last executing test programs: 4m20.618815804s ago: executing program 32 (id=6689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054) 4m19.742255892s ago: executing program 33 (id=6723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) 4m19.069090249s ago: executing program 34 (id=6740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) 2m51.707623487s ago: executing program 35 (id=9883): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.998923331s ago: executing program 36 (id=10755): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x4f9, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @private1, 0x10000}, {0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0xffffffffffffffff, 0xffff}}, 0x48) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x2, 0x0, 0x0, 0x402e}) 1m27.155168284s ago: executing program 37 (id=12957): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x800000ffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_setup(0x39c, &(0x7f0000000040)={0x0, 0xc8a1, 0x1, 0x3, 0xc1}) close_range(r1, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) 1m22.682149681s ago: executing program 38 (id=13565): r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x34020000) 1m18.661856984s ago: executing program 39 (id=13652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0x2678, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x2648, 0x2, [@TCA_RSVP_ACT={0x2644, 0x6, [@m_connmark={0x128, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x76, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1ff, 0x3, 0x0, 0x6}, 0x1cb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc60, 0x7, 0x4, 0x7, 0x8}, 0x9}}]}, {0xa1, 0x6, "bd75706d89ac21e4efa146f8edc9dc74a264135d8be0a15b03b916d2ec926ace8d391e40b7cbcd8dad534b781c86c08e7b433e52df8726554d80eb351982d458c73cba45ee3db878a247a4af2a2c24d58b2ffd71df896a448e6932afbda738695bf1847dbce541f4e1e6139f943f0f59c533035d59afdce7da341e5d230d69c795176f5fa48eb2ad62376a00000f8837d2c097ab28add93479d268f0da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf90, 0x3, 0x0, 0x0, {{0xa}, {0xe90, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2, [{0xfff, 0x4, 0xfffffff8, 0x2782f00, 0x2, 0x6090}, {0x699, 0x4, 0xd79, 0xfffffffe, 0x2, 0x2}, {0x1, 0x3, 0x5, 0x200, 0x0, 0xfffffffa}]}, [{0x2, 0xfffffffb, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x3, 0x0, 0x8, 0xf}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb6c, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x10000}, {0x0, 0x80000000, 0x85, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7d0, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x0, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0x10000, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xeef, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x204, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x1}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x7, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x9}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x7fffffff, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x2, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x9, 0x8}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x3, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x7}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0xd5, 0x6, "b72cad9dfd0ee1daefe8c93e0602743215b52d27bc7c99338bd43bdc4f75eae44c2a4235fe44b7bcdf688acabe1021e01ffa21e9c8b191763ca72904c55e64b5d9a938f31deb4684d5683c2e076346f07612abe19713dff2f2216879367aba15ad79c1acad4e675fdca517a022c42b250f9abb64c0ee4e3dcc66087b16b56e352a9580de053681774f19729c39192436c831496d1a4632134087249aaf27ed0004d8051a834f49aca59b42124f8c31dc6ca4cab51a95d57f82b0d0c43330ac070695404802e9bb070bc172393fee16c945"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xb4, 0x3, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x4, 0x0, 0x110d, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x65, 0x6, "56e43759954cbeea87a923de98e2286fbcc56acf6b12b311659ef7ea84341210e79a3e6a663ab7df7ca60c9677283b702a416de45c8f60e3ca26f96557c73a5f780d5b0c43c3d28eaae7beb4e54eac8161c2b15bb938edcb62ef46a9e63fe06bed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0x14d4, 0x0, 0x0, 0x0, {{0xb}, {0x14a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x0, 0x5, 0x9, 0x5, 0x8, 0x7ff, 0x3, 0x40, 0x296d, 0x7fffffff, 0x1, 0x6, 0x5, 0x2, 0x6, 0x0, 0x6, 0x2, 0x7, 0x1a, 0x5, 0x8, 0xbc, 0x1, 0x10d, 0x2000000, 0x5, 0x4, 0xe83, 0x4, 0x6, 0x28000, 0x57c, 0xa, 0x1, 0x0, 0xad, 0x4, 0x6, 0xfffff000, 0x9, 0x5, 0x6, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x4, 0x9, 0xec, 0x8, 0x35a, 0x6, 0x5, 0x5, 0x9, 0x7, 0x12fb, 0xfffffffd, 0x5, 0x9, 0x200, 0x7, 0x4, 0x7, 0xf, 0xff, 0x0, 0x6, 0x80, 0x40, 0x9, 0x71da, 0x7, 0x80000000, 0xfff, 0x2, 0xf2e, 0x10000, 0x9, 0x5, 0x1, 0x1, 0x5, 0x8, 0xb99, 0xf, 0x8, 0x2702, 0xa2, 0x101, 0x10000, 0x5, 0xe, 0x391, 0x8, 0xa0, 0x7, 0xdc4, 0x9, 0x2, 0x9, 0x4, 0xd16, 0x4, 0xab, 0xa, 0xffff4eaf, 0xffffffff, 0x8, 0x9, 0x900000, 0x3, 0x7, 0x9, 0xa, 0x7f, 0x1a3, 0x7, 0x401, 0x8, 0x6, 0x9, 0x82, 0x0, 0x5, 0x3, 0x100, 0x8, 0x7a, 0x5, 0xf, 0x10000, 0x3, 0x40000000, 0x10, 0x2, 0x8, 0x7f, 0x2, 0x6d5, 0x2, 0x7, 0xfffffffa, 0x7fff, 0x4, 0x5, 0x3, 0x5, 0xe000, 0x4, 0x4, 0x7, 0x3, 0x6, 0x9, 0x923e, 0x200, 0xfffffffc, 0x200, 0x2a4, 0x5, 0x7, 0xef3, 0x8, 0x48f, 0xd4, 0x1, 0x3ff, 0x9, 0x323c, 0x8, 0x5, 0xff, 0xa, 0xfffffff9, 0x4, 0x2, 0x2, 0x4, 0x1, 0x7fffffff, 0xd40, 0x0, 0xff, 0x5, 0x3, 0x200, 0x9, 0x2, 0x7ff, 0x3ef, 0x3, 0x5, 0xfffffffd, 0x8, 0x0, 0x20ac, 0x0, 0x0, 0x1, 0xc, 0x7, 0x1, 0x7, 0x5, 0xec4, 0x5, 0x5b, 0x6, 0x5, 0x6b58, 0x8001, 0x718, 0xffffff01, 0xfff, 0x1, 0x7fffffff, 0x1c, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x5, 0x3c, 0x26000000, 0x5, 0x1, 0xfd, 0x7fff, 0x9, 0x80, 0xffffff06, 0x7, 0x80000000, 0x8, 0x4, 0x9, 0x4, 0xba, 0xff, 0x3, 0x9, 0xfffffffb, 0x6, 0x401, 0x3, 0x8, 0x463c, 0x917]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7ff, 0x1, 0x2, 0x3, 0x1, 0x7fffffff, 0x4, 0x7, 0x2d, 0x7, 0x0, 0x400, 0x10000, 0x401, 0x149, 0x6, 0xc, 0xffffffff, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x6a, 0x5, 0x2, 0x4, 0x3, 0x7, 0x8000, 0x3, 0x1, 0xfd5, 0x6, 0xfffffbff, 0x23d6, 0xff, 0x101, 0x80d, 0x3, 0x9, 0x3, 0x1f, 0x2, 0x7, 0x400, 0x1, 0xbe, 0x1, 0x2, 0xc6, 0x2, 0x6, 0x2020, 0x9, 0x5f0, 0x5, 0x81, 0x100, 0xf4, 0x4, 0xffffffff, 0x9, 0x4, 0x2f, 0x1, 0xfff, 0x8, 0x81, 0x3, 0x8001, 0x2, 0x8, 0x7, 0x8, 0x80, 0x166, 0x10001, 0x2, 0x8, 0x6, 0x0, 0x400, 0x10001, 0x6, 0x1a, 0x64a8ce5d, 0x100, 0x4, 0xc000, 0x5, 0x6, 0xe, 0x5, 0xc0, 0x0, 0x3ff, 0xcd, 0x2, 0x6b6, 0xb27, 0x99, 0x5, 0xfffffc01, 0x6, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x80000001, 0x9, 0x233, 0x6, 0x6e8, 0x8, 0xa1, 0x0, 0xffffff56, 0x9, 0x8, 0x0, 0x39000000, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x2, 0xbe, 0x653, 0x7e3d, 0x7fffffff, 0x5, 0x8000, 0x7, 0x100, 0x5, 0x5, 0x8, 0x7fffffff, 0x1, 0x2, 0x9, 0x5, 0x0, 0x4, 0x3, 0xf5, 0xace, 0x800, 0xc, 0x80000000, 0x5, 0x2, 0x5, 0x800, 0x9, 0x7, 0x6, 0x0, 0x1, 0x4, 0x6, 0x1, 