29] audit: type=1400 audit(1743570213.086:4604): avc: denied { connect } for pid=8027 comm="syz.8.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.372822][ T8030] loop9: detected capacity change from 0 to 256 [ 115.379730][ T8032] : renamed from bond0 [ 115.382346][ T8030] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.383969][ T29] audit: type=1400 audit(1743570213.126:4605): avc: denied { ioctl } for pid=8031 comm="syz.8.1521" path="socket:[22767]" dev="sockfs" ino=22767 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.520992][ T29] audit: type=1400 audit(1743570213.266:4606): avc: denied { mount } for pid=8037 comm="syz.8.1524" name="/" dev="configfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.543763][ T29] audit: type=1400 audit(1743570213.266:4607): avc: denied { search } for pid=8037 comm="syz.8.1524" name="/" dev="configfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.566751][ T29] audit: type=1400 audit(1743570213.276:4608): avc: denied { read } for pid=8037 comm="syz.8.1524" name="/" dev="configfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.588877][ T29] audit: type=1400 audit(1743570213.276:4609): avc: denied { open } for pid=8037 comm="syz.8.1524" path="/" dev="configfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.611427][ T8040] loop9: detected capacity change from 0 to 2048 [ 115.631577][ T8043] loop8: detected capacity change from 0 to 128 [ 115.638386][ T8040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.638480][ T8043] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.662688][ T8043] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.840536][ T6382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.865558][ T8054] xt_hashlimit: size too large, truncated to 1048576 [ 115.997188][ T8065] __nla_validate_parse: 3 callbacks suppressed [ 115.997206][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 116.034084][ T8069] loop7: detected capacity change from 0 to 256 [ 116.064064][ T8069] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.118350][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1537'. [ 116.137044][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1537'. [ 116.231603][ T8079] loop6: detected capacity change from 0 to 1024 [ 116.246886][ T8079] EXT4-fs: Ignoring removed orlov option [ 116.252250][ T8083] loop4: detected capacity change from 0 to 2048 [ 116.267595][ T8079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.325134][ T8083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.474490][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.483067][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.573228][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.596368][ T5043] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 116.604464][ T5043] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.619762][ T8100] loop4: detected capacity change from 0 to 1024 [ 116.626480][ T8100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.633470][ T8100] EXT4-fs: Mount option(s) incompatible with ext2 [ 117.013031][ T8102] smc: net device bond0 applied user defined pnetid SYZ0 [ 117.020647][ T8102] smc: net device bond0 erased user defined pnetid SYZ0 [ 117.133809][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.205109][ T8116] SELinux: syz.8.1552 (8116) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.248515][ T8118] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.311781][ T8127] loop7: detected capacity change from 0 to 2048 [ 117.326086][ T8127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.363594][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.374072][ T8136] netlink: 'syz.6.1560': attribute type 4 has an invalid length. [ 117.386002][ T8136] netlink: 'syz.6.1560': attribute type 4 has an invalid length. [ 117.415951][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1562'. [ 117.511218][ T8153] SELinux: syz.9.1567 (8153) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.524214][ T8158] loop8: detected capacity change from 0 to 512 [ 117.541427][ T8158] EXT4-fs: Ignoring removed nobh option [ 117.556052][ T8158] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1569: invalid indirect mapped block 256 (level 2) [ 117.567886][ T8156] lo speed is unknown, defaulting to 1000 [ 117.569806][ T8158] EXT4-fs (loop8): 2 truncates cleaned up [ 117.581714][ T8158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.619664][ T8161] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.658519][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.691427][ T8161] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.746718][ T8161] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.840656][ T8174] SELinux: ebitmap: truncated map [ 117.847390][ T8174] SELinux: failed to load policy [ 117.848340][ T8161] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.895906][ T8178] loop8: detected capacity change from 0 to 2048 [ 117.902499][ T8178] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 117.919689][ T8161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.931476][ T8161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.943335][ T8161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.955867][ T8161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.133913][ T8188] loop4: detected capacity change from 0 to 8192 [ 118.468279][ T8200] netlink: 'syz.9.1586': attribute type 4 has an invalid length. [ 118.483856][ T8200] netlink: 