last executing test programs: 1m46.519272643s ago: executing program 0 (id=62): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) 1m46.277126583s ago: executing program 0 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m46.0687149s ago: executing program 0 (id=71): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @multicast2, 0x1, 0xa, [@local, @private=0xa010101, @multicast1, @loopback, @broadcast, @private=0xa010102, @local, @loopback, @multicast2, @loopback]}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x2, 0x44004) 1m45.142880694s ago: executing program 0 (id=84): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0xc) unlink(&(0x7f0000000100)='./file1\x00') 1m44.512202185s ago: executing program 0 (id=91): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x2a) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@dioread_lock}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nodiscard}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 1m41.996879589s ago: executing program 0 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1m41.98517894s ago: executing program 32 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1m41.004530069s ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0x42000000) 1m40.076744734s ago: executing program 4 (id=131): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 1m39.941811095s ago: executing program 4 (id=135): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x200) 1m39.63558675s ago: executing program 4 (id=139): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1222, &(0x7f0000002340)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, 0x0) tgkill(r0, r1, 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00000002c0)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 1m39.436018145s ago: executing program 4 (id=142): socket$inet(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0x26, 0x1, 0x86, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200000, 0x100) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x4, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close(r2) 1m39.100479843s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 1m39.088030224s ago: executing program 33 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 4.930903751s ago: executing program 5 (id=1174): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x71f}, 0x18) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [{0x8, 0x6, 0xffffffffffffffff}], {0x10, 0x4}}, 0x2c, 0x1) clock_nanosleep(0x4, 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.761056156s ago: executing program 5 (id=1182): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e00000000"], 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 4.643542775s ago: executing program 6 (id=1183): socket$inet6_sctp(0xa, 0x1, 0x84) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008014, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 4.452291261s ago: executing program 6 (id=1186): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e3", 0x1}, {&(0x7f0000000340)='@', 0x1}, {&(0x7f0000000000)="b1", 0x1}], 0x4, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r4, 0x8, 0x8, 0x7, 0x0, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0xed, [@multicast2, @private=0xa010102, @multicast1, @remote, @multicast2, @broadcast]}]}}}}}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r1, 0x0, 0x0) 4.012141795s ago: executing program 5 (id=1202): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") link(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x14923e, 0x18) fallocate(r2, 0x1, 0x0, 0x1001f0) pwritev2(r2, 0x0, 0x0, 0x33000, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) 3.025921686s ago: executing program 6 (id=1205): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000001000)) io_setup(0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr=0x640100ff, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x73, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010100, 0x4e210000}]}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 2.96840413s ago: executing program 1 (id=1207): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 2.9644115s ago: executing program 1 (id=1208): r0 = syz_clone(0x21011400, &(0x7f0000000340)="c44546c200c505f2cca2c96c322725c04f52fccf8d3eb99bc8e64b914d70aa0c897ca2ac49537ee2de52859f96b9171f013d3bfd6472b4607fefacfc1227fc51600bd85fc56677a8b30950de6fd0a8a693f761c04a680629334c2200a7232fc00b5a7b158f3d1c63b96f5ec7", 0x6c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="146486d282d209bdc64b7029207780b61f743ce64ddcb893102619bce88936bdb35c4f5adc7ff2cd25ff9ebe3ad0b76eb04e3a085d420f501bd03da093b38ec824d591d0a984520454c81280e796bfab8c6f6e311a31") r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000500)={0xf97cff8c, 0x8, 'SE Linux', "fdf9"}, 0x12) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7, 0x5, 0x5, 0x95, 0x0, 0x9, 0xc, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000280), 0xc7a4c16b22e0b12}, 0x12d, 0x8000000000000000, 0x94c5, 0x7, 0x9, 0x4, 0x1, 0x0, 0x101, 0x0, 0x3}, r0, 0x1, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffc}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "082e9cc36670e6f76f74f8314953560b975b71ad3197bd47d5609dcdbe8b8270ca4d8785efdbd6c2f378cf305de0ce34a4d95778d48330486e1de0a07292bf30", 0x39}, 0x48, r3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.780917965s ago: executing program 5 (id=1209): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 2.714513261s ago: executing program 2 (id=1211): sigaltstack(0x0, 0x0) sigaltstack(0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d5100000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0x1, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x49}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.713754231s ago: executing program 2 (id=1221): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.620375858s ago: executing program 6 (id=1212): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500006296566e75e1ddb8cf6704387fa6ad78fe2c6a88c025b2e5d1e237d4efe5504af30f64f2ece3180d2731bf29ea0e8fcabce9624929a2b92fb7a8de95a97dfcaa3ccce6e39c5b6b5329fdd11ee23052fcb954c84f38a166179cbfa8e2e0659b5a19cc4cfb004364"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) unshare(0x22020400) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x4a602) mount$9p_fd(0x0, 0x0, 0x0, 0x1004014, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.619734578s ago: executing program 3 (id=1223): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='\x00', 0x0) 2.516006207s ago: executing program 1 (id=1213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) mount$9p_unix(&(0x7f00000030c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, &(0x7f00000011c0), 0x10018, 0x0) statfs(0x0, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") syz_io_uring_setup(0x24fa, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x0, 0x64}, &(0x7f0000000100)=0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 2.249651809s ago: executing program 2 (id=1214): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.23505066s ago: executing program 5 (id=1215): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0x3, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0xff, @local, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000340)="b54682", 0x3}], 0x1}}], 0x2, 0x14) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv4_delrule={0x38, 0x21, 0xb12becd5a2b54ddf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 1.225636191s ago: executing program 2 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 1.223571811s ago: executing program 3 (id=1228): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1.221806671s ago: executing program 6 (id=1229): prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0xd87b9d09c83670d}, @void, @eth={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0xb1, 0xd9}}}}}, 0x19) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 390.319058ms ago: executing program 5 (id=1216): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e3", 0x1}, {&(0x7f0000000340)='@', 0x1}, {&(0x7f0000000000)="b1", 0x1}], 0x4, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r4, 0x8, 0x8, 0x7, 0x0, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0xed, [@multicast2, @private=0xa010102, @multicast1, @remote, @multicast2, @broadcast]}]}}}}}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r1, 0x0, 0x0) 390.014798ms ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 389.718029ms ago: executing program 3 (id=1218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) r1 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x800) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000100"], 0x48) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xd28, 0xd05a, 0x2}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r4, 0x0, 0x0, 0x80000000, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 389.498348ms ago: executing program 6 (id=1219): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_usb_disconnect(0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 315.039794ms ago: executing program 2 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 268.399938ms ago: executing program 3 (id=1222): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f603e3ee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xd80, 0x0) epoll_create1(0x80000) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}, {0x5, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x3, 0xef, 0x8, 0xc, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r5 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 182.178795ms ago: executing program 2 (id=1224): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, 0x0, &(0x7f0000000d40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000300)={[{@noblock_validity}, {@nojournal_checksum}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@permit_directio}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x22}, 0x84, 0x46f, &(0x7f0000000680)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)='X', 0x24, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x55) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840), 0x0, 0x2, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000220000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x80000000004ffe6, 0x0) 112.694551ms ago: executing program 3 (id=1225): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1d8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r0, &(0x7f00000023c0)=ANY=[@ANYBLOB='S\x00'], 0x53) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) futex_waitv(&(0x7f00000014c0)=[{0x6, &(0x7f0000000200)=0x6}, {0x6, &(0x7f0000000240)=0x10, 0x2}, {0x6, &(0x7f0000000280)=0x3, 0x2}, {0xffffffffffffff7d, &(0x7f0000000380)=0x7e7d62ef, 0x186}, {0x0, &(0x7f00000003c0), 0x2}, {0x0, &(0x7f0000000400)=0x2, 0x82}, {0x18, &(0x7f0000000500)=0x2, 0x2}, {0x401, &(0x7f0000000540)=0x5, 0x2}, {0x2, &(0x7f0000000580)=0x10000, 0x82}, {0x2, &(0x7f00000005c0)=0xbf27, 0x2}, {0x5, &(0x7f0000000600)=0x3}, {0x7, &(0x7f0000000640)=0x6, 0x2}, {0xc, &(0x7f0000000680)=0x6, 0x2}, {0xdd8, &(0x7f00000006c0)=0x9, 0x2}, {0x100, &(0x7f0000000700)=0xacd, 0x82}, {0xc, &(0x7f0000000800)=0x7, 0x2}, {0x23eb342, &(0x7f0000000840)=0x7, 0x2}, {0xb6a8, &(0x7f0000000880)=0x5, 0x2}, {0x7, &(0x7f00000008c0), 0x2}, {0xb6a, &(0x7f0000000900), 0x80}, {0x9, &(0x7f0000000bc0)=0xa627, 0x2}, {0x5, &(0x7f0000000980)=0x1, 0x2}, {0x0, &(0x7f00000009c0)=0x6, 0x2}, {0x3d, &(0x7f0000000a00)=0x45, 0x2}, {0xc7b, &(0x7f0000000a40)=0x9, 0x2}, {0x7ff, &(0x7f0000000a80)=0x800}, {0x8000000000000001, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000b00)=0x4}, {0x4, &(0x7f0000000b40)=0x1, 0x82}, {0x2e0, &(0x7f0000000b80)=0x2, 0x2}, {0x5b3, &(0x7f00000007c0)=0xfffffffffffffff9, 0x82}, {0x7, &(0x7f0000000c00)=0xffff, 0x2}, {0x8191, &(0x7f0000000c40)=0x3, 0x82}, {0x5, &(0x7f0000000c80)=0x2, 0x80}, {0x100, &(0x7f0000000cc0)=0x4, 0x2}, {0x80000001, &(0x7f0000000d00)=0x6, 0x2}, {0x73, &(0x7f0000000d40)=0x8f3, 0x82}, {0x2, &(0x7f0000000d80)=0x8, 0x80}, {0x3a2, &(0x7f0000000dc0)=0x2, 0x82}, {0x1, &(0x7f0000000e00)=0x2, 0x2}], 0x28, 0x0, &(0x7f0000000e40)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") 86.934323ms ago: executing program 1 (id=1226): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 333.23µs ago: executing program 1 (id=1230): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1231): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) kernel console output (not intermixed with test programs): 000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.728781][ T5037] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.802729][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.854998][ T5086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.363'. [ 58.085086][ T5105] sch_fq: defrate 2 ignored. [ 58.282021][ T5124] syzkaller0: entered promiscuous mode [ 58.287588][ T5124] syzkaller0: entered allmulticast mode [ 58.292402][ T5129] loop6: detected capacity change from 0 to 2048 [ 58.321540][ T5129] loop6: p1 < > p4 [ 58.327710][ T5129] loop6: p4 size 8388608 extends beyond EOD, truncated [ 58.345285][ T2992] loop6: p1 < > p4 [ 58.350848][ T2992] loop6: p4 size 8388608 extends beyond EOD, truncated [ 58.443150][ T3902] udevd[3902]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 58.444822][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 58.479245][ T5154] loop5: detected capacity change from 0 to 512 [ 58.515091][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 58.551602][ T5154] netlink: 'syz.5.373': attribute type 21 has an invalid length. [ 58.559528][ T5154] netlink: 'syz.5.373': attribute type 1 has an invalid length. [ 58.567294][ T5154] netlink: 144 bytes leftover after parsing attributes in process `syz.5.373'. [ 58.621600][ T5163] netlink: 'syz.5.375': attribute type 3 has an invalid length. [ 58.629614][ T5163] netlink: 'syz.5.375': attribute type 3 has an invalid length. [ 58.697687][ T5168] ref_ctr increment failed for inode: 0x1fd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811ace8b80 [ 59.325996][ T5175] loop1: detected capacity change from 0 to 1024 [ 59.590197][ T5175] EXT4-fs: Ignoring removed bh option [ 59.609553][ T5175] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.631425][ T5168] uprobe: syz.3.377:5168 failed to unregister, leaking uprobe [ 59.648450][ T5177] loop2: detected capacity change from 0 to 8192 [ 59.658884][ T5177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.688661][ T5175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.704998][ T5177] netlink: 10 bytes leftover after parsing attributes in process `syz.2.380'. [ 59.758290][ T5190] netlink: 'syz.2.385': attribute type 4 has an invalid length. [ 59.766050][ T5190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.385'. [ 59.778498][ T5190] .