0x1, 0x3, 0x10001, 0xf, 0xfffffff2, 0xfff, 0x1ff, 0x4, 0x6, 0x6f2, 0x8, 0x6, 0x1, 0x4, 0x81, 0xffffffff, 0xfffffff8, 0xffff, 0x1, 0x4, 0xe3c2, 0x200, 0x4, 0x80000000, 0x4343, 0x0, 0x1763, 0xff6, 0x8, 0x8, 0x70d8, 0x2706, 0xb65f5cac, 0x0, 0x7, 0x92b, 0x1, 0x48, 0x3, 0x0, 0x8, 0xd1, 0x7, 0x1e2, 0x1, 0xe, 0x7, 0x9, 0x9, 0x8f, 0x1, 0x8, 0x4, 0x9f, 0x12000000, 0x7, 0x7, 0x7, 0x9, 0x0, 0xfd, 0x80000000, 0x21fc, 0x8, 0x3, 0x80000000, 0x6, 0x200, 0x9, 0x60, 0x3, 0xb9, 0x6, 0x6, 0x8, 0x4ccab518, 0x8, 0x4df5, 0xffffffff, 0xc000, 0x1000, 0x7f, 0xb77, 0xa3, 0x7, 0x8, 0x681, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x10, 0x4, 0x10, 0x7, 0x6d06, 0xfb, 0x0, 0x9, 0x4, 0x2, 0x3403, 0x1, 0x8, 0x6, 0xb, 0x6, 0x0, 0x4, 0x7, 0x7, 0x7, 0x2, 0x8, 0x3, 0xfff, 0x4, 0x8, 0x0, 0xe09, 0x80, 0x2, 0x1c, 0xa10f, 0x2, 0x7, 0x4, 0x1, 0x401, 0x6, 0x2, 0x0, 0x1, 0x10, 0x8, 0x0, 0x10000, 0x80000000, 0x3, 0x4, 0x200, 0x7fff, 0x8, 0x8e0, 0x4, 0xfffff000, 0x786d, 0x0, 0x26c90, 0x219, 0x7, 0x2, 0x8, 0x5, 0x7a, 0x800, 0x9, 0x5, 0x5, 0xe, 0x2, 0x7, 0x305c, 0x9, 0x9, 0x6, 0xffff9a45, 0x4, 0x10000, 0x80000000, 0xffffffff, 0x8, 0x2, 0x2, 0x5, 0x5, 0x5, 0x4, 0x8, 0x5, 0x7, 0x4f48, 0x8, 0xfff, 0x2, 0x6, 0x0, 0x40, 0x2, 0x3, 0x1000, 0x1, 0x3, 0x5, 0x9, 0x2, 0x8080, 0x7, 0x0, 0x7, 0x80000000, 0x5, 0x0, 0xbe, 0x3, 0xd, 0x2, 0x0, 0x5, 0x9, 0x9, 0x8, 0x3, 0x67653bff, 0x4, 0xfffffffd, 0x3, 0x3, 0x380000, 0xe, 0x9f51, 0x3, 0x8, 0x3ff, 0x4, 0x11, 0x4, 0xd3, 0x7, 0xff, 0x1, 0x1, 0x4, 0x9, 0x8, 0x7f, 0x10, 0x1000, 0x2, 0x7, 0x1, 0x8, 0xf785, 0x30, 0x8, 0x7, 0x7, 0xe, 0x3, 0x6, 0x12, 0x8, 0x401, 0xffff8000, 0x35f, 0x0, 0x7, 0x7, 0x81, 0x5, 0x7fffffff, 0x2, 0x7, 0x1000, 0x9, 0x0, 0xfffff45b, 0x0, 0x2, 0xffffff81, 0x0, 0x10000, 0x6, 0x80000001, 0x40, 0x5, 0x9, 0x800, 0x4, 0x1000, 0xffffffff, 0x100, 0x4da9, 0x8, 0x0, 0xcf, 0xffff, 0x9, 0x6, 0x4, 0x9, 0x80000000, 0x322e71f0, 0x3, 0x78b6dc54, 0x1, 0x0, 0x447, 0x37, 0x7, 0x8, 0x829, 0xff, 0x3, 0x4, 0xd, 0x2, 0x8001, 0x7fff, 0x1, 0xcc6, 0x1, 0x9, 0x8, 0x624, 0x0, 0x100, 0x0, 0x100, 0xbbd, 0x9, 0x10000, 0x8, 0x6e, 0x800, 0x80fb, 0x7, 0x8, 0x80000001, 0x7, 0xfffffffb, 0x7db, 0xfd0b7939, 0x8, 0x401, 0x6c, 0x6, 0x200, 0xffffffff, 0x1, 0x0, 0xa, 0x3, 0x4be66d51, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x20000000, 0xddb, 0x7, 0x0, {0x6, 0x2, 0x1, 0xaf38, 0x0, 0x3}, {0xf, 0x2, 0x2, 0x8, 0xabe2, 0x7}, 0x9, 0x100, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x200, 0x1, 0x1, 0xff, 0x2, 0x9, 0x7, 0xffffff81, 0x1, 0x3ff, 0x6, 0x6, 0x6, 0x8001, 0x4, 0x100, 0x0, 0x5, 0x2, 0x8, 0xeab, 0x6, 0x1, 0x9, 0x9a0, 0x0, 0x896, 0x0, 0x8000, 0x8, 0x1944, 0xffff, 0x9fa, 0x324, 0x2, 0x1, 0x8, 0x3, 0x10001, 0xc, 0x4a1, 0x2, 0x400, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8506, 0x8, 0x1, 0x2, 0x401, 0x5a7, 0x3, 0x2, 0x10e0, 0x3, 0x9, 0x2, 0x8000, 0x7ff, 0x3f51348c, 0x7, 0x10001, 0x10000, 0x7f, 0x1, 0x1000, 0x7f, 0x3, 0xfffffffb, 0x2, 0x0, 0x1, 0x7ff, 0xfff, 0x3, 0x9, 0x9, 0x1, 0x81, 0x8, 0x3, 0x4, 0x3, 0x0, 0x3, 0x2, 0x3, 0x5, 0x5, 0x2, 0xfffffb9d, 0x5, 0x4, 0x80000001, 0xe5b6, 0x1, 0x1, 0x0, 0xed70, 0x3, 0x32, 0xb, 0x10000, 0x6, 0x2, 0x7fffffff, 0x7, 0x3, 0x9, 0xac, 0x0, 0x8, 0x1000, 0x5, 0x80, 0x800, 0x5, 0xfffffbff, 0x6, 0x3, 0xd1, 0x9, 0x62c, 0x6, 0x3, 0xc2d, 0x6, 0x220, 0x2, 0xf95, 0x1, 0x0, 0x5, 0x3ff, 0xf74, 0x7c1, 0x3, 0xcc, 0xf24, 0x519, 0x6, 0xc, 0xa, 0xffff, 0x2, 0x9, 0x3, 0x0, 0xffffffff, 0x0, 0xb2, 0xffff, 0x9, 0xcd9c, 0x6, 0x1ff, 0x81, 0x8ab1, 0xe, 0x140, 0xe3b, 0x9, 0x7ff, 0xb5bc, 0x7, 0x3, 0x7, 0x253d, 0x6, 0x8, 0x6e08, 0x2, 0x8, 0x3cffc163, 0xc, 0x3, 0xbad4, 0x3, 0x101, 0x0, 0x4, 0x7, 0x8, 0x7, 0x0, 0x4144, 0x80000000, 0x2, 0x7fffffff, 0x3ff, 0x3ff, 0x80000001, 0x66a, 0x27, 0x80000000, 0x7fffffff, 0x6, 0xfffffffe, 0x7, 0x1, 0x20e8, 0x9, 0x5, 0x0, 0x7, 0x441f, 0x9, 0x3, 0x6, 0x8, 0xa, 0x5, 0x3, 0x9, 0xb, 0x0, 0x3, 0x4, 0x43a8, 0x9, 0x3, 0x0, 0x6, 0x5, 0xff, 0xf92, 0xe, 0xffffff8e, 0x5c5, 0x8, 0x6b1d, 0x6, 0xfffffff0, 0x1, 0x8c, 0x5, 0x1ff, 0x100, 0x8001, 0x1, 0x0, 0xfffffffc, 0x8, 0x6f1c88ed, 0x6, 0x3, 0x2, 0x6, 0x1, 0x6, 0xcc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7fffffff, 0x40, 0x2, 0x0, 0x7, 0x81, 0x4000000, 0x6, 0x0, 0x7, 0x6, 0x1, 0x62, 0x8, 0xfffffffb, 0x2, 0x36b7, 0x80000000, 0x5, 0x1a, 0x8, 0x9, 0x101, 0xfffff001, 0x6, 0x2, 0x6, 0x1, 0x9, 0x9, 0x1ff, 0x17, 0xc127, 0x7fff, 0x7, 0x4, 0x7fff, 0x3b3, 0x200, 0x5, 0x2d31, 0x6, 0x80, 0xfffffff7, 0x600000, 0x100, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0x80, 0x0, 0xb9, 0x1, 0xfffffff9, 0x7, 0x7f, 0x2, 0x3, 0x9, 0x9, 0x2, 0xffffffff, 0xe4be, 0x1, 0x0, 0x7fff, 0x4, 0x8445, 0x0, 0xffff, 0x1, 0x3206, 0x9, 0xd45, 0x3, 0x1, 0x80000001, 0x2, 0x2, 0x800, 0x7, 0x9, 0xb, 0x9, 0x5, 0x400, 0x200, 0x8, 0x5, 0x9, 0x0, 0xb64a, 0x4, 0x8001, 0x7, 0x8001, 0x3, 0x7, 0xff, 0x8, 0x7fff, 0x4, 0x2, 0x8, 0x0, 0x2, 0x10000, 0x1, 0xf16, 0x181de494, 0x400, 0xffffffff, 0x2, 0x7ff, 0xe68b, 0xfffffffc, 0x800, 0x7fff, 0x56c1fbd4, 0x400, 0x8001, 0x2, 0x8, 0x7, 0x2, 0x0, 0x2, 0x0, 0x8, 0x401, 0x5, 0x2, 0xffff, 0xffffffff, 0x400, 0x0, 0x795, 0x3, 0x9, 0x755, 0x6, 0x3, 0x8, 0x6, 0x8, 0x10, 0xd, 0x10, 0x8, 0x45, 0x80, 0xfff, 0xe7d, 0x6, 0xa048, 0xa09a, 0x1, 0x10, 0x101, 0x5, 0x7fffffff, 0xffffafb3, 0x7, 0x2, 0x6, 0xfffffffc, 0xfff, 0x0, 0x0, 0x2, 0x2, 0x8, 0x9, 0x2, 0x371c9f7d, 0x6, 0x1, 0xcb, 0x5, 0xfffff801, 0x2, 0x5, 0xfff, 0x3ff, 0x9569, 0x8, 0x43, 0x6, 0x0, 0x6, 0x0, 0x3, 0xd81, 0x6, 0x6, 0x17eb, 0x4, 0x6, 0x4639, 0x4, 0x8, 0x8, 0x6, 0x7fff, 0x0, 0x3, 0x74, 0x9, 0xb, 0x3, 0x0, 0x5, 0x800, 0x3, 0xfffffff8, 0xffffffff, 0x9, 0x7, 0x6, 0x0, 0xd, 0x3, 0x469, 0x7, 0x7bc9, 0x6, 0x5, 0x9, 0x301a, 0xffffff05, 0x7, 0x6, 0xfffffff9, 0xfffffff8, 0x5, 0x400, 0x101, 0x800, 0x4, 0x9, 0x4, 0x80000000, 0x3, 0xeabd, 0x428, 0x6, 0x2, 0x10001, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2678}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m17.940228886s ago: executing program 3 (id=13679): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m17.875498523s ago: executing program 3 (id=13682): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8405}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1m17.716417838s ago: executing program 3 (id=13687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 1m17.675334542s ago: executing program 3 (id=13690): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 1m17.222574058s ago: executing program 6 (id=13707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m17.048569325s ago: executing program 3 (id=13710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x11, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m16.993495251s ago: executing program 6 (id=13712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) 1m16.90196474s ago: executing program 6 (id=13716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m16.852443315s ago: executing program 6 (id=13720): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 1m16.663405264s ago: executing program 3 (id=13725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m16.651017965s ago: executing program 40 (id=13725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m16.338624197s ago: executing program 6 (id=13730): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m15.70335439s ago: executing program 6 (id=13745): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 1m15.7032369s ago: executing program 41 (id=13745): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 1m8.274475844s ago: executing program 5 (id=14061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, 0x0}, &(0x7f0000000600)=0x10) 1m8.190443092s ago: executing program 5 (id=14067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r2, 0x0, 0x7ffff088) 1m8.173876404s ago: executing program 5 (id=14069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 1m8.041606487s ago: executing program 5 (id=14072): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m7.41712076s ago: executing program 5 (id=14084): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1m7.096258502s ago: executing program 5 (id=14105): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000480)=""/65, 0x41}], 0x1, 0x60, 0x6) 1m7.074242144s ago: executing program 42 (id=14105): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000480)=""/65, 0x41}], 0x1, 0x60, 0x6) 1m4.305028521s ago: executing program 0 (id=14192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 1m4.292047103s ago: executing program 0 (id=14196): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x100000000) 1m3.961623246s ago: executing program 0 (id=14220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x62c21a4ade68aba1, 0x3, 0x0, {{0x5}, {@val={0x8, 0x3, 0x7e}, @void, @void}}}, 0x1c}}, 0x0) 1m3.92599071s ago: executing program 0 (id=14212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m3.576326224s ago: executing program 0 (id=14227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1m3.335085238s ago: executing program 0 (id=14233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 1m3.334999798s ago: executing program 43 (id=14233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 1m3.32022697s ago: executing program 4 (id=14235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getrusage(0x0, &(0x7f0000000440)) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sysinfo(0x0) 1m3.283152764s ago: executing program 4 (id=14236): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 1m3.191371002s ago: executing program 4 (id=14237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='!pu==0||!') 1m3.188481673s ago: executing program 4 (id=14238): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m2.964094746s ago: executing program 4 (id=14239): unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1m2.507327241s ago: executing program 4 (id=14246): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103c43, 0x1ce) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x20000080ffff, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.479590314s ago: executing program 44 (id=14246): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103c43, 0x1ce) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x20000080ffff, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2.117161078s ago: executing program 9 (id=16568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 2.078910542s ago: executing program 9 (id=16569): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.070648773s ago: executing program 2 (id=16571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000e80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xb1p\xce\xb3\x00\x1dz\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xb8\t\xd6\xd5>N&\x00\x00\x00\x00\x00\x00\x00\a\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1b\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x00\x00\x00\x002\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ4\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x852P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd9#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\v\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xfb\xf0\x81\xd6&\xc00x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1.159438664s ago: executing program 9 (id=16577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.159199104s ago: executing program 7 (id=16578): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 1.115937599s ago: executing program 7 (id=16580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 1.092165131s ago: executing program 7 (id=16582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1.083666862s ago: executing program 9 (id=16583): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x2b, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @loopback}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.020380909s ago: executing program 2 (id=16585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 260.300164ms ago: executing program 9 (id=16586): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 259.680865ms ago: executing program 2 (id=16598): syz_usb_connect(0x5, 0xc9, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd08042348028c7c010203010902b70002020c508209049301039df99ab1052406000005240087000d240f01080000000e00800002022109050a10000205c2030725018102540007250180090000090505042000080001020f0905060000040508ca072501000a0700072501830901000904900005205545070905050c4000070705090505011000090013090501002000b108090905020420000100c7020109050000080040c5001b2356600602b89292a60a88491d8ee539ee34badb8506e4cddd"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x0) 258.031805ms ago: executing program 8 (id=16599): r0 = socket(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f000001eec0)=""/102400, &(0x7f0000000080)=0x19000) 240.955536ms ago: executing program 1 (id=16588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 198.047601ms ago: executing program 8 (id=16590): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x0, 0x3}}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 193.053661ms ago: executing program 1 (id=16591): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e03, @empty}}]}, 0x110) 183.453902ms ago: executing program 7 (id=16592): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x14, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) 172.118243ms ago: executing program 8 (id=16593): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 164.556034ms ago: executing program 1 (id=16594): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 143.907876ms ago: executing program 8 (id=16595): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 128.796928ms ago: executing program 1 (id=16596): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 90.872882ms ago: executing program 1 (id=16597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 61.480865ms ago: executing program 7 (id=16600): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd10a, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) close_range(r0, 0xffffffffffffffff, 0x0) 59.985855ms ago: executing program 8 (id=16610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) semget$private(0x0, 0x20000000102, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd0000010000080001"], 0x30}}, 0x0) 50.695396ms ago: executing program 1 (id=16601): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 7.3099ms ago: executing program 7 (id=16602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000200)='%-5lx \x00'}, 0x20) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) 0s ago: executing program 8 (id=16603): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}], 0x1, 0x200400c0) kernel console output (not intermixed with test programs): acsec1: entered allmulticast mode [ 386.367525][T15993] bridge0: entered allmulticast mode [ 386.374674][T15993] macsec1: left allmulticast mode [ 386.379864][T15993] bridge0: left allmulticast mode [ 386.386555][T15993] bridge0: left promiscuous mode [ 386.631170][T16021] netlink: 256 bytes leftover after parsing attributes in process `syz.7.14502'. [ 386.766166][T16033] loop8: detected capacity change from 0 to 2048 [ 386.800356][T16033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.030986][T15981] syz.9.14487 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 387.042174][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.9.14487 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.042205][T15981] Tainted: [W]=WARN [ 387.042212][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.042272][T15981] Call Trace: [ 387.042278][T15981] [ 387.042285][T15981] __dump_stack+0x1d/0x30 [ 387.042306][T15981] dump_stack_lvl+0xe8/0x140 [ 387.042327][T15981] dump_stack+0x15/0x1b [ 387.042346][T15981] dump_header+0x81/0x220 [ 387.042433][T15981] oom_kill_process+0x342/0x400 [ 387.042463][T15981] out_of_memory+0x979/0xb80 [ 387.042495][T15981] try_charge_memcg+0x610/0xa10 [ 387.042606][T15981] charge_memcg+0x51/0xc0 [ 387.042675][T15981] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 387.042704][T15981] __read_swap_cache_async+0x17b/0x2d0 [ 387.042731][T15981] swap_cluster_readahead+0x262/0x3c0 [ 387.042857][T15981] swapin_readahead+0xde/0x6f0 [ 387.042880][T15981] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 387.042915][T15981] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 387.042943][T15981] ? __rcu_read_unlock+0x4f/0x70 [ 387.042969][T15981] ? swap_cache_get_folio+0x277/0x280 [ 387.042993][T15981] do_swap_page+0x2ae/0x2370 [ 387.043017][T15981] ? css_rstat_updated+0xb7/0x240 [ 387.043111][T15981] ? __pfx_default_wake_function+0x10/0x10 [ 387.043138][T15981] handle_mm_fault+0x9a5/0x2be0 [ 387.043164][T15981] ? vma_start_read+0x141/0x1f0 [ 387.043196][T15981] do_user_addr_fault+0x630/0x1080 [ 387.043222][T15981] ? fpregs_restore_userregs+0xe2/0x1d0 [ 387.043254][T15981] ? switch_fpu_return+0xe/0x20 [ 387.043311][T15981] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 387.043341][T15981] exc_page_fault+0x62/0xa0 [ 387.043438][T15981] asm_exc_page_fault+0x26/0x30 [ 387.043457][T15981] RIP: 0033:0x7efe6c5c593c [ 387.043527][T15981] Code: 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 387.043543][T15981] RSP: 002b:00007ffea9deacf0 EFLAGS: 00010206 [ 387.043558][T15981] RAX: 0000000000000000 RBX: 00007efe6c945fa0 RCX: 0000000000000000 [ 387.043572][T15981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555589084808 [ 387.043591][T15981] RBP: 00007efe6c947da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 387.043604][T15981] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005e7cc [ 387.043617][T15981] R13: 00007ffea9deade0 R14: ffffffffffffffff R15: 00007ffea9deae00 [ 387.043667][T15981] [ 387.043674][T15981] memory: usage 307200kB, limit 307200kB, failcnt 140 [ 387.084825][T16045] netlink: 'syz.2.14506': attribute type 10 has an invalid length. [ 387.088790][T15981] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 387.088806][T15981] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 387.104625][T16045] ipvlan0: entered allmulticast mode [ 387.107381][T15981] Memory cgroup stats for /syz9: [ 387.115206][T15981] cache 0 [ 387.117723][T16045] veth0_vlan: entered allmulticast mode [ 387.123156][T15981] rss 0 [ 387.123165][T15981] shmem 0 [ 387.123172][T15981] mapped_file 0 [ 387.123178][T15981] dirty 0 [ 387.123185][T15981] writeback 8192 [ 387.155215][T16045] team0: Device ipvlan0 failed to register rx_handler [ 387.159594][T15981] workingset_refault_anon 49 [ 387.159604][T15981] workingset_refault_file 0 [ 387.159612][T15981] swap 483328 [ 387.159619][T15981] swapcached 8192 [ 387.205465][T10774] block device autoloading is deprecated and will be removed. [ 387.206164][T15981] pgpgin 99829 [ 387.206173][T15981] pgpgout 99824 [ 387.206180][T15981] pgfault 133354 [ 387.389490][T15981] pgmajfault 19 [ 387.393012][T15981] inactive_anon 8192 [ 387.396955][T15981] active_anon 0 [ 387.400403][T15981] inactive_file 12288 [ 387.404352][T15981] active_file 0 [ 387.407782][T15981] unevictable 0 [ 387.411232][T15981] hierarchical_memory_limit 314572800 [ 387.416571][T15981] hierarchical_memsw_limit 9223372036854771712 [ 387.422710][T15981] total_cache 0 [ 387.426139][T15981] total_rss 0 [ 387.429458][T15981] total_shmem 0 [ 387.432903][T15981] total_mapped_file 0 [ 387.436866][T15981] total_dirty 0 [ 387.440309][T15981] total_writeback 8192 [ 387.444353][T15981] total_workingset_refault_anon 49 [ 387.449439][T15981] total_workingset_refault_file 0 [ 387.454452][T15981] total_swap 483328 [ 387.458295][T15981] total_swapcached 8192 [ 387.462768][T15981] total_pgpgin 99829 [ 387.466650][T15981] total_pgpgout 99824 [ 387.470792][T15981] total_pgfault 133354 [ 387.474840][T15981] total_pgmajfault 19 [ 387.478791][T15981] total_inactive_anon 8192 [ 387.483210][T15981] total_active_anon 0 [ 387.487159][T15981] total_inactive_file 12288 [ 387.491693][T15981] total_active_file 0 [ 387.495643][T15981] total_unevictable 0 [ 387.499593][T15981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.14487,pid=15981,uid=0 [ 387.514411][T15981] Memory cgroup out of memory: Killed process 15981 (syz.9.14487) total-vm:93956kB, anon-rss:1140kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 387.537116][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.743072][T16084] $Hÿ: renamed from bond0 (while UP) [ 387.753018][T16084] $Hÿ: entered promiscuous mode [ 387.758074][T16084] bond_slave_0: entered promiscuous mode [ 387.763842][T16084] bond_slave_1: entered promiscuous mode [ 387.913625][T16107] loop8: detected capacity change from 0 to 512 [ 387.961337][T16107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.989915][T16107] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.032493][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.162481][T16140] loop7: detected capacity change from 0 to 512 [ 388.169678][T16140] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 388.181634][T16140] EXT4-fs (loop7): 1 truncate cleaned up [ 388.187797][T16140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.236725][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.293847][T16158] netlink: 