'syz.9.1586': attribute type 4 has an invalid length. [ 118.587582][ T8205] loop9: detected capacity change from 0 to 1024 [ 118.595285][ T8205] EXT4-fs: Ignoring removed orlov option [ 118.612927][ T8205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.679952][ T6382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.691208][ T8211] bridge: RTM_NEWNEIGH with invalid ether address [ 118.912126][ T8228] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.967945][ T8228] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.023020][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1597'. [ 119.033756][ T8228] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.051548][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1597'. [ 119.076772][ T8228] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.131087][ T8228] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.156528][ T8233] loop9: detected capacity change from 0 to 8192 [ 119.162222][ T8228] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.177867][ T8233] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.207406][ T8228] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.219520][ T8228] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.239508][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.250164][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.292903][ T8241] loop4: detected capacity change from 0 to 512 [ 119.621671][ T8262] xt_nfacct: accounting object `syz1' does not exists [ 119.732170][ T8267] loop6: detected capacity change from 0 to 256 [ 119.763084][ T8267] FAT-fs (loop6): Directory bread(block 64) failed [ 119.772404][ T8267] FAT-fs (loop6): Directory bread(block 65) failed [ 119.780987][ T8267] FAT-fs (loop6): Directory bread(block 66) failed [ 119.784574][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.795138][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.798713][ T8267] FAT-fs (loop6): Directory bread(block 67) failed [ 119.802533][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.809169][ T8267] FAT-fs (loop6): Directory bread(block 68) failed [ 119.827603][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.835092][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.842498][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.849981][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.857517][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.860067][ T8267] FAT-fs (loop6): Directory bread(block 69) failed [ 119.864954][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.878849][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.886306][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.893683][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.901091][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.906123][ T8273] loop8: detected capacity change from 0 to 2048 [ 119.908478][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.924769][ T8267] FAT-fs (loop6): Directory bread(block 70) failed [ 119.932678][ T8267] FAT-fs (loop6): Directory bread(block 71) failed [ 119.939343][ T8267] FAT-fs (loop6): Directory bread(block 72) failed [ 119.945975][ T8267] FAT-fs (loop6): Directory bread(block 73) failed [ 119.955761][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.960513][ T8276] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.963151][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.977643][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.985065][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.992464][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.999878][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.007307][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.014794][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.022238][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.029696][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.037165][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.044707][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.052100][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.059533][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.068240][ T8273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.070434][ T1037] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.137652][ T8284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 120.155820][ T8287] loop4: detected capacity change from 0 to 128 [ 120.162582][ T8287] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.179523][ T8283] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 120.189678][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 120.189694][ T29] audit: type=1400 audit(1743570217.926:4813): avc: denied { mac_admin } for pid=8282 comm="syz.7.1618" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.190902][ T8287] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.195942][ T29] audit: type=1400 audit(1743570217.936:4814): avc: denied { relabelto } for pid=8282 comm="syz.7.1618" name="cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 120.253401][ T29] audit: type=1400 audit(1743570217.936:4815): avc: denied { associate } for pid=8282 comm="syz.7.1618" name="cgroup.procs" dev="cgroup" ino=396 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 120.291279][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.342403][ T8294] loop7: detected capacity change from 0 to 2048 [ 120.410505][ T8294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.541477][ T29] audit: type=1400 audit(1743570218.286:4816): avc: denied { name_bind } for pid=8314 comm="syz.9.1630" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 120.567963][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1627'. [ 120.600438][ T29] audit: type=1326 audit(1743570218.326:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.624015][ T29] audit: type=1326 audit(1743570218.326:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.647485][ T29] audit: type=1326 audit(1743570218.326:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.671001][ T29] audit: type=1326 audit(1743570218.326:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.694492][ T29] audit: type=1326 audit(1743570218.326:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.717997][ T29] audit: type=1326 audit(1743570218.326:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.9.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0a7a8d169 code=0x7ffc0000 [ 120.762001][ T8323] loop8: detected capacity change from 0 to 256 [ 120.806715][ T8325] loop9: detected capacity change from 0 to 2048 [ 120.813410][ T8325] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 120.919528][ T8323] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.046082][ T4186] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 121.082949][ T4186] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 121.095605][ T4186] EXT4-fs (loop7): This should not happen!! Data will be lost [ 121.095605][ T4186] [ 121.105249][ T4186] EXT4-fs (loop7): Total free blocks count 0 [ 121.111222][ T4186] EXT4-fs (loop7): Free/Dirty block details [ 121.117133][ T4186] EXT4-fs (loop7): free_blocks=2415919504 [ 121.122868][ T4186] EXT4-fs (loop7): dirty_blocks=16400 [ 121.128262][ T4186] EXT4-fs (loop7): Block reservation details [ 121.134271][ T4186] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 121.192975][ T4186] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 121.588024][ T8381] futex_wake_op: syz.9.1648 tries to shift op by -1; fix this program [ 121.768906][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 121.871411][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'. [ 122.033706][ T8393] veth13: entered allmulticast mode [ 122.240951][ T8429] loop4: detected capacity change from 0 to 1024 [ 122.250703][ T8429] EXT4-fs: Ignoring removed orlov option [ 122.400142][ T8451] syzkaller0: entered promiscuous mode [ 122.405732][ T8451] syzkaller0: entered allmulticast mode [ 122.454502][ T4178] syzkaller0: tun_net_xmit 48 [ 122.650982][ T8451] syzkaller0: create flow: hash 2856134493 index 1 [ 122.756326][ T8451] syzkaller0: delete flow: hash 2856134493 index 1 [ 123.213265][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 123.293670][ T8521] loop6: detected capacity change from 0 to 128 [ 123.314974][ T8521] bio_check_eod: 218 callbacks suppressed [ 123.314987][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.314987][ T8521] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 123.334797][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.334797][ T8521] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 123.348341][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.348341][ T8521] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 123.361936][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.361936][ T8521] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 123.376283][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.376283][ T8521] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 123.392003][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.392003][ T8521] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 123.415246][ T8528] loop7: detected capacity change from 0 to 512 [ 123.416694][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.416694][ T8521] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 123.422041][ T8528] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.436639][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.436639][ T8521] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 123.455644][ T8528] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.458014][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.458014][ T8521] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 123.482011][ T8530] veth0_vlan: entered allmulticast mode [ 123.485866][ T8521] syz.6.1664: attempt to access beyond end of device [ 123.485866][ T8521] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 123.505833][ T8521] Buffer I/O error on dev loop6, logical block 353, lost async page write [ 123.509419][ T8528] EXT4-fs (loop7): 1 truncate cleaned up [ 123.525716][ T8521] Buffer I/O error on dev loop6, logical block 354, lost async page write [ 123.534603][ T8521] Buffer I/O error on dev loop6, logical block 355, lost async page write [ 123.543267][ T8521] Buffer I/O error on dev loop6, logical block 356, lost async page write [ 123.552713][ T8521] Buffer I/O error on dev loop6, logical block 357, lost async page write [ 123.562200][ T8530] veth0_vlan: left promiscuous mode [ 123.567517][ T8530] veth0_vlan: entered promiscuous mode [ 123.580013][ T8521] Buffer I/O error on dev loop6, logical block 358, lost async page write [ 123.589756][ T8521] Buffer I/O error on dev loop6, logical block 359, lost async page write [ 123.664173][ T8536] loop4: detected capacity change from 0 to 2048 [ 123.674150][ T8536] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 