`: renamed from bond0 [ 59.859517][ T5194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 59.953044][ T5198] loop6: detected capacity change from 0 to 512 [ 59.959770][ T5198] EXT4-fs: test_dummy_encryption option not supported [ 59.987683][ T5198] lo speed is unknown, defaulting to 1000 [ 60.231206][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.384502][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 60.384531][ T29] audit: type=1326 audit(1754977986.875:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.414185][ T29] audit: type=1326 audit(1754977986.875:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.437619][ T29] audit: type=1326 audit(1754977986.875:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.460922][ T29] audit: type=1326 audit(1754977986.875:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.484231][ T29] audit: type=1326 audit(1754977986.875:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.507761][ T29] audit: type=1326 audit(1754977986.875:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.531292][ T29] audit: type=1326 audit(1754977986.875:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.554618][ T29] audit: type=1326 audit(1754977986.875:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.577983][ T29] audit: type=1326 audit(1754977986.875:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.601314][ T29] audit: type=1326 audit(1754977986.875:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 60.655582][ T5207] netlink: 80 bytes leftover after parsing attributes in process `syz.3.390'. [ 60.683829][ T5212] netlink: 'syz.5.391': attribute type 21 has an invalid length. [ 60.691641][ T5212] netlink: 128 bytes leftover after parsing attributes in process `syz.5.391'. [ 60.713983][ T5213] lo speed is unknown, defaulting to 1000 [ 60.757921][ T5212] netlink: 'syz.5.391': attribute type 4 has an invalid length. [ 60.765637][ T5212] netlink: 3 bytes leftover after parsing attributes in process `syz.5.391'. [ 60.921223][ T5219] lo speed is unknown, defaulting to 1000 [ 60.995648][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 61.079942][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 61.520474][ T5247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.404'. [ 61.604358][ T5250] loop1: detected capacity change from 0 to 512 [ 61.611065][ T5250] EXT4-fs: test_dummy_encryption option not supported [ 61.638511][ T5250] lo speed is unknown, defaulting to 1000 [ 62.125565][ T5259] loop6: detected capacity change from 0 to 2364 [ 62.455431][ T5265] netlink: 'syz.2.410': attribute type 83 has an invalid length. [ 62.535098][ T5269] loop5: detected capacity change from 0 to 128 [ 62.551377][ T5267] lo speed is unknown, defaulting to 1000 [ 62.624891][ T5269] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.157983][ T5277] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 63.209805][ T5277] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 63.217510][ T5277] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.414'. [ 63.505726][ T5269] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.599256][ T5284] 9pnet: p9_errstr2errno: server reported unknown error @ [ 63.609267][ T5269] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 63.615846][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.623407][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 63.730045][ T5294] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 63.765349][ T5294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.800689][ T5296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.807774][ T5296] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.932062][ T36] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 63.971267][ T5296] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 63.990658][ T5299] macvlan2: entered promiscuous mode [ 63.995975][ T5299] macvlan2: entered allmulticast mode [ 64.010184][ T5299] bond0: entered promiscuous mode [ 64.259946][ T5287] vhci_hcd: connection reset by peer [ 64.283754][ T3847] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.293491][ T4056] vhci_hcd: stop threads [ 64.297782][ T4056] vhci_hcd: release socket [ 64.302218][ T4056] vhci_hcd: disconnect device [ 64.407982][ T5299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.444158][ T5299] bond0: left promiscuous mode [ 64.461304][ T5301] lo speed is unknown, defaulting to 1000 [ 64.694015][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.423'. [ 64.748901][ T5313] hsr_slave_1 (unregistering): left promiscuous mode [ 64.881997][ T5317] netlink: 'syz.6.425': attribute type 13 has an invalid length. [ 64.975833][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.983054][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.074753][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.085272][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.134812][ T4056] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.150772][ T4056] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.171304][ T4056] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.185248][ T4056] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.739246][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 65.739258][ T29] audit: type=1326 audit(1754977992.225:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 65.799863][ T29] audit: type=1326 audit(1754977992.225:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 65.823198][ T29] audit: type=1326 audit(1754977992.245:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 65.846573][ T29] audit: type=1326 audit(1754977992.245:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 65.869988][ T29] audit: type=1326 audit(1754977992.245:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 65.952398][ T5329] rdma_op ffff88811adac580 conn xmit_rdma 0000000000000000 [ 66.004146][ T5335] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 66.014838][ T5336] SELinux: Context system_u:object is not valid (left unmapped). [ 66.023758][ T29] audit: type=1400 audit(1754977992.515:2133): avc: denied { relabelto } for pid=5334 comm="syz.5.432" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 66.042261][ T5335] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.049242][ T29] audit: type=1400 audit(1754977992.515:2134): avc: denied { associate } for pid=5334 comm="syz.5.432" name="cgroup.procs" dev="cgroup" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 66.061076][ T5335] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 66.182386][ T5341] hub 6-0:1.0: USB hub found [ 66.199969][ T5341] hub 6-0:1.0: 8 ports detected [ 66.241232][ T5335] gretap1: entered promiscuous mode [ 66.262798][ T5335] bond1: (slave gretap1): making interface the new active one [ 66.291156][ T5335] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 66.331078][ T5339] macvlan2: entered promiscuous mode [ 66.336385][ T5339] macvlan2: entered allmulticast mode [ 66.366734][ T5339] bond1: entered promiscuous mode [ 66.382352][ T5339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.421588][ T5339] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 66.439738][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 66.460517][ T5339] bond1: left promiscuous mode [ 66.493030][ T5352] loop6: detected capacity change from 0 to 1024 [ 66.549702][ T5352] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 66.558801][ T5352] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 66.568202][ T5352] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.437: Failed to acquire dquot type 0 [ 66.720235][ T5352] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.745571][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.437: corrupted inode contents [ 66.767740][ T5354] loop5: detected capacity change from 0 to 8192 [ 66.778177][ T5352] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.437: mark_inode_dirty error [ 66.828671][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.437: corrupted inode contents [ 66.850815][ T5365] loop1: detected capacity change from 0 to 512 [ 66.874780][ T5365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.439: bg 0: block 393: padding at end of block bitmap is not set [ 66.890799][ T5365] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 66.900165][ T5365] EXT4-fs (loop1): 2 truncates cleaned up [ 66.906816][ T5365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.927168][ T5365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.091452][ T5352] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.437: mark_inode_dirty error [ 67.215543][ T29] audit: type=1400 audit(1754977993.705:2135): avc: denied { ioctl } for pid=5369 comm="syz.5.441" path="socket:[11104]" dev="sockfs" ino=11104 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.265332][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.437: corrupted inode contents [ 67.315364][ T5370] syz.5.441 uses obsolete (PF_INET,SOCK_PACKET) [ 67.326218][ T5352] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 67.371089][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.437: corrupted inode contents [ 67.432775][ T5352] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.437: mark_inode_dirty error [ 67.498486][ T5372] loop5: detected capacity change from 0 to 128 [ 67.513227][ T5352] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 67.569440][ T5372] bio_check_eod: 9387 callbacks suppressed [ 67.569451][ T5372] syz.5.442: attempt to access beyond end of device [ 67.569451][ T5372] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 67.603625][ T5352] EXT4-fs (loop6): 1 truncate cleaned up [ 67.631985][ T5352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.280664][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 68.388408][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.488048][ T5398] loop1: detected capacity change from 0 to 164 [ 68.494844][ T5398] ISOFS: unable to read i-node block [ 68.500166][ T5398] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 68.513064][ T5398] wg2: entered promiscuous mode [ 68.517924][ T5398] wg2: entered allmulticast mode [ 68.564263][ T5400] loop6: detected capacity change from 0 to 128 [ 68.605387][ T5400] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.625877][ T5400] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.644055][ T5400] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 68.650570][ T5400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.658175][ T5400] vhci_hcd vhci_hcd.0: Device attached [ 68.678539][ T5409] loop2: detected capacity change from 0 to 512 [ 68.716323][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.733910][ T5409] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.760551][ T5409] netlink: 96 bytes leftover after parsing attributes in process `syz.2.455'. [ 68.787207][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.887076][ T5421] vlan3: entered allmulticast mode [ 68.894752][ T5421] dummy0: entered allmulticast mode [ 68.910070][ T23] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 68.999903][ T36] usb 11-1: enqueue for inactive port 0 [ 69.005791][ T36] usb 11-1: enqueue for inactive port 0 [ 69.080080][ T36] vhci_hcd: vhci_device speed not set [ 69.125074][ T5429] loop2: detected capacity change from 0 to 512 [ 69.144760][ T5429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.460: bg 0: block 393: padding at end of block bitmap is not set [ 69.161992][ T5429] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 69.171912][ T5429] EXT4-fs (loop2): 2 truncates cleaned up [ 69.179351][ T5429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.196135][ T5429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.331465][ T5405] vhci_hcd: connection reset by peer [ 69.343028][ T2849] vhci_hcd: stop threads [ 69.347297][ T2849] vhci_hcd: release socket [ 69.351863][ T2849] vhci_hcd: disconnect device [ 69.366537][ T4006] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.408461][ T5432] loop6: detected capacity change from 0 to 128 [ 69.451625][ T5432] syz.6.462: attempt to access beyond end of device [ 69.451625][ T5432] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 69.541771][ T5434] netlink: 'syz.3.463': attribute type 13 has an invalid length. [ 70.085724][ T5441] bond_slave_0: entered promiscuous mode [ 70.091507][ T5441] bond_slave_1: entered promiscuous mode [ 70.132739][ T5441] vlan2: entered promiscuous mode [ 70.137814][ T5441] bond0: entered promiscuous mode [ 70.277455][ T5454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.365601][ T5457] loop1: detected capacity change from 0 to 128 [ 70.883900][ T5473] loop2: detected capacity change from 0 to 128 [ 70.894516][ T5473] syz.2.477: attempt to access beyond end of device [ 70.894516][ T5473] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 71.006561][ T5479] loop6: detected capacity change from 0 to 512 [ 71.020274][ T5479] EXT4-fs: Ignoring removed oldalloc option [ 71.037309][ T5479] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.480: Parent and EA inode have the same ino 15 [ 71.049931][ T5479] EXT4-fs (loop6): 1 orphan inode deleted [ 71.056210][ T5479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.077803][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.116465][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 71.116485][ T29] audit: type=1326 audit(1754977997.608:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.165126][ T29] audit: type=1326 audit(1754977997.638:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.183788][ T5488] loop5: detected capacity change from 0 to 512 [ 71.188500][ T29] audit: type=1326 audit(1754977997.638:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.218119][ T29] audit: type=1326 audit(1754977997.638:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.230521][ T5488] msdos: Unknown parameter 'gh' [ 71.241798][ T29] audit: type=1326 audit(1754977997.638:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.269683][ T29] audit: type=1326 audit(1754977997.638:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.293053][ T29] audit: type=1326 audit(1754977997.638:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.316419][ T29] audit: type=1326 audit(1754977997.638:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.339862][ T29] audit: type=1326 audit(1754977997.638:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.363180][ T29] audit: type=1326 audit(1754977997.638:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 71.477284][ T5505] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 71.949692][ T5517] loop6: detected capacity change from 0 to 1024 [ 72.016220][ T5517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.730580][ T5544] loop5: detected capacity change from 0 to 1024 [ 72.750726][ T5544] EXT4-fs: Ignoring removed bh option [ 72.766909][ T5544] EXT4-fs: inline encryption not supported [ 72.781569][ T5544] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.807750][ T5547] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.500'. [ 72.817768][ T5544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 72.840514][ T5544] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.499: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.872983][ T5550] netfs: Couldn't get user pages (rc=-14) [ 72.888530][ T5544] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.499: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.920126][ T5544] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.499: Failed to acquire dquot type 0 [ 72.959534][ T5544] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 72.993548][ T5544] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.499: mark_inode_dirty error [ 73.021839][ T5544] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 73.046528][ T5544] EXT4-fs (loop5): 1 orphan inode deleted [ 73.064194][ T5544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.077170][ T51] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.106620][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 73.150779][ T5544] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.499: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.178882][ T5555] loop2: detected capacity change from 0 to 1024 [ 73.202295][ T5555] EXT4-fs: Ignoring removed orlov option [ 73.218062][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.238582][ T5555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.297658][ T5558] netlink: 'syz.5.504': attribute type 4 has an invalid length. [ 73.339178][ T5558] netlink: 'syz.5.504': attribute type 4 has an invalid length. [ 73.419699][ T5565] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 73.451215][ T5565] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 73.467477][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 73.523355][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.571032][ T5569] pim6reg1: entered promiscuous mode [ 73.576371][ T5569] pim6reg1: entered allmulticast mode [ 73.730236][ T5577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'. [ 73.838575][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 73.879347][ T23] usb 13-1: enqueue for inactive port 0 [ 73.894800][ T23] usb 13-1: enqueue for inactive port 0 [ 73.976694][ T23] vhci_hcd: vhci_device speed not set [ 74.187799][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.188246][ T5581] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 74.218706][ T5584] netlink: 'syz.6.513': attribute type 4 has an invalid length. [ 74.222750][ T5581] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 74.292289][ T5592] netlink: 'syz.6.513': attribute type 4 has an invalid length. [ 74.300056][ T5589] 9pnet: Could not find request transport: 0xffffffffffffffff [ 74.311880][ T5589] mmap: +}[@ (5589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.169973][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 75.268371][ T5640] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 75.276045][ T5640] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.531'. [ 75.313404][ T5631] delete_channel: no stack [ 75.605249][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 75.614213][ T5653] tipc: Enabled bearer , priority 10 [ 75.645002][ T5653] netlink: 14 bytes leftover after parsing attributes in process `syz.3.538'. [ 75.679653][ T5653] tipc: Disabling bearer [ 75.725243][ T5655] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 75.725243][ T5655] program syz.2.539 not setting count and/or reply_len properly [ 75.933861][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 76.044460][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 76.044473][ T29] audit: type=1326 audit(1754978002.664:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.089443][ T29] audit: type=1326 audit(1754978002.695:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.223170][ T29] audit: type=1326 audit(1754978002.849:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.246572][ T29] audit: type=1326 audit(1754978002.849:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.269929][ T29] audit: type=1326 audit(1754978002.849:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.293289][ T29] audit: type=1326 audit(1754978002.849:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.324361][ T5678] loop6: detected capacity change from 0 to 512 [ 76.385638][ T29] audit: type=1326 audit(1754978002.879:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.409026][ T29] audit: type=1326 audit(1754978002.879:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.432332][ T29] audit: type=1326 audit(1754978002.879:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 76.455790][ T29] audit: type=1326 audit(1754978002.879:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00dc2dd550 code=0x7ffc0000 [ 76.900678][ T5711] Driver unsupported XDP return value 0 on prog (id 426) dev N/A, expect packet loss! [ 77.228402][ T5714] lo speed is unknown, defaulting to 1000 [ 77.331520][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 77.347187][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 77.540467][ T5721] lo speed is unknown, defaulting to 1000 [ 77.549441][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 77.599691][ T1036] hid (null): unknown global tag 0xe [ 77.606198][ T1036] hid-generic 0007:317D:0003.0001: reserved main item tag 0xe [ 77.613721][ T1036] hid-generic 0007:317D:0003.0001: reserved main item tag 0xd [ 77.621210][ T1036] hid-generic 0007:317D:0003.0001: unknown global tag 0xe [ 77.628482][ T1036] hid-generic 0007:317D:0003.0001: item 0 4 1 14 parsing failed [ 77.636243][ T1036] hid-generic 0007:317D:0003.0001: probe with driver hid-generic failed with error -22 [ 77.692525][ T5729] hub 6-0:1.0: USB hub found [ 77.697820][ T5729] hub 6-0:1.0: 8 ports detected [ 77.798991][ T5745] netlink: 14 bytes leftover after parsing attributes in process `syz.5.576'. [ 77.807981][ T5745] hsr_slave_0: left promiscuous mode [ 77.813734][ T5745] hsr_slave_1: left promiscuous mode [ 78.034271][ T5752] netlink: 2 bytes leftover after parsing attributes in process `syz.5.579'. [ 78.298450][ T5758] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 78.307010][ T5758] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 78.518175][ T5779] netlink: 52 bytes leftover after parsing attributes in process `syz.6.588'. [ 78.527069][ T5779] netem: change failed [ 78.584194][ T5783] lo speed is unknown, defaulting to 1000 [ 78.595871][ T5784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5784 comm=syz.1.589 [ 78.616506][ T5786] loop6: detected capacity change from 0 to 1024 [ 78.642698][ T5786] ext4: Unknown parameter 'nouser_xattr' [ 78.697474][ T5786] lo speed is unknown, defaulting to 1000 [ 78.734868][ T5792] loop6: detected capacity change from 0 to 512 [ 78.784211][ T5792] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.807707][ T5799] tipc: Started in network mode [ 78.812625][ T5799] tipc: Node identity ce15c5cb3b9d, cluster identity 6 [ 78.819580][ T5799] tipc: Enabled bearer , priority 0 [ 78.822973][ T5792] EXT4-fs (loop6): mount failed [ 78.833969][ T5799] syzkaller0: entered promiscuous mode [ 78.839445][ T5799] syzkaller0: entered allmulticast mode [ 78.851406][ T5799] tipc: Resetting bearer [ 78.863969][ T5797] tipc: Resetting bearer [ 78.879228][ T5797] tipc: Disabling bearer [ 78.925388][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.596'. [ 78.989991][ T5810] : renamed from bond_slave_0 [ 79.081206][ T5819] loop5: detected capacity change from 0 to 1024 [ 79.142805][ T5827] serio: Serial port ptm0 [ 79.222753][ T5831] capability: warning: `syz.3.606' uses 32-bit capabilities (legacy support in use) [ 79.233591][ T5831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.606'. [ 79.455593][ T5840] loop5: detected capacity change from 0 to 256 [ 79.530077][ T5840] FAT-fs (loop5): codepage cp857 not found [ 80.004591][ T5851] lo speed is unknown, defaulting to 1000 [ 80.660735][ T5864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 80.892903][ T5871] loop6: detected capacity change from 0 to 2048 [ 80.924840][ T5871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.963169][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 80.963182][ T29] audit: type=1326 audit(1754978007.674:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36ec10d550 code=0x7ffc0000 [ 80.992662][ T29] audit: type=1326 audit(1754978007.674:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f36ec10d937 code=0x7ffc0000 [ 81.015971][ T29] audit: type=1326 audit(1754978007.674:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36ec10d550 code=0x7ffc0000 [ 81.039284][ T29] audit: type=1326 audit(1754978007.674:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec10ebe9 code=0x7ffc0000 [ 81.062625][ T29] audit: type=1326 audit(1754978007.674:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec10ebe9 code=0x7ffc0000 [ 81.110678][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 81.111445][ T29] audit: type=1326 audit(1754978007.807:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36ec10ebe9 code=0x7ffc0000 [ 81.142984][ T29] audit: type=1326 audit(1754978007.807:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec10ebe9 code=0x7ffc0000 [ 81.166321][ T29] audit: type=1326 audit(1754978007.807:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.6.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec10ebe9 code=0x7ffc0000 [ 81.259443][ T29] audit: type=1400 audit(1754978007.990:2870): avc: denied { write } for pid=5888 comm="syz.2.623" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.283474][ T29] audit: type=1400 audit(1754978007.990:2871): avc: denied { open } for pid=5888 comm="syz.2.623" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.183931][ T5883] Set syz1 is full, maxelem 65536 reached [ 82.485192][ T5909] lo speed is unknown, defaulting to 1000 [ 82.913301][ T5908] __nla_validate_parse: 1 callbacks suppressed [ 82.913314][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 82.928418][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 83.041106][ T5911] loop6: detected capacity change from 0 to 32768 [ 83.725100][ T5929] atomic_op ffff88811a739128 conn xmit_atomic 0000000000000000 [ 84.297225][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.647'. [ 84.297929][ T5955] tipc: Started in network mode [ 84.310979][ T5955] tipc: Node identity 363fb691d2de, cluster identity 4711 [ 84.318217][ T5955] tipc: Enabled bearer , priority 0 [ 84.339813][ T5949] macvlan2: entered allmulticast mode [ 84.345270][ T5949] bond0: entered allmulticast mode [ 84.350412][ T5949] : entered allmulticast mode [ 84.355312][ T5949] bond_slave_1: entered allmulticast mode [ 84.389863][ T5949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.405416][ T5949] bridge0: port 3(macvlan2) entered blocking state [ 84.411979][ T5949] bridge0: port 3(macvlan2) entered disabled state [ 84.438833][ T5949] macvlan2: entered promiscuous mode [ 84.443659][ T5960] raw_sendmsg: syz.2.650 forgot to set AF_INET. Fix it! [ 84.444199][ T5949] bond0: entered promiscuous mode [ 84.456122][ T5949] : entered promiscuous mode [ 84.461015][ T5949] bond_slave_1: entered promiscuous mode [ 84.498408][ T5957] syzkaller0: entered promiscuous mode [ 84.503964][ T5957] syzkaller0: entered allmulticast mode [ 84.540229][ T5955] tipc: Resetting bearer [ 84.548193][ T5954] tipc: Resetting bearer [ 84.564739][ T5954] tipc: Disabling bearer [ 84.625604][ T5969] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 84.651460][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.654'. [ 84.673015][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.699331][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.719558][ T5972] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.729363][ T5972] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 84.822297][ T5967] lo speed is unknown, defaulting to 1000 [ 84.832694][ T5972] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.842520][ T5972] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 84.933922][ T5972] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.943749][ T5972] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 85.016681][ T5982] netlink: 'syz.6.660': attribute type 4 has an invalid length. [ 85.058285][ T5972] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.068076][ T5972] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 85.186325][ T5989] netlink: 'syz.6.663': attribute type 1 has an invalid length. [ 85.194093][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.194130][ T5989] netlink: 224 bytes leftover after parsing attributes in process `syz.6.663'. [ 85.211413][ T51] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.280613][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.289009][ T51] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.321396][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.329697][ T51] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.348574][ T51] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.356836][ T51] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.516875][ T6001] loop2: detected capacity change from 0 to 512 [ 85.525989][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 85.557543][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.607109][ T6001] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.643311][ T6001] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.943629][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 85.943642][ T29] audit: type=1326 audit(1754978012.738:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 85.985247][ T29] audit: type=1326 audit(1754978012.768:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.085460][ T29] audit: type=1326 audit(1754978012.880:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.108854][ T29] audit: type=1326 audit(1754978012.880:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.132224][ T29] audit: type=1326 audit(1754978012.880:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.155628][ T29] audit: type=1326 audit(1754978012.880:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.178974][ T29] audit: type=1326 audit(1754978012.880:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.202299][ T29] audit: type=1326 audit(1754978012.880:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.226864][ T6001] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.668: corrupted xattr block 19: overlapping e_value [ 86.241109][ T6001] EXT4-fs (loop2): Remounting filesystem read-only [ 86.247725][ T6001] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 86.257328][ T6001] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 86.266461][ T29] audit: type=1326 audit(1754978013.022:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.290519][ T29] audit: type=1326 audit(1754978013.092:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef754ebe9 code=0x7ffc0000 [ 86.357252][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.416135][ T6024] can0: slcan on ttyS3. [ 86.537599][ T6024] can0 (unregistered): slcan off ttyS3. [ 86.545916][ T6028] can0: slcan on ttyS3. [ 86.621723][ T6023] can0 (unregistered): slcan off ttyS3. [ 86.808848][ T6041] loop5: detected capacity change from 0 to 1024 [ 86.843827][ T6041] EXT4-fs: Ignoring removed i_version option [ 86.883844][ T6041] EXT4-fs: Ignoring removed nobh option [ 87.001015][ T6041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.112549][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.144223][ T6052] loop5: detected capacity change from 0 to 512 [ 87.164883][ T6052] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 87.377309][ T6063] lo speed is unknown, defaulting to 1000 [ 87.435408][ T6075] loop5: detected capacity change from 0 to 1024 [ 87.475170][ T6075] EXT4-fs: Ignoring removed bh option [ 87.481773][ T6075] EXT4-fs: inline encryption not supported [ 87.513499][ T6075] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.530329][ T6082] loop2: detected capacity change from 0 to 512 [ 87.549485][ T6075] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.683: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.576755][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.607593][ T6082] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.608315][ T6090] loop6: detected capacity change from 0 to 2048 [ 87.620491][ T6075] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.683: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.661605][ T6082] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.685: corrupted xattr block 19: overlapping e_value [ 87.675530][ T6075] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.683: Failed to acquire dquot type 0 [ 87.697994][ T6075] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 87.699589][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 87.713910][ T6082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 87.715986][ T6075] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.683: mark_inode_dirty error [ 87.724438][ T6082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 87.756699][ T6075] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 87.770058][ T6090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 87.782480][ T6075] EXT4-fs (loop5): 1 orphan inode deleted [ 87.788767][ T6075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.801311][ T51] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.817083][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.828418][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 87.874444][ T6097] lo speed is unknown, defaulting to 1000 [ 87.921182][ T6096] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.937237][ T6096] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 87.949567][ T6096] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.949567][ T6096] [ 87.959281][ T6096] EXT4-fs (loop6): Total free blocks count 0 [ 87.965257][ T6096] EXT4-fs (loop6): Free/Dirty block details [ 87.971170][ T6096] EXT4-fs (loop6): free_blocks=2415919104 [ 87.976972][ T6096] EXT4-fs (loop6): dirty_blocks=736 [ 87.982153][ T6096] EXT4-fs (loop6): Block reservation details [ 87.988137][ T6096] EXT4-fs (loop6): i_reserved_data_blocks=46 [ 88.003498][ T6099] EXT4-fs (loop6): shut down requested (0) [ 88.140905][ T6075] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.409079][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.557623][ T6124] lo speed is unknown, defaulting to 1000 [ 88.878650][ T6118] lo speed is unknown, defaulting to 1000 [ 90.395262][ T6157] lo speed is unknown, defaulting to 1000 [ 90.478921][ T6157] loop2: detected capacity change from 0 to 512 [ 90.552674][ T6157] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.560786][ T6157] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.569900][ T6157] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.703: corrupted inode contents [ 90.582970][ T6157] EXT4-fs (loop2): Remounting filesystem read-only [ 90.589601][ T6157] EXT4-fs (loop2): 1 truncate cleaned up [ 90.595972][ T2849] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.606500][ T2849] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.742558][ T2849] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.816760][ T6157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.920199][ T6164] $Hÿ: renamed from bond0 [ 90.960592][ T6164] $Hÿ: entered promiscuous mode [ 90.965646][ T6164] bond_slave_0: entered promiscuous mode [ 90.971457][ T6164] bond_slave_1: entered promiscuous mode [ 90.994859][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 90.994872][ T29] audit: type=1400 audit(1754978017.842:3383): avc: denied { unmount } for pid=4006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.102917][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.6.708'. [ 91.150550][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.708'. [ 91.221082][ T29] audit: type=1326 audit(1754978018.064:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.6.712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36ec10ebe9 code=0x0 [ 91.263678][ T6173] $Hÿ: left promiscuous mode [ 91.268496][ T6173] bond_slave_0: left promiscuous mode [ 91.274079][ T6173] bond_slave_1: left promiscuous mode [ 91.293799][ T6173] gretap1: left promiscuous mode [ 91.461902][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 91.502821][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.798041][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 91.824940][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 92.278344][ T6212] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.542032][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.693949][ T29] audit: type=1326 audit(1754978019.556:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.717414][ T29] audit: type=1326 audit(1754978019.556:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.741372][ T29] audit: type=1326 audit(1754978019.586:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.764931][ T29] audit: type=1326 audit(1754978019.586:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.788312][ T29] audit: type=1326 audit(1754978019.586:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.811662][ T29] audit: type=1326 audit(1754978019.586:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.834913][ T29] audit: type=1326 audit(1754978019.586:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.858374][ T29] audit: type=1326 audit(1754978019.586:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 92.903485][ T6236] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.072845][ T6249] netlink: 'syz.5.739': attribute type 1 has an invalid length. [ 93.080689][ T6249] netlink: 224 bytes leftover after parsing attributes in process `syz.5.739'. [ 93.127449][ T6253] vlan0: entered allmulticast mode [ 93.605432][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 93.614245][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 93.631219][ T6268] netlink: 14 bytes leftover after parsing attributes in process `syz.5.742'. [ 93.686794][ T6272] IPv6: Can't replace route, no match found [ 93.715026][ T6272] bridge0: port 3(batadv0) entered blocking state [ 93.721554][ T6272] bridge0: port 3(batadv0) entered disabled state [ 93.740471][ T6272] batadv0: entered allmulticast mode [ 93.750416][ T6272] batadv0: entered promiscuous mode [ 93.877969][ T6278] netlink: 'syz.5.748': attribute type 10 has an invalid length. [ 93.921774][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.960383][ T6278] bridge_slave_1: left allmulticast mode [ 93.966695][ T6278] bridge_slave_1: left promiscuous mode [ 93.972475][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.993533][ T6278] bridge_slave_1: entered promiscuous mode [ 94.000595][ T6278] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.049825][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 94.082532][ T6280] syzkaller0: entered promiscuous mode [ 94.088014][ T6280] syzkaller0: entered allmulticast mode [ 94.123746][ T6292] loop5: detected capacity change from 0 to 1024 [ 94.176447][ T6292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.211574][ T6292] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 94.228554][ T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.237814][ T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.345146][ T6308] vlan3: entered allmulticast mode [ 94.350307][ T6308] bridge_slave_0: entered allmulticast mode [ 94.388569][ T6309] loop6: detected capacity change from 0 to 512 [ 94.412334][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.425164][ T6310] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.459033][ T6309] EXT4-fs (loop6): orphan cleanup on readonly fs [ 94.477632][ T6309] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.759: bg 0: block 248: padding at end of block bitmap is not set [ 94.537357][ T6309] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.759: Failed to acquire dquot type 1 [ 94.550140][ T6309] EXT4-fs (loop6): 1 truncate cleaned up [ 94.557199][ T6309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.595507][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.769660][ T6316] tipc: Started in network mode [ 94.774549][ T6316] tipc: Node identity 768073290cec, cluster identity 4711 [ 94.781732][ T6316] tipc: Enabled bearer , priority 0 [ 94.799369][ T6316] syzkaller0: entered promiscuous mode [ 94.804868][ T6316] syzkaller0: entered allmulticast mode [ 94.814662][ T6316] tipc: Resetting bearer [ 94.822046][ T6315] tipc: Resetting bearer [ 94.829377][ T6315] tipc: Disabling bearer [ 95.166180][ T6341] 9pnet_fd: Insufficient options for proto=fd [ 95.172796][ T6336] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 95.242184][ T6347] loop2: detected capacity change from 0 to 1024 [ 95.364554][ T6347] EXT4-fs: Ignoring removed orlov option [ 95.380075][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.298455][ T6361] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 96.314776][ T6362] lo speed is unknown, defaulting to 1000 [ 96.343186][ T6361] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 96.371518][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 96.371530][ T29] audit: type=1326 audit(1754978023.252:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.435176][ T29] audit: type=1326 audit(1754978023.252:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.458601][ T29] audit: type=1326 audit(1754978023.252:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.481916][ T29] audit: type=1326 audit(1754978023.252:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.505220][ T29] audit: type=1326 audit(1754978023.252:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.528598][ T29] audit: type=1326 audit(1754978023.252:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.551911][ T29] audit: type=1326 audit(1754978023.252:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.575224][ T29] audit: type=1326 audit(1754978023.252:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.598550][ T29] audit: type=1326 audit(1754978023.252:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.621772][ T29] audit: type=1326 audit(1754978023.252:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 96.646393][ T6370] __nla_validate_parse: 4 callbacks suppressed [ 96.646423][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 96.664238][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.882563][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 97.103065][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 97.240313][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 97.250759][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 97.260387][ T6405] vlan0: entered promiscuous mode [ 97.589890][ T6419] SELinux: policydb version 65301 does not match my version range 15-35 [ 97.598519][ T6419] SELinux: failed to load policy [ 97.954694][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 98.101178][ T6442] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 98.109702][ T6442] syz.2.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.129255][ T6442] loop2: detected capacity change from 0 to 2048 [ 98.177238][ T3488] Alternate GPT is invalid, using primary GPT. [ 98.183516][ T3488] loop2: p2 p3 p7 [ 98.208257][ T6442] Alternate GPT is invalid, using primary GPT. [ 98.214768][ T6442] loop2: p2 p3 p7 [ 98.718630][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 98.734869][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 99.136362][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 99.183184][ T6461] tipc: Enabling of bearer rejected, failed to enable media [ 99.497427][ T6477] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 99.531475][ T6477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.670588][ T6477] bond2: (slave geneve3): making interface the new active one [ 99.706792][ T6477] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 99.753234][ T6480] veth3: entered promiscuous mode [ 99.781916][ T6480] bond2: (slave veth3): Enslaving as an active interface with a down link [ 99.894566][ T6477] vlan1: entered allmulticast mode [ 99.899737][ T6477] bond2: entered allmulticast mode [ 99.904896][ T6477] geneve3: entered allmulticast mode [ 99.998603][ T6477] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 100.086252][ T6482] 9pnet_fd: Insufficient options for proto=fd [ 100.244650][ T6500] loop2: detected capacity change from 0 to 1024 [ 100.374731][ T6500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.462977][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.704884][ T6524] lo speed is unknown, defaulting to 1000 [ 100.735932][ T6518] futex_wake_op: syz.3.831 tries to shift op by -1; fix this program [ 100.759375][ T6528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.834'. [ 100.768304][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.834'. [ 100.777162][ T6528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.834'. [ 100.805479][ T6529] loop6: detected capacity change from 0 to 1024 [ 100.834295][ T6529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.858293][ T6529] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.903954][ T6532] veth9: entered promiscuous mode [ 101.705943][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.769093][ T6564] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 101.858503][ T6564] geneve1: entered promiscuous mode [ 101.913739][ T6564] .`: (slave geneve1): Enslaving as an active interface with an up link [ 101.923640][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.985292][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.003840][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.031856][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.268312][ T6577] lo speed is unknown, defaulting to 1000 [ 102.366078][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 102.366093][ T29] audit: type=1326 audit(1754978029.284:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.417459][ T6595] usb usb1: usbfs: process 6595 (syz.6.852) did not claim interface 0 before use [ 102.445586][ T6595] random: crng reseeded on system resumption [ 102.449240][ T29] audit: type=1326 audit(1754978029.284:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.475638][ T29] audit: type=1326 audit(1754978029.284:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.499065][ T29] audit: type=1326 audit(1754978029.284:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.523065][ T29] audit: type=1326 audit(1754978029.284:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.547087][ T29] audit: type=1326 audit(1754978029.284:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.570303][ T29] audit: type=1326 audit(1754978029.284:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.594332][ T29] audit: type=1326 audit(1754978029.284:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.617635][ T29] audit: type=1326 audit(1754978029.284:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.641676][ T29] audit: type=1326 audit(1754978029.284:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 102.817628][ T6602] loop6: detected capacity change from 0 to 512 [ 102.840239][ T6602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.853388][ T6602] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.874198][ T6602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.853: corrupted inode contents [ 102.894051][ T6602] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.853: mark_inode_dirty error [ 102.907657][ T6602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.853: corrupted inode contents [ 102.923725][ T6602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.853: corrupted inode contents [ 102.940507][ T6602] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.853: mark_inode_dirty error [ 102.953515][ T6602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.853: corrupted inode contents [ 103.213909][ T6619] tipc: New replicast peer: 255.255.255.83 [ 103.219788][ T6619] tipc: Enabled bearer , priority 10 [ 103.483447][ T6623] lo speed is unknown, defaulting to 1000 [ 103.574586][ T6629] : renamed from bridge_slave_0 [ 103.674261][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.001207][ T6646] __nla_validate_parse: 1 callbacks suppressed [ 104.001221][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 104.018795][ T6642] loop2: detected capacity change from 0 to 2364 [ 104.044627][ T6642] iso9660: Bad value for 'sbsector' [ 104.166100][ T6651] netlink: 76 bytes leftover after parsing attributes in process `syz.3.872'. [ 104.193620][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 104.227051][ T6653] netem: change failed [ 104.231227][ T6654] tipc: Enabling of bearer rejected, failed to enable media [ 104.326415][ T3382] tipc: Node number set to 2741025059 [ 104.470801][ T6668] loop6: detected capacity change from 0 to 512 [ 104.544412][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 104.995831][ T6668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.045896][ T6668] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.089986][ T6668] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.864: iget: bad i_size value: 2533274857506816 [ 105.113019][ T6666] loop2: detected capacity change from 0 to 512 [ 105.208814][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.229573][ T6666] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.261241][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.875: corrupted inode contents [ 105.312525][ T4006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.367106][ T6666] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.875: mark_inode_dirty error [ 105.421347][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.875: corrupted inode contents [ 105.485666][ T6684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.875: corrupted inode contents [ 105.498450][ T6684] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.875: mark_inode_dirty error [ 105.510716][ T6684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.875: corrupted inode contents [ 105.547304][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.738479][ T6696] lo speed is unknown, defaulting to 1000 [ 106.374786][ T6711] loop5: detected capacity change from 0 to 512 [ 106.382983][ T6714] tipc: Enabled bearer , priority 0 [ 106.391093][ T6714] syzkaller0: entered promiscuous mode [ 106.396580][ T6714] syzkaller0: entered allmulticast mode [ 106.406935][ T6711] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.416813][ T6714] tipc: Resetting bearer [ 106.425303][ T6713] tipc: Resetting bearer [ 106.437094][ T6713] tipc: Disabling bearer [ 106.590529][ T6732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.896'. [ 106.614636][ T6732] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.626616][ T6734] loop5: detected capacity change from 0 to 512 [ 106.634617][ T6732] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.658531][ T6732] $Hÿ (unregistering): Released all slaves [ 106.920736][ T6755] loop2: detected capacity change from 0 to 8192 [ 107.004359][ T6762] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.107542][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 107.209280][ T6767] loop2: detected capacity change from 0 to 8192 [ 107.291430][ T6776] tipc: Enabled bearer , priority 0 [ 107.304643][ T6776] syzkaller0: entered promiscuous mode [ 107.310228][ T6776] syzkaller0: entered allmulticast mode [ 107.323789][ T6776] tipc: Resetting bearer [ 107.330796][ T6775] tipc: Resetting bearer [ 107.363977][ T6775] tipc: Disabling bearer [ 107.389413][ T6785] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 107.407963][ T6785] dummy0: left promiscuous mode [ 107.415540][ T6785] dummy0: entered promiscuous mode [ 107.421149][ T6785] team0: Failed to send options change via netlink (err -105) [ 107.428685][ T6785] team0: Port device dummy0 added [ 107.454964][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 107.480168][ T6790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6790 comm=syz.3.920 [ 107.504212][ T6794] loop5: detected capacity change from 0 to 1764 [ 108.430411][ T29] kauditd_printk_skb: 3753 callbacks suppressed [ 108.430490][ T29] audit: type=1326 audit(1754978035.365:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.460145][ T29] audit: type=1326 audit(1754978035.365:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.540572][ T6800] syz.5.925 (6800) used greatest stack depth: 6392 bytes left [ 108.548425][ T29] audit: type=1326 audit(1754978035.496:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.571751][ T29] audit: type=1326 audit(1754978035.496:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.595079][ T29] audit: type=1326 audit(1754978035.496:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.640315][ T29] audit: type=1326 audit(1754978035.566:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.651625][ T6828] loop6: detected capacity change from 0 to 128 [ 108.664307][ T29] audit: type=1326 audit(1754978035.566:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.676560][ T6828] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 108.693148][ T29] audit: type=1326 audit(1754978035.566:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.700853][ T6828] FAT-fs (loop6): Filesystem has been set read-only [ 108.701295][ T6828] syz.6.934: attempt to access beyond end of device [ 108.701295][ T6828] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 108.724991][ T29] audit: type=1326 audit(1754978035.566:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.736458][ T6828] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 108.744442][ T29] audit: type=1326 audit(1754978035.566:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 108.767669][ T6828] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 108.860459][ T6827] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 109.114727][ T2849] macvlan2: left promiscuous mode [ 109.119816][ T2849] bond0: left promiscuous mode [ 109.124695][ T2849] : left promiscuous mode [ 109.129271][ T2849] bond_slave_1: left promiscuous mode [ 109.134973][ T2849] bridge0: port 3(macvlan2) entered disabled state [ 109.142176][ T2849] bridge_slave_1: left allmulticast mode [ 109.147871][ T2849] bridge_slave_1: left promiscuous mode [ 109.153581][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.162118][ T2849] bridge_slave_0: left allmulticast mode [ 109.167792][ T2849] bridge_slave_0: left promiscuous mode [ 109.173447][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.242026][ T2849] bond0 (unregistering): left allmulticast mode [ 109.248342][ T2849] : left allmulticast mode [ 109.252967][ T2849] bond_slave_1: left allmulticast mode [ 109.260873][ T2849] bond0 (unregistering): (slave 30): Releasing backup interface [ 109.270700][ T2849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.279881][ T2849] bond0 (unregistering): Released all slaves [ 109.326963][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 109.342794][ T2849] tipc: Left network mode [ 109.361793][ T2849] hsr_slave_0: left promiscuous mode [ 109.432574][ T2849] team0 (unregistering): Port device team_slave_1 removed [ 109.453809][ T2849] team0 (unregistering): Port device team_slave_0 removed [ 109.490522][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 109.638809][ T6890] SELinux: Context @ is not valid (left unmapped). [ 109.683577][ T6844] lo speed is unknown, defaulting to 1000 [ 109.692755][ T6899] netlink: 'syz.5.946': attribute type 1 has an invalid length. [ 109.810973][ T6899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.833873][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.841289][ T6903] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 109.854181][ T6903] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 110.015381][ T6899] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.320235][ T6844] chnl_net:caif_netlink_parms(): no params data found [ 110.350235][ T6913] netlink: 'syz.1.947': attribute type 4 has an invalid length. [ 110.357985][ T6913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.947'. [ 110.372516][ T6913] : renamed from $Hÿ (while UP) [ 110.455549][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 110.464478][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 110.536940][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 110.663357][ T6941] loop5: detected capacity change from 0 to 512 [ 110.690561][ T6941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.703179][ T6941] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.813008][ T6946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6946 comm=syz.3.953 [ 111.068446][ T6940] @: renamed from vlan0 [ 111.097301][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.106209][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.115043][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.144818][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.151948][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.225362][ T6844] bridge_slave_0: entered allmulticast mode [ 111.246070][ T6844] bridge_slave_0: entered promiscuous mode [ 111.415102][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.433717][ T6956] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 111.444323][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.451410][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.485470][ T6844] bridge_slave_1: entered allmulticast mode [ 111.492036][ T6844] bridge_slave_1: entered promiscuous mode [ 111.500739][ T6958] netlink: 'syz.1.958': attribute type 4 has an invalid length. [ 111.511787][ T6960] tipc: Enabled bearer , priority 0 [ 111.532546][ T6960] syzkaller0: entered promiscuous mode [ 111.538094][ T6960] syzkaller0: entered allmulticast mode [ 111.578770][ T6960] tipc: Resetting bearer [ 111.586169][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.597362][ T6959] tipc: Resetting bearer [ 111.603883][ T6964] netlink: 'syz.1.960': attribute type 14 has an invalid length. [ 111.622764][ T6959] tipc: Disabling bearer [ 111.644062][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.705191][ T6844] team0: Port device team_slave_0 added [ 111.712105][ T6844] team0: Port device team_slave_1 added [ 111.741659][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.748713][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.774688][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.805628][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.812594][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.838641][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.218287][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.257838][ T6988] loop5: detected capacity change from 0 to 512 [ 112.278406][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 112.305171][ T6988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.317837][ T6988] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.357439][ T6844] hsr_slave_0: entered promiscuous mode [ 112.363257][ T6988] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.964: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.363598][ T6844] hsr_slave_1: entered promiscuous mode [ 112.387210][ T6844] debugfs: 'hsr0' already exists in 'hsr' [ 112.392972][ T6844] Cannot create hsr debugfs directory [ 112.406340][ T6988] EXT4-fs (loop5): Remounting filesystem read-only [ 112.458332][ T6988] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 112.473222][ T6988] 0ªî{X¹¦: entered allmulticast mode [ 112.479256][ T6988] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 112.555100][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.625492][ T7018] netlink: 'syz.2.970': attribute type 13 has an invalid length. [ 112.636914][ T7018] gretap0: refused to change device tx_queue_len [ 112.646357][ T7018] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.662042][ T23] lo speed is unknown, defaulting to 1000 [ 112.667746][ T23] syz2: Port: 1 Link ACTIVE [ 112.779760][ T6844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.810676][ T7026] loop2: detected capacity change from 0 to 8192 [ 112.819101][ T6844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.831265][ T6844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.841687][ T6844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.880579][ T7026] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.899437][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.948203][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.972319][ T2849] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.979370][ T2849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.007688][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.014810][ T2849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.048380][ T6844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.058804][ T6844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.450217][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 113.450281][ T29] audit: type=1400 audit(1754978040.388:7604): avc: denied { write } for pid=7086 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.489559][ T7096] loop2: detected capacity change from 0 to 512 [ 113.558494][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.578586][ T7096] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.594750][ T29] audit: type=1400 audit(1754978040.488:7605): avc: denied { mounton } for pid=7093 comm="syz.1.979" path="/210/file0" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.617796][ T29] audit: type=1400 audit(1754978040.548:7606): avc: denied { create } for pid=7092 comm="syz.2.978" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 113.650661][ T29] audit: type=1400 audit(1754978040.598:7607): avc: denied { write } for pid=7092 comm="syz.2.978" name=E91F7189591E9233614B dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 113.697119][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.806721][ T7126] wireguard0: entered promiscuous mode [ 113.812223][ T7126] wireguard0: entered allmulticast mode [ 113.877175][ T29] audit: type=1326 audit(1754978040.819:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 113.900789][ T29] audit: type=1326 audit(1754978040.819:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 113.924130][ T29] audit: type=1326 audit(1754978040.819:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 113.947452][ T29] audit: type=1326 audit(1754978040.829:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 113.970793][ T29] audit: type=1326 audit(1754978040.829:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 113.994091][ T29] audit: type=1326 audit(1754978040.829:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f714686ebe9 code=0x7ffc0000 [ 114.086950][ T6844] veth0_vlan: entered promiscuous mode [ 114.125510][ T6844] veth1_vlan: entered promiscuous mode [ 114.165853][ T6844] veth0_macvtap: entered promiscuous mode [ 114.180581][ T6844] veth1_macvtap: entered promiscuous mode [ 114.201541][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.228812][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.244723][ T1618] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.257962][ T1618] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.288060][ T1618] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.323589][ T1618] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.334297][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.342828][ T7178] tipc: Started in network mode [ 114.348109][ T7178] tipc: Node identity 36721bac97e6, cluster identity 4711 [ 114.355302][ T7178] tipc: Enabled bearer , priority 0 [ 114.410315][ T7178] syzkaller0: entered promiscuous mode [ 114.415802][ T7178] syzkaller0: entered allmulticast mode [ 114.447025][ T7184] lo speed is unknown, defaulting to 1000 [ 114.487272][ T7178] tipc: Resetting bearer [ 114.533984][ T7177] tipc: Resetting bearer [ 114.591606][ T7177] tipc: Disabling bearer [ 114.612693][ T7208] __nla_validate_parse: 5 callbacks suppressed [ 114.612707][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 114.627749][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 114.649355][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 114.656110][ T1618] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.658207][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 114.666822][ T1618] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.692174][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 114.719596][ T1618] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.737755][ T1618] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.782998][ T7222] lo speed is unknown, defaulting to 1000 [ 114.881997][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1001'. [ 114.902141][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1001'. [ 114.975396][ T7243] tipc: Enabled bearer , priority 0 [ 114.982829][ T7243] syzkaller0: entered promiscuous mode [ 114.988432][ T7243] syzkaller0: entered allmulticast mode [ 114.995572][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 115.005152][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 115.209726][ T7243] tipc: Resetting bearer [ 115.252117][ T7242] tipc: Resetting bearer [ 115.275057][ T7242] tipc: Disabling bearer [ 115.461601][ T7252] batman_adv: batadv0: Adding interface: dummy0 [ 115.467934][ T7252] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.493209][ T7252] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 115.852720][ T7254] tipc: Enabled bearer , priority 0 [ 115.860083][ T7254] syzkaller0: entered promiscuous mode [ 115.865623][ T7254] syzkaller0: entered allmulticast mode [ 115.879928][ T7254] tipc: Resetting bearer [ 115.887198][ T7253] tipc: Resetting bearer [ 115.899023][ T7253] tipc: Disabling bearer [ 116.264369][ T7265] loop5: detected capacity change from 0 to 2048 [ 116.466275][ T7265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.979565][ T7280] loop2: detected capacity change from 0 to 1024 [ 117.018972][ T7280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.079969][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.088733][ T7289] tipc: Enabling of bearer rejected, failed to enable media [ 117.098852][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.144654][ T7293] lo speed is unknown, defaulting to 1000 [ 117.175209][ T7299] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 117.182955][ T7299] netlink: 'syz.5.1017': attribute type 2 has an invalid length. [ 117.335465][ T7308] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1021'. [ 118.573246][ T7319] lo speed is unknown, defaulting to 1000 [ 118.651282][ T7319] loop5: detected capacity change from 0 to 512 [ 118.722091][ T7319] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 118.730158][ T7319] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.745372][ T7319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1023: corrupted inode contents [ 118.758906][ T7319] EXT4-fs (loop5): Remounting filesystem read-only [ 118.765521][ T7319] EXT4-fs (loop5): 1 truncate cleaned up [ 118.820978][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 118.831543][ T41] __quota_error: 185 callbacks suppressed [ 118.831556][ T41] Quota error (device loop5): write_blk: dquota write failed [ 118.844952][ T41] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 118.855129][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 118.865633][ T41] Quota error (device loop5): write_blk: dquota write failed [ 118.873077][ T41] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 118.925955][ T41] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 118.936137][ T41] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 118.945161][ T41] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.955579][ T7319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.227718][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.297815][ T7333] macsec1: entered promiscuous mode [ 119.303252][ T7333] bridge0: entered promiscuous mode [ 119.347446][ T29] audit: type=1326 audit(1754978046.308:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 119.370955][ T29] audit: type=1326 audit(1754978046.308:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 119.424299][ T7333] bridge0: port 3(macsec1) entered blocking state [ 119.430798][ T7333] bridge0: port 3(macsec1) entered disabled state [ 119.494512][ T29] audit: type=1326 audit(1754978046.358:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 119.517999][ T29] audit: type=1326 audit(1754978046.358:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2957a7ebe9 code=0x7ffc0000 [ 119.543806][ T7333] macsec1: entered allmulticast mode [ 119.549106][ T7333] bridge0: entered allmulticast mode [ 119.555473][ T7333] macsec1: left allmulticast mode [ 119.560673][ T7333] bridge0: left allmulticast mode [ 119.603825][ T7333] bridge0: left promiscuous mode [ 119.632218][ T7340] loop2: detected capacity change from 0 to 512 [ 119.692040][ T7344] tipc: Enabling of bearer rejected, failed to enable media [ 119.721851][ T7347] __nla_validate_parse: 1 callbacks suppressed [ 119.721867][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 119.755118][ T7347] bridge_slave_1: left allmulticast mode [ 119.760871][ T7347] bridge_slave_1: left promiscuous mode [ 119.766674][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.777178][ T7347] bridge_slave_0: left allmulticast mode [ 119.782933][ T7347] bridge_slave_0: left promiscuous mode [ 119.788676][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.101053][ T7358] netlink: '+}[@': attribute type 13 has an invalid length. [ 120.112519][ T57] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.124842][ T57] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.140156][ T57] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.155302][ T57] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.193121][ T7360] lo speed is unknown, defaulting to 1000 [ 120.201211][ T7363] lo speed is unknown, defaulting to 1000 [ 120.317332][ T7366] loop2: detected capacity change from 0 to 4096 [ 120.410880][ T7366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.811882][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 120.890619][ T7377] loop5: detected capacity change from 0 to 1024 [ 120.964324][ T7377] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 121.190205][ T7382] loop6: detected capacity change from 0 to 1024 [ 121.222777][ T7382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.241755][ T7377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.300935][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 121.383516][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.396115][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.473870][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 122.094102][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.153156][ T7401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.239111][ T7401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.367202][ T7401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.429867][ T7401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.548851][ T7415] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 122.571254][ T7415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.593803][ T2849] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.630656][ T2849] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.677096][ T7415] bond0: (slave veth13): Enslaving as an active interface with a down link [ 122.692846][ T2849] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.723797][ T2849] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.799386][ T7413] lo speed is unknown, defaulting to 1000 [ 122.941685][ T7415] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 123.082227][ T7423] tipc: Enabling of bearer rejected, failed to enable media [ 123.114302][ T7424] loop5: detected capacity change from 0 to 512 [ 123.142460][ T7415] vlan0: entered allmulticast mode [ 123.147750][ T7415] veth1: entered allmulticast mode [ 123.154096][ T7424] EXT4-fs: Ignoring removed bh option [ 123.160838][ T7415] bond0: (slave vlan0): Opening slave failed [ 123.191176][ T7428] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1058'. [ 123.394124][ T7424] EXT4-fs (loop5): bad block size 16384 [ 123.436731][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 123.480201][ T7434] tipc: New replicast peer: 255.255.255.255 [ 123.486278][ T7434] tipc: Enabled bearer , priority 10 [ 123.542398][ T7442] veth0_to_team: entered promiscuous mode [ 123.554264][ T7444] netlink: 'syz.1.1065': attribute type 4 has an invalid length. [ 123.635035][ T7446] loop2: detected capacity change from 0 to 512 [ 123.648028][ T7446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.673945][ T7451] loop5: detected capacity change from 0 to 1024 [ 123.680795][ T7451] EXT4-fs: Ignoring removed bh option [ 123.686240][ T7451] EXT4-fs: inline encryption not supported [ 123.715071][ T7451] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.738822][ T7446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 123.750439][ T7451] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1063: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.765859][ T7451] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1063: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.780758][ T7451] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1063: Failed to acquire dquot type 0 [ 123.792988][ T7451] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 123.803723][ T7451] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1063: mark_inode_dirty error [ 123.815787][ T7446] System zones: 1-12 [ 123.819796][ T7451] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 123.830025][ T7451] EXT4-fs (loop5): 1 orphan inode deleted [ 123.836676][ T7451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.869391][ T41] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.891261][ T7446] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 123.907397][ T41] __quota_error: 113 callbacks suppressed [ 123.907410][ T41] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 123.921607][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 123.939009][ T7446] EXT4-fs (loop2): 1 truncate cleaned up [ 123.951291][ T7446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.197595][ T7446] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 124.223743][ T7446] .`: (slave dummy0): Enslaving as an active interface with an up link [ 124.262234][ T29] audit: type=1400 audit(1754978051.224:7914): avc: denied { connect } for pid=7458 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.288914][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 124.722763][ T23] tipc: Node number set to 3839997585 [ 124.744473][ T7462] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 124.764386][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.806704][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 124.815669][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1072'. [ 125.300222][ T29] audit: type=1326 audit(1754978052.265:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.323747][ T29] audit: type=1326 audit(1754978052.265:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.347125][ T29] audit: type=1326 audit(1754978052.265:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.370611][ T29] audit: type=1326 audit(1754978052.265:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.394129][ T29] audit: type=1326 audit(1754978052.265:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.417540][ T29] audit: type=1326 audit(1754978052.265:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00dc2dd550 code=0x7ffc0000 [ 125.441014][ T29] audit: type=1326 audit(1754978052.265:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 125.464395][ T29] audit: type=1326 audit(1754978052.265:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 126.175410][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.186117][ T3847] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.210413][ T3847] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 126.226448][ T3847] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 126.300679][ T7500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7500 comm=syz.3.1082 [ 126.337150][ T7499] loop5: detected capacity change from 0 to 8192 [ 126.344230][ T7497] loop2: detected capacity change from 0 to 1024 [ 126.353100][ T7497] EXT4-fs: Ignoring removed orlov option [ 126.357340][ T7499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.383472][ T7497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.442993][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1083'. [ 126.451981][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1083'. [ 126.460971][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1083'. [ 126.476168][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1083'. [ 126.489221][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1083'. [ 126.501075][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.550358][ T7507] loop2: detected capacity change from 0 to 128 [ 126.574760][ T7505] vhci_hcd: invalid port number 96 [ 126.579990][ T7505] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 126.581224][ T7509] loop2: detected capacity change from 0 to 512 [ 126.594732][ T7509] EXT4-fs: Ignoring removed bh option [ 126.600499][ T7509] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.609592][ T7509] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 126.631321][ T7509] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 126.641369][ T7509] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 126.649915][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.685593][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.708936][ T7512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1089'. [ 126.717964][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'. [ 126.726995][ T7512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1089'. [ 127.025845][ T7534] sctp: [Deprecated]: syz.3.1096 (pid 7534) Use of int in max_burst socket option deprecated. [ 127.025845][ T7534] Use struct sctp_assoc_value instead [ 127.080685][ T7538] netlink: '+}[@': attribute type 13 has an invalid length. [ 127.635135][ T7553] tipc: Enabled bearer , priority 0 [ 127.652325][ T7553] syzkaller0: entered promiscuous mode [ 127.657865][ T7553] syzkaller0: entered allmulticast mode [ 127.668288][ T7553] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.678179][ T7553] tipc: Resetting bearer [ 127.686900][ T7551] tipc: Resetting bearer [ 127.695554][ T7558] loop2: detected capacity change from 0 to 512 [ 127.704087][ T7551] tipc: Disabling bearer [ 127.715470][ T7552] loop5: detected capacity change from 0 to 256 [ 127.725373][ T7552] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.738723][ T7558] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1106: Failed to acquire dquot type 1 [ 127.751042][ T7558] EXT4-fs (loop2): 1 truncate cleaned up [ 127.758866][ T7558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.771858][ T7558] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.802144][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.813778][ T7565] lo speed is unknown, defaulting to 1000 [ 127.858252][ T7575] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 127.945945][ T7581] lo speed is unknown, defaulting to 1000 [ 128.338414][ T7595] bridge0: port 3(batadv1) entered blocking state [ 128.345056][ T7595] bridge0: port 3(batadv1) entered disabled state [ 128.356641][ T7595] batadv1: entered allmulticast mode [ 128.363524][ T7595] batadv1: entered promiscuous mode [ 128.751404][ T7606] netlink: 'syz.5.1121': attribute type 4 has an invalid length. [ 128.789481][ T7606] netlink: 'syz.5.1121': attribute type 4 has an invalid length. [ 128.839806][ T2849] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 128.849149][ T2849] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 128.944385][ T7608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.091721][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 129.091736][ T29] audit: type=1326 audit(1754978056.058:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.120877][ T29] audit: type=1326 audit(1754978056.058:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.143822][ T29] audit: type=1326 audit(1754978056.058:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.166687][ T29] audit: type=1326 audit(1754978056.068:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.189619][ T29] audit: type=1326 audit(1754978056.068:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.212484][ T29] audit: type=1326 audit(1754978056.068:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.235356][ T29] audit: type=1326 audit(1754978056.068:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.258232][ T29] audit: type=1326 audit(1754978056.068:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.281171][ T29] audit: type=1326 audit(1754978056.068:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 129.304033][ T29] audit: type=1326 audit(1754978056.068:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dc2debe9 code=0x7ffc0000 [ 130.153846][ T7638] can: request_module (can-proto-0) failed. [ 130.207245][ T7645] lo speed is unknown, defaulting to 1000 [ 130.622970][ T7662] IPv6: Can't replace route, no match found [ 130.784877][ T7671] netlink: 'syz.6.1146': attribute type 4 has an invalid length. [ 130.827303][ T7671] netlink: 'syz.6.1146': attribute type 4 has an invalid length. [ 130.891547][ T7677] vlan0: entered allmulticast mode [ 131.046730][ T7685] __nla_validate_parse: 5 callbacks suppressed [ 131.046744][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'. [ 131.099539][ T7692] loop2: detected capacity change from 0 to 512 [ 131.106389][ T7692] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 131.117998][ T7692] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1154: bg 0: block 104: invalid block bitmap [ 131.132260][ T7692] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 131.141285][ T7692] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1154: invalid indirect mapped block 1 (level 1) [ 131.155721][ T7692] EXT4-fs (loop2): 1 truncate cleaned up [ 131.161835][ T7692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.190707][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 131.198199][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.205593][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.213057][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.220516][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.223619][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1155'. [ 131.227887][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.227911][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.243075][ T7700] syz_tun: entered promiscuous mode [ 131.244149][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.244170][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.252728][ T7700] macvtap1: entered promiscuous mode [ 131.256758][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.264242][ T7700] macvtap1: entered allmulticast mode [ 131.279325][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 131.284320][ T7700] syz_tun: entered allmulticast mode [ 131.305988][ T7701] syz_tun: left allmulticast mode [ 131.311392][ T7701] syz_tun: left promiscuous mode [ 131.343770][ T7703] loop5: detected capacity change from 0 to 512 [ 131.350661][ T7703] ext4: Unknown parameter 'pcr' [ 131.360912][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.864539][ T7716] IPv6: Can't replace route, no match found [ 132.479734][ T7735] netlink: 'syz.5.1165': attribute type 10 has an invalid length. [ 132.519434][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.568974][ T7735] team0: entered promiscuous mode [ 132.574189][ T7735] team_slave_0: entered promiscuous mode [ 132.580028][ T7735] team_slave_1: entered promiscuous mode [ 132.650083][ T7735] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.155735][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 133.164684][ T7749] tipc: Enabled bearer , priority 10 [ 133.202307][ T7749] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1180'. [ 133.227784][ T7749] tipc: Resetting bearer [ 133.238149][ T7749] tipc: Disabling bearer [ 133.297212][ T7755] vlan0: entered allmulticast mode [ 133.302413][ T7755] bridge_slave_0: entered allmulticast mode [ 134.143760][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 134.143776][ T29] audit: type=1326 audit(1754978061.122:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.173461][ T29] audit: type=1326 audit(1754978061.122:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.208818][ T29] audit: type=1326 audit(1754978061.122:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.232318][ T29] audit: type=1326 audit(1754978061.122:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.255749][ T29] audit: type=1326 audit(1754978061.122:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.279179][ T29] audit: type=1326 audit(1754978061.122:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.302783][ T29] audit: type=1326 audit(1754978061.122:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.326218][ T29] audit: type=1326 audit(1754978061.122:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.349886][ T29] audit: type=1326 audit(1754978061.122:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.373446][ T29] audit: type=1326 audit(1754978061.122:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd8dbebe9 code=0x7ffc0000 [ 134.424871][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.432387][ T7786] loop6: detected capacity change from 0 to 2048 [ 134.446534][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.513947][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 134.618209][ T7803] tipc: Enabling of bearer rejected, failed to enable media [ 134.633426][ T7804] vlan2: entered allmulticast mode [ 134.638577][ T7804] bridge_slave_0: entered allmulticast mode [ 134.737111][ T7825] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 134.745182][ T7825] geneve1: entered promiscuous mode [ 135.078931][ T7844] loop5: detected capacity change from 0 to 2048 [ 135.937934][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.059005][ T7856] loop6: detected capacity change from 0 to 512 [ 136.069445][ T7857] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 136.077686][ T7856] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.117834][ T7856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.156322][ T7856] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.284756][ T3847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.358979][ T7876] .`: (slave dummy0): Releasing backup interface [ 136.380448][ T7876] .`: (slave batadv0): Releasing backup interface [ 136.403524][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.417131][ T7876] .`: (slave bond_slave_0): Releasing backup interface [ 136.436466][ T7876] .`: (slave bond_slave_1): Releasing backup interface [ 136.446177][ T7881] siw: device registration error -23 [ 136.459058][ T7876] team0: Port device team_slave_0 removed [ 136.468683][ T7876] team0: Port device 26±ÿ removed [ 136.474197][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.487956][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.512560][ T7876] .`: (slave geneve1): Releasing backup interface [ 136.548348][ T4056] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.557254][ T4056] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.566651][ T4056] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.575111][ T4056] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.017471][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 138.194566][ T7900] netem: change failed [ 138.763024][ T7915] tipc: Enabled bearer , priority 0 [ 138.774688][ T7915] syzkaller0: entered promiscuous mode [ 138.780169][ T7915] syzkaller0: entered allmulticast mode [ 138.790222][ T7915] tipc: Resetting bearer [ 138.797482][ T7914] tipc: Resetting bearer [ 138.807292][ T7914] tipc: Disabling bearer [ 138.816755][ T7918] vlan1: entered allmulticast mode [ 138.888841][ T7923] loop2: detected capacity change from 0 to 512 [ 138.904766][ T7923] ext4: Unknown parameter 'fsname' [ 138.985576][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 138.994803][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 139.023110][ T7927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7927 comm=syz.2.1224 [ 139.326816][ T7935] ================================================================== [ 139.334915][ T7935] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 139.342709][ T7935] [ 139.345007][ T7935] write to 0xffffea000490c8d8 of 8 bytes by task 7936 on cpu 0: [ 139.352638][ T7935] __filemap_remove_folio+0x1a5/0x2a0 [ 139.357988][ T7935] filemap_remove_folio+0x6d/0x1d0 [ 139.363077][ T7935] truncate_inode_folio+0x42/0x50 [ 139.368073][ T7935] shmem_undo_range+0x244/0xa80 [ 139.372901][ T7935] shmem_evict_inode+0x134/0x520 [ 139.377814][ T7935] evict+0x2e0/0x550 [ 139.381687][ T7935] iput+0x447/0x5b0 [ 139.385470][ T7935] dentry_unlink_inode+0x24f/0x260 [ 139.390564][ T7935] __dentry_kill+0x18d/0x4b0 [ 139.395128][ T7935] dput+0x5e/0xd0 [ 139.398737][ T7935] __fput+0x444/0x650 [ 139.402697][ T7935] ____fput+0x1c/0x30 [ 139.406655][ T7935] task_work_run+0x12e/0x1a0 [ 139.411220][ T7935] exit_to_user_mode_loop+0xe4/0x100 [ 139.416481][ T7935] do_syscall_64+0x1d6/0x200 [ 139.421050][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.426915][ T7935] [ 139.429212][ T7935] read to 0xffffea000490c8d8 of 8 bytes by task 7935 on cpu 1: [ 139.436725][ T7935] folio_mapping+0xa1/0x120 [ 139.441208][ T7935] evict_folios+0xdd9/0x3520 [ 139.445774][ T7935] try_to_shrink_lruvec+0x5b5/0x950 [ 139.450946][ T7935] shrink_lruvec+0x22e/0x1b50 [ 139.455597][ T7935] shrink_node+0x686/0x2120 [ 139.460075][ T7935] do_try_to_free_pages+0x3f6/0xcd0 [ 139.465248][ T7935] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 139.471116][ T7935] try_charge_memcg+0x358/0x9e0 [ 139.475943][ T7935] obj_cgroup_charge_pages+0xa6/0x150 [ 139.481293][ T7935] __memcg_kmem_charge_page+0x9f/0x170 [ 139.486735][ T7935] __alloc_frozen_pages_noprof+0x188/0x360 [ 139.492522][ T7935] alloc_pages_mpol+0xb3/0x250 [ 139.497274][ T7935] alloc_pages_noprof+0x90/0x130 [ 139.502195][ T7935] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 139.507982][ T7935] __kvmalloc_node_noprof+0x30f/0x4e0 [ 139.513337][ T7935] ip_set_alloc+0x1f/0x30 [ 139.517650][ T7935] hash_netiface_create+0x282/0x740 [ 139.522826][ T7935] ip_set_create+0x3cc/0x960 [ 139.527390][ T7935] nfnetlink_rcv_msg+0x4c6/0x590 [ 139.532305][ T7935] netlink_rcv_skb+0x120/0x220 [ 139.537049][ T7935] nfnetlink_rcv+0x16b/0x1690 [ 139.541704][ T7935] netlink_unicast+0x5c0/0x690 [ 139.546447][ T7935] netlink_sendmsg+0x58b/0x6b0 [ 139.551185][ T7935] __sock_sendmsg+0x145/0x180 [ 139.555840][ T7935] ____sys_sendmsg+0x31e/0x4e0 [ 139.560576][ T7935] ___sys_sendmsg+0x17b/0x1d0 [ 139.565227][ T7935] __x64_sys_sendmsg+0xd4/0x160 [ 139.570048][ T7935] x64_sys_call+0x191e/0x2ff0 [ 139.574701][ T7935] do_syscall_64+0xd2/0x200 [ 139.579194][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.585059][ T7935] [ 139.587357][ T7935] value changed: 0xffff8881454001f0 -> 0x0000000000000000 [ 139.594433][ T7935] [ 139.596731][ T7935] Reported by Kernel Concurrency Sanitizer on: [ 139.602861][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.1.1230 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 139.615241][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.625270][ T7935] ==================================================================