'syz.8.14545': attribute type 13 has an invalid length. [ 388.305839][T16158] gretap0: refused to change device tx_queue_len [ 388.321342][T16158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.547548][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14551'. [ 388.556720][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14551'. [ 388.602255][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14556'. [ 388.611396][T16181] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14556'. [ 388.672962][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.681867][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.690587][T16191] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16191 comm=syz.8.14561 [ 388.703308][T16191] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16191 comm=syz.8.14561 [ 388.765241][T16207] netlink: zone id is out of range [ 388.770486][T16207] netlink: zone id is out of range [ 388.782351][T16204] loop9: detected capacity change from 0 to 2048 [ 388.799096][T16209] netlink: 'syz.1.14568': attribute type 10 has an invalid length. [ 388.807575][T16207] netlink: set zone limit has 8 unknown bytes [ 388.814944][T16209] batadv0: entered allmulticast mode [ 388.823465][T16204] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.836324][T16209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.848171][T16209] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 388.860235][T16216] netlink: 'syz.1.14568': attribute type 10 has an invalid length. [ 388.919435][T16216] batadv0: entered promiscuous mode [ 388.948312][T16216] bond0: (slave batadv0): Releasing backup interface [ 388.967090][T16216] bridge0: port 3(batadv0) entered blocking state [ 388.973708][T16216] bridge0: port 3(batadv0) entered disabled state [ 389.103692][T16227] loop1: detected capacity change from 0 to 1024 [ 389.120803][T16227] EXT4-fs: Ignoring removed bh option [ 389.143929][T16227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.168784][T16227] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.14575: inode #4294967295: comm syz.1.14575: iget: illegal inode # [ 389.209812][T16227] EXT4-fs (loop1): Remounting filesystem read-only [ 389.216473][T16227] EXT4-fs warning (device loop1): ext4_xattr_block_set:2195: inode #19: comm syz.1.14575: dec ref error=-30 [ 389.279214][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.290232][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.360943][ T6932] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 389.365706][T16259] loop7: detected capacity change from 0 to 1024 [ 389.370202][ T6932] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 389.389967][T16259] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 389.400922][T16259] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 389.417724][T16259] JBD2: no valid journal superblock found [ 389.423519][T16259] EXT4-fs (loop7): Could not load journal inode [ 389.469984][T16259] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 389.487380][T16272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.494836][T16272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.503674][T16272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.511095][T16272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.811857][T16323] loop7: detected capacity change from 0 to 164 [ 389.830951][T16323] bio_check_eod: 12100 callbacks suppressed [ 389.830968][T16323] syz.7.14609: attempt to access beyond end of device [ 389.830968][T16323] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 389.865757][T16323] syz.7.14609: attempt to access beyond end of device [ 389.865757][T16323] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 389.920701][T16335] loop7: detected capacity change from 0 to 2048 [ 389.927176][T16339] netlink: 'syz.8.14615': attribute type 1 has an invalid length. [ 389.954117][T16335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.084187][T16358] loop1: detected capacity change from 0 to 512 [ 390.102431][T16358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.14623: error while reading EA inode 32 err=-116 [ 390.129809][T16358] EXT4-fs (loop1): Remounting filesystem read-only [ 390.145226][T16358] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 390.163728][T16358] EXT4-fs (loop1): 1 orphan inode deleted [ 390.173123][T16358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.197705][T16358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.258460][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.270179][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.303326][T16383] loop1: detected capacity change from 0 to 128 [ 390.311060][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.322414][T16383] syz.1.14631: attempt to access beyond end of device [ 390.322414][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.335826][T16383] buffer_io_error: 20 callbacks suppressed [ 390.335839][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.352715][T16383] syz.1.14631: attempt to access beyond end of device [ 390.352715][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.366079][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.374596][T16383] syz.1.14631: attempt to access beyond end of device [ 390.374596][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.388002][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.405729][T16383] syz.1.14631: attempt to access beyond end of device [ 390.405729][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.419219][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.440033][T16383] syz.1.14631: attempt to access beyond end of device [ 390.440033][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.453422][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.461625][T16383] syz.1.14631: attempt to access beyond end of device [ 390.461625][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.468473][T16396] loop8: detected capacity change from 0 to 764 [ 390.474999][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.489713][T16383] syz.1.14631: attempt to access beyond end of device [ 390.489713][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.503193][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.516156][T16383] syz.1.14631: attempt to access beyond end of device [ 390.516156][T16383] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 390.529514][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.538459][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.546919][T16383] Buffer I/O error on dev loop1, logical block 2078, async page read [ 390.582605][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 390.582618][ T29] audit: type=1400 audit(1763103132.885:16443): avc: denied { getopt } for pid=16408 comm="syz.8.14637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.726612][T16489] __nla_validate_parse: 6 callbacks suppressed [ 390.726624][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14644'. [ 390.743278][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14644'. [ 390.753066][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14644'. [ 390.762456][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14644'. [ 390.794517][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14646'. [ 390.820975][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14646'. [ 390.897033][ T29] audit: type=1326 audit(1763103133.195:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 390.920843][ T29] audit: type=1326 audit(1763103133.195:16445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 390.945807][ T29] audit: type=1326 audit(1763103133.245:16446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 390.969969][ T29] audit: type=1326 audit(1763103133.245:16447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 390.993643][ T29] audit: type=1326 audit(1763103133.245:16448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 391.028173][ T29] audit: type=1326 audit(1763103133.325:16449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 391.091335][T16512] netlink: 'syz.9.14653': attribute type 1 has an invalid length. [ 391.094008][ T29] audit: type=1326 audit(1763103133.325:16450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 391.122811][ T29] audit: type=1326 audit(1763103133.325:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.8.14652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 391.287133][ T29] audit: type=1400 audit(1763103133.585:16452): avc: denied { write } for pid=16529 comm="syz.8.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 391.506697][ T6903] Bluetooth: hci0: Frame reassembly failed (-84) [ 391.739833][T16599] loop8: detected capacity change from 0 to 1024 [ 391.746435][T16599] EXT4-fs: Ignoring removed oldalloc option [ 391.795726][T16599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.821143][T16603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.840586][T16603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.855353][T16599] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.898821][T16599] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.14691: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.917345][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14696'. [ 391.931977][T16599] EXT4-fs (loop8): Remounting filesystem read-only [ 391.939390][T16614] xfrm1: entered promiscuous mode [ 391.945123][T16614] xfrm1: entered allmulticast mode [ 391.978114][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14696'. [ 391.989725][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 392.325648][T16664] pimreg: entered allmulticast mode [ 392.379679][T16664] pimreg: left allmulticast mode [ 392.482804][T16690] loop7: detected capacity change from 0 to 512 [ 392.516592][T16690] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14726: bg 0: block 248: padding at end of block bitmap is not set [ 392.541667][T16690] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14726: Failed to acquire dquot type 1 [ 392.563700][T16690] EXT4-fs (loop7): 1 truncate cleaned up [ 392.580444][T16690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.598797][T16690] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.640073][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.651705][ T6924] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:57: Failed to release dquot type 1 [ 392.702503][T16722] loop9: detected capacity change from 0 to 7 [ 392.718307][T16722] loop9: unable to read partition table [ 392.724938][T16722] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 392.724938][T16722] ) failed (rc=-5) [ 392.769338][T16731] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 392.873388][T16753] loop7: detected capacity change from 0 to 512 [ 392.892377][T16753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.901998][T16760] loop9: detected capacity change from 0 to 512 [ 392.912914][T16753] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.925343][T16760] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.954451][T16760] EXT4-fs (loop9): mount failed [ 392.962178][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.009216][T32329] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 393.016935][T32329] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 393.018641][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.025807][T32329] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 393.041343][T32329] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 393.068193][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.191712][T16809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14769'. [ 393.270013][T16819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16819 comm=syz.7.14773 [ 393.371724][T16831] loop7: detected capacity change from 0 to 164 [ 393.379452][T16831] Unable to read rock-ridge attributes [ 393.397968][T16831] Unable to read rock-ridge attributes [ 393.540212][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 393.546358][T11466] Bluetooth: hci0: command 0x1003 tx timeout [ 393.647549][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14792'. [ 393.718350][T16884] netlink: 'syz.1.14794': attribute type 1 has an invalid length. [ 394.023060][T16917] netlink: 'syz.1.14811': attribute type 29 has an invalid length. [ 394.036911][T16917] netlink: 'syz.1.14811': attribute type 29 has an invalid length. [ 394.201078][T16948] loop1: detected capacity change from 0 to 512 [ 394.217915][T16948] EXT4-fs: Ignoring removed oldalloc option [ 394.230812][T16948] EXT4-fs (loop1): too many log groups per flexible block group [ 394.248703][T16948] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 394.260988][T16948] EXT4-fs (loop1): mount failed [ 394.437276][T16967] loop1: detected capacity change from 0 to 512 [ 394.456082][T16971] netlink: 'syz.9.14831': attribute type 21 has an invalid length. [ 394.470983][T16970] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 394.489999][T16971] netlink: 'syz.9.14831': attribute type 21 has an invalid length. [ 394.490633][T16967] EXT4-fs: dax option not supported [ 394.863611][T17022] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001164 ! [ 394.961006][T17041] netlink: 'syz.9.14864': attribute type 39 has an invalid length. [ 394.970832][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 394.978250][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 394.985667][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 394.993233][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 395.000663][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 395.008081][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 395.015673][ T10] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 395.076948][ T10] hid-generic 0003:0004:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 395.307184][T17087] loop8: detected capacity change from 0 to 512 [ 395.323877][T17087] EXT4-fs: Ignoring removed oldalloc option [ 395.341523][T17087] EXT4-fs (loop8): too many log groups per flexible block group [ 395.350325][T17087] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 395.357269][T17087] EXT4-fs (loop8): mount failed [ 395.638372][T17119] loop2: detected capacity change from 0 to 164 [ 395.654213][T17119] Unable to read rock-ridge attributes [ 395.664731][T17119] Unable to read rock-ridge attributes [ 395.730142][T17132] __nla_validate_parse: 9 callbacks suppressed [ 395.730159][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14895'. [ 395.755802][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 395.755817][ T29] audit: type=1326 audit(1763103138.055:16738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17135 comm="syz.8.14896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.786679][ T29] audit: type=1326 audit(1763103138.055:16739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17135 comm="syz.8.14896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.813607][ T29] audit: type=1326 audit(1763103138.115:16740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17135 comm="syz.8.14896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.837402][ T29] audit: type=1326 audit(1763103138.115:16741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17135 comm="syz.8.14896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.861131][ T29] audit: type=1326 audit(1763103138.115:16742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17135 comm="syz.8.14896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.902304][T17143] loop8: detected capacity change from 0 to 512 [ 395.909062][T17140] loop2: detected capacity change from 0 to 512 [ 395.909274][T17143] EXT4-fs: dax option not supported [ 395.915363][ T29] audit: type=1400 audit(1763103138.205:16743): avc: denied { mounton } for pid=17142 comm="syz.8.14899" path="/185/bus" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.946432][T17140] EXT4-fs: Ignoring removed oldalloc option [ 395.960041][ T29] audit: type=1326 audit(1763103138.255:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17151 comm="syz.8.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 395.983732][ T29] audit: type=1326 audit(1763103138.255:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17151 comm="syz.8.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 396.008325][T17140] EXT4-fs (loop2): too many log groups per flexible block group [ 396.016167][T17140] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 396.035014][T17140] EXT4-fs (loop2): mount failed [ 396.036659][ T29] audit: type=1326 audit(1763103138.265:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17151 comm="syz.8.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 396.063642][ T29] audit: type=1326 audit(1763103138.265:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17151 comm="syz.8.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 396.209099][T17177] netlink: 256 bytes leftover after parsing attributes in process `syz.9.14910'. [ 396.338583][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14923'. [ 396.555993][T17204] loop9: detected capacity change from 0 to 512 [ 396.569511][T17204] EXT4-fs: Ignoring removed oldalloc option [ 396.646287][T17204] EXT4-fs (loop9): too many log groups per flexible block group [ 396.655649][T17204] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 396.664992][T17204] EXT4-fs (loop9): mount failed [ 396.677206][T17156] Set syz1 is full, maxelem 65536 reached [ 396.821883][T32335] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 396.850113][T17237] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14926'. [ 396.883254][T17239] netlink: 52 bytes leftover after parsing attributes in process `syz.9.14927'. [ 396.919473][T17243] netlink: 'syz.1.14929': attribute type 13 has an invalid length. [ 396.948534][T17243] gretap0: refused to change device tx_queue_len [ 396.967078][T17243] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 396.983079][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14931'. [ 396.992764][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14932'. [ 397.001813][T17249] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14932'. [ 397.010861][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14932'. [ 397.019808][T17249] netlink: 2 bytes leftover after parsing attributes in process `syz.8.14932'. [ 397.043600][T17251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17251 comm=syz.2.14933 [ 397.056283][T17251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17251 comm=syz.2.14933 [ 397.128604][T17259] loop9: detected capacity change from 0 to 1024 [ 397.170162][T17259] EXT4-fs: Ignoring removed orlov option [ 397.180644][ T10] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 397.197664][T17273] netlink: 'syz.2.14941': attribute type 1 has an invalid length. [ 397.211047][T17259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.265537][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.398395][T10774] block device autoloading is deprecated and will be removed. [ 397.423246][T17311] loop1: detected capacity change from 0 to 164 [ 397.447424][T17311] bio_check_eod: 20379 callbacks suppressed [ 397.447440][T17311] syz.1.14950: attempt to access beyond end of device [ 397.447440][T17311] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 397.469924][T17311] syz.1.14950: attempt to access beyond end of device [ 397.469924][T17311] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 397.706336][T17344] loop1: detected capacity change from 0 to 1024 [ 397.716341][T17346] netlink: zone id is out of range [ 397.721490][T17346] netlink: zone id is out of range [ 397.727081][T17344] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 397.738140][T17344] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 397.755300][T17346] netlink: set zone limit has 8 unknown bytes [ 397.762249][T17344] JBD2: no valid journal superblock found [ 397.767979][T17344] EXT4-fs (loop1): Could not load journal inode [ 397.800915][T17344] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 397.911524][T17358] macsec1: entered promiscuous mode [ 397.916774][T17358] bridge0: entered promiscuous mode [ 397.952726][T17358] bridge0: port 3(macsec1) entered blocking state [ 397.959201][T17358] bridge0: port 3(macsec1) entered disabled state [ 397.970211][T17358] macsec1: entered allmulticast mode [ 397.975550][T17358] bridge0: entered allmulticast mode [ 397.981017][T17365] loop8: detected capacity change from 0 to 164 [ 397.987505][T17358] macsec1: left allmulticast mode [ 397.992693][T17358] bridge0: left allmulticast mode [ 397.998767][T17358] bridge0: left promiscuous mode [ 398.010994][T17366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.018400][T17366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.026172][T17366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.033661][T17366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.054803][T17378] loop8: detected capacity change from 0 to 1024 [ 398.061998][T17378] EXT4-fs: Ignoring removed orlov option [ 398.070175][T17378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.499887][T17397] Set syz1 is full, maxelem 65536 reached [ 398.576123][T17403] loop2: detected capacity change from 0 to 1024 [ 398.583604][T17403] EXT4-fs: Ignoring removed orlov option [ 398.613630][T17408] netlink: 'syz.9.14983': attribute type 10 has an invalid length. [ 398.622724][T17403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.635431][T17408] netlink: 'syz.9.14983': attribute type 10 has an invalid length. [ 398.712264][T17418] loop2: detected capacity change from 0 to 512 [ 398.748334][T17418] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.876961][T17426] netlink: 'syz.1.14988': attribute type 1 has an invalid length. [ 398.933888][T17429] loop2: detected capacity change from 0 to 1024 [ 398.945881][T17429] EXT4-fs: Ignoring removed bh option [ 398.983433][T17429] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.14987: inode #4294967295: comm syz.2.14987: iget: illegal inode # [ 398.999683][T17429] EXT4-fs (loop2): Remounting filesystem read-only [ 399.022282][T17429] EXT4-fs warning (device loop2): ext4_xattr_block_set:2195: inode #19: comm syz.2.14987: dec ref error=-30 [ 399.068472][ T6910] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.153204][T10774] block device autoloading is deprecated and will be removed. [ 399.190717][T17481] loop8: detected capacity change from 0 to 164 [ 399.199080][T17481] syz.8.15008: attempt to access beyond end of device [ 399.199080][T17481] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 399.217815][T17484] loop9: detected capacity change from 0 to 1024 [ 399.224759][T17484] EXT4-fs: Ignoring removed bh option [ 399.230278][T17481] syz.8.15008: attempt to access beyond end of device [ 399.230278][T17481] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 399.270286][T17484] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.15009: inode #4294967295: comm syz.9.15009: iget: illegal inode # [ 399.285783][T17484] EXT4-fs (loop9): Remounting filesystem read-only [ 399.292497][T17484] EXT4-fs warning (device loop9): ext4_xattr_block_set:2195: inode #19: comm syz.9.15009: dec ref error=-30 [ 399.418663][T17518] loop8: detected capacity change from 0 to 1024 [ 399.425890][T17518] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 399.436901][T17518] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 399.447361][T17518] JBD2: no valid journal superblock found [ 399.453125][T17518] EXT4-fs (loop8): Could not load journal inode [ 399.463630][T17518] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 399.478742][T17526] validate_nla: 1 callbacks suppressed [ 399.478835][T17526] netlink: 'syz.9.15020': attribute type 1 has an invalid length. [ 399.492787][T10774] block device autoloading is deprecated and will be removed. [ 399.533102][T17543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.543970][T17543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.828044][T10774] block device autoloading is deprecated and will be removed. [ 400.858293][T17678] vlan2: entered allmulticast mode [ 400.908017][T17690] ip6t_srh: unknown srh match flags 4000 [ 401.033818][T17704] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 401.058758][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 401.058773][ T29] audit: type=1326 audit(1763103143.355:17159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.088989][ T29] audit: type=1326 audit(1763103143.355:17160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.130287][ T29] audit: type=1326 audit(1763103143.415:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.139866][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 401.153974][ T29] audit: type=1326 audit(1763103143.415:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.160073][T11466] Bluetooth: hci0: command 0x1003 tx timeout [ 401.189813][ T29] audit: type=1326 audit(1763103143.415:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.213469][ T29] audit: type=1326 audit(1763103143.415:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.237414][ T29] audit: type=1326 audit(1763103143.415:17165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.261110][ T29] audit: type=1326 audit(1763103143.415:17166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.284951][ T29] audit: type=1326 audit(1763103143.415:17167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.308687][ T29] audit: type=1326 audit(1763103143.415:17168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.7.15066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 401.601724][T17747] netlink: 'syz.9.15089': attribute type 1 has an invalid length. [ 401.617552][T17749] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 401.711487][T17757] netlink: 'syz.8.15078': attribute type 13 has an invalid length. [ 401.752139][T17757] gretap0: refused to change device tx_queue_len [ 401.770700][T17757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.982137][T17759] loop7: detected capacity change from 0 to 32768 [ 402.024152][T17769] __nla_validate_parse: 13 callbacks suppressed [ 402.024168][T17769] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15092'. [ 402.042231][T17771] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 402.051811][T17759] loop7: p1 p3 < > [ 402.223349][T17805] pimreg: entered allmulticast mode [ 402.238423][T17813] loop2: detected capacity change from 0 to 1024 [ 402.247728][T17805] pimreg: left allmulticast mode [ 402.255117][T17813] EXT4-fs: Ignoring removed oldalloc option [ 402.295303][T17813] EXT4-fs mount: 8 callbacks suppressed [ 402.295373][T17813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.320628][T17829] bridge1: entered promiscuous mode [ 402.324691][T17813] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.339681][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15113'. [ 402.353881][T17833] xfrm1: entered promiscuous mode [ 402.358992][T17833] xfrm1: entered allmulticast mode [ 402.366710][T17813] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.15107: lblock 0 mapped to illegal pblock 0 (length 1) [ 402.380201][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15113'. [ 402.383281][T17813] EXT4-fs (loop2): Remounting filesystem read-only [ 402.428525][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15118'. [ 402.435459][T17841] loop7: detected capacity change from 0 to 4096 [ 402.444357][T17841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.454926][T17841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.470509][T14792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.507244][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.557468][T17865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.612566][T17884] loop8: detected capacity change from 0 to 512 [ 402.619725][T17884] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.623792][T17865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.644180][T17884] EXT4