124.403928][ T8557] netlink: 'syz.4.1675': attribute type 10 has an invalid length. [ 124.420623][ T8557] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 124.497762][ T8568] tipc: Started in network mode [ 124.502656][ T8568] tipc: Node identity 7, cluster identity 1 [ 124.508648][ T8568] tipc: Node number set to 7 [ 125.159336][ T8582] loop6: detected capacity change from 0 to 2048 [ 125.165937][ T8582] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 125.441016][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 125.441033][ T29] audit: type=1400 audit(1743570223.186:4910): avc: denied { execute } for pid=8588 comm="syz.4.1689" path="/368/file0/bus" dev="ramfs" ino=24765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 125.619855][ T8593] netlink: 'syz.6.1690': attribute type 7 has an invalid length. [ 125.627691][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1690'. [ 125.645310][ T8595] macvlan2: entered promiscuous mode [ 125.650670][ T8595] bridge0: entered promiscuous mode [ 125.658901][ T8595] bridge0: port 3(macvlan2) entered blocking state [ 125.665572][ T8595] bridge0: port 3(macvlan2) entered disabled state [ 125.672332][ T8595] macvlan2: entered allmulticast mode [ 125.677783][ T8595] bridge0: entered allmulticast mode [ 125.686208][ T8595] macvlan2: left allmulticast mode [ 125.689389][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1693'. [ 125.691379][ T8595] bridge0: left allmulticast mode [ 125.700359][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1693'. [ 125.717928][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1693'. [ 125.727301][ T8595] bridge0: left promiscuous mode [ 125.768278][ T8591] netlink: 'syz.8.1691': attribute type 10 has an invalid length. [ 125.770471][ T8603] loop4: detected capacity change from 0 to 512 [ 125.800612][ T8591] : (slave bridge0): Enslaving as an active interface with an up link [ 125.813372][ T8603] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.836328][ T8610] netlink: 'syz.7.1697': attribute type 21 has an invalid length. [ 125.844198][ T8610] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1697'. [ 125.862916][ T8612] lo speed is unknown, defaulting to 1000 [ 125.877911][ T29] audit: type=1400 audit(1743570223.626:4911): avc: denied { lock } for pid=8602 comm="syz.4.1694" path="/369/file0/file1" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.908072][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1698'. [ 125.917069][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1698'. [ 125.928771][ T8617] EXT4-fs (loop4): shut down requested (0) [ 125.928959][ T29] audit: type=1400 audit(1743570223.676:4912): avc: denied { ioctl } for pid=8602 comm="syz.4.1694" path="/369/file0/memory.numa_stat" dev="loop4" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.963396][ T29] audit: type=1400 audit(1743570223.706:4913): avc: denied { execute } for pid=8615 comm="syz.7.1699" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.049220][ T29] audit: type=1400 audit(1743570223.796:4914): avc: denied { bind } for pid=8625 comm="syz.8.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.068680][ T29] audit: type=1400 audit(1743570223.796:4915): avc: denied { name_bind } for pid=8625 comm="syz.8.1701" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 126.089501][ T29] audit: type=1400 audit(1743570223.796:4916): avc: denied { node_bind } for pid=8625 comm="syz.8.1701" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 126.110369][ T29] audit: type=1400 audit(1743570223.796:4917): avc: denied { listen } for pid=8625 comm="syz.8.1701" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.149932][ T8630] loop8: detected capacity change from 0 to 1024 [ 126.171225][ T8630] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 126.196651][ T8630] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 126.209051][ T8630] EXT4-fs (loop8): This should not happen!! Data will be lost [ 126.209051][ T8630] [ 126.218729][ T8630] EXT4-fs (loop8): Total free blocks count 0 [ 126.224735][ T8630] EXT4-fs (loop8): Free/Dirty block details [ 126.230635][ T8630] EXT4-fs (loop8): free_blocks=68451041280 [ 126.236492][ T8630] EXT4-fs (loop8): dirty_blocks=16 [ 126.241615][ T8630] EXT4-fs (loop8): Block reservation details [ 126.247699][ T8630] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 126.268414][ T8636] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 36 with error 28 [ 126.280886][ T8636] EXT4-fs (loop8): This should not happen!! Data will be lost [ 126.280886][ T8636] [ 126.330104][ T29] audit: type=1400 audit(1743570224.076:4918): avc: denied { setopt } for pid=8629 comm="syz.8.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.352063][ T8624] loop9: detected capacity change from 0 to 512 [ 126.418899][ T29] audit: type=1400 audit(1743570224.166:4919): avc: denied { create } for pid=8640 comm="syz.8.1704" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.420952][ T8624] EXT4-fs (loop9): 1 orphan inode deleted [ 126.448417][ T7414] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:69: Failed to release dquot type 1 [ 126.470684][ T8624] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.564682][ T5043] IPVS: starting estimator thread 0... [ 126.664743][ T8648] IPVS: using max 2400 ests per chain, 120000 per kthread [ 126.818928][ T6382] EXT4-fs unmount: 10 callbacks suppressed [ 126.818946][ T6382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.896399][ T8669] netlink: 'syz.9.1714': attribute type 13 has an invalid length. [ 126.947513][ T8674] __nla_validate_parse: 10 callbacks suppressed [ 126.947591][ T8674] netlink: 165 bytes leftover after parsing attributes in process `syz.8.1717'. [ 126.980153][ T8674] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1717'. [ 127.051349][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.061623][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.101802][ T8669] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.104667][ T8678] loop8: detected capacity change from 0 to 512 [ 127.110353][ T8669] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.124990][ T8669] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.133442][ T8669] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.188010][ T8678] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 127.231902][ T8678] EXT4-fs (loop8): 1 truncate cleaned up [ 127.245253][ T8678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.357670][ T8689] bridge: RTM_NEWNEIGH with invalid ether address [ 127.401910][ T8694] loop9: detected capacity change from 0 to 128 [ 127.421199][ T8694] FAT-fs (loop9): bogus number of reserved sectors [ 127.427847][ T8694] FAT-fs (loop9): Can't find a valid FAT filesystem [ 127.563797][ T8707] loop6: detected capacity change from 0 to 128 [ 127.572297][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.636323][ T8709] loop8: detected capacity change from 0 to 2048 [ 127.667926][ T8709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.690627][ T8715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1733'. [ 127.702068][ T8715] 0ªX¹¦À: renamed from caif0 [ 127.707399][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.716752][ T8715] 0ªX¹¦À: entered allmulticast mode [ 127.721981][ T8715] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 127.760583][ T8720] netlink: 'syz.4.1735': attribute type 4 has an invalid length. [ 127.771989][ T8720] netlink: 'syz.4.1735': attribute type 4 has an invalid length. [ 127.782215][ T1037] lo speed is unknown, defaulting to 1000 [ 127.788090][ T1037] sz1: Port: 1 Link ACTIVE [ 127.810334][ T5038] lo speed is unknown, defaulting to 1000 [ 127.815237][ T8724] loop4: detected capacity change from 0 to 512 [ 127.823472][ T8727] netlink: 'syz.8.1736': attribute type 10 has an invalid length. [ 127.831481][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1736'. [ 127.841090][ T8724] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.850181][ T8724] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 127.858892][ T8727] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.867180][ T8727] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.868755][ T8726] loop6: detected capacity change from 0 to 8192 [ 127.876845][ T8727] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 127.891170][ T8727] team0: Failed to send options change via netlink (err -105) [ 127.891231][ T8724] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 127.898729][ T8727] team0: Port device geneve1 added [ 127.912941][ T8724] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 127.920978][ T8724] System zones: 0-2, 18-18, 34-34 [ 127.927188][ T8722] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.939033][ T8724] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.954154][ T8724] EXT4-fs (loop4): 1 truncate cleaned up [ 127.960645][ T8724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.973842][ T8722] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.990427][ T8730] ref_ctr increment failed for inode: 0x468 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b623c80 [ 128.002033][ T8729] uprobe: syz.6.1739:8729 failed to unregister, leaking uprobe [ 128.021023][ T8722] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.032505][ T8722] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.044108][ T8722] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.056390][ T8722] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.100123][ T8735] pim6reg1: entered allmulticast mode [ 128.129727][ T8735] pim6reg1: entered promiscuous mode [ 128.160299][ T8737] bridge1: entered promiscuous mode [ 128.298103][ T8743] loop7: detected capacity change from 0 to 1024 [ 128.321440][ T8743] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 128.356296][ T8748] sch_fq: defrate 0 ignored. [ 128.363239][ T8743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.511306][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.547748][ T8769] loop7: detected capacity change from 0 to 1024 [ 128.556421][ T8769] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 128.567278][ T8769] EXT4-fs (loop7): group descriptors corrupted! [ 128.963503][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.008737][ T8778] hub 2-0:1.0: USB hub found [ 129.013678][ T8778] hub 2-0:1.0: 8 ports detected [ 129.150860][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.159922][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.168973][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.185193][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.194143][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.203261][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 129.417996][ T8808] loop8: detected capacity change from 0 to 512 [ 129.447630][ T8808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.513300][ T8817] loop7: detected capacity change from 0 to 128 [ 129.543767][ T8808] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.654597][ T8827] macsec1: entered promiscuous mode [ 129.659849][ T8827] team0: entered promiscuous mode [ 129.664987][ T8827] team_slave_0: entered promiscuous mode [ 129.670753][ T8827] team_slave_1: entered promiscuous mode [ 129.691364][ T8827] team0: left promiscuous mode [ 129.696210][ T8827] team_slave_0: left promiscuous mode [ 129.701703][ T8827] team_slave_1: left promiscuous mode [ 129.829914][ T8844] netlink: 'syz.4.1785': attribute type 13 has an invalid length. [ 129.852808][ T8840] macvlan2: entered promiscuous mode [ 129.859196][ T8840] bridge0: entered promiscuous mode [ 129.870834][ T8840] bridge0: port 3(macvlan2) entered blocking state [ 129.877770][ T8840] bridge0: port 3(macvlan2) entered disabled state [ 129.886634][ T8840] macvlan2: entered allmulticast mode [ 129.892703][ T8840] bridge0: entered allmulticast mode [ 129.907199][ T8840] macvlan2: left allmulticast mode [ 129.913018][ T8840] bridge0: left allmulticast mode [ 129.951828][ T8840] bridge0: left promiscuous mode [ 129.997469][ T8854] loop9: detected capacity change from 0 to 128 [ 130.168573][ T8844] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.177120][ T8844] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.185649][ T8844] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.194052][ T8844] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.285817][ T3382] lo speed is unknown, defaulting to 1000 [ 130.291661][ T3382] sz1: Port: 1 Link DOWN [ 130.334095][ T8862] vhci_hcd: invalid port number 255 [ 130.339404][ T8862] vhci_hcd: default hub control req: 0300 v0004 i00ff l0 [ 130.370101][ T6316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.448721][ T8874] loop9: detected capacity change from 0 to 764 [ 130.458227][ T8876] tipc: Enabling of bearer rejected, already enabled [ 130.466017][ T5047] lo speed is unknown, defaulting to 1000 [ 130.477346][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 130.477362][ T29] audit: type=1400 audit(1743570228.216:5071): avc: denied { mount } for pid=8873 comm="syz.9.1798" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 130.477353][ T8871] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 130.505962][ T29] audit: type=1400 audit(1743570228.256:5072): avc: denied { unmount } for pid=6382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 130.541008][ T8876] tipc: Disabling bearer [ 130.594829][ T29] audit: type=1326 audit(1743570228.346:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.618650][ T29] audit: type=1326 audit(1743570228.346:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.642227][ T29] audit: type=1326 audit(1743570228.346:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.643058][ T8888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.665786][ T29] audit: type=1326 audit(1743570228.346:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.699602][ T29] audit: type=1326 audit(1743570228.346:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.723044][ T29] audit: type=1326 audit(1743570228.346:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.746433][ T29] audit: type=1326 audit(1743570228.346:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.772325][ T29] audit: type=1326 audit(1743570228.516:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.7.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bfffd169 code=0x7ffc0000 [ 130.959254][ T8903] loop9: detected capacity change from 0 to 8192 [ 131.724303][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.364405][ T9005] ================================================================== [ 132.372615][ T9005] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 132.379924][ T9005] [ 132.382268][ T9005] write to 0xffff888118de1e00 of 4 bytes by task 9008 on cpu 1: [ 132.390032][ T9005] touch_atime+0x1f3/0x350 [ 132.394462][ T9005] shmem_file_splice_read+0x584/0x5d0 [ 132.399855][ T9005] splice_direct_to_actor+0x26c/0x680 [ 132.405255][ T9005] do_splice_direct+0xd9/0x150 [ 132.410036][ T9005] do_sendfile+0x40a/0x690 [ 132.414471][ T9005] __x64_sys_sendfile64+0x113/0x160 [ 132.419702][ T9005] x64_sys_call+0xfc3/0x2e10 [ 132.424308][ T9005] do_syscall_64+0xc9/0x1c0 [ 132.428855][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.434769][ T9005] [ 132.437116][ T9005] read to 0xffff888118de1e00 of 4 bytes by task 9005 on cpu 0: [ 132.444687][ T9005] atime_needs_update+0x261/0x3e0 [ 132.449751][ T9005] touch_atime+0x4a/0x350 [ 132.454115][ T9005] shmem_file_splice_read+0x584/0x5d0 [ 132.459501][ T9005] splice_direct_to_actor+0x26c/0x680 [ 132.464897][ T9005] do_splice_direct+0xd9/0x150 [ 132.469706][ T9005] do_sendfile+0x40a/0x690 [ 132.474139][ T9005] __x64_sys_sendfile64+0x113/0x160 [ 132.479394][ T9005] x64_sys_call+0xfc3/0x2e10 [ 132.483996][ T9005] do_syscall_64+0xc9/0x1c0 [ 132.488518][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.494416][ T9005] [ 132.496762][ T9005] value changed: 0x065f7e1f -> 0x06f8149f [ 132.502482][ T9005] [ 132.504805][ T9005] Reported by Kernel Concurrency Sanitizer on: [ 132.510951][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.6.1857 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(voluntary) [ 132.523030][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.533104][ T9005] ================================================================== [ 132.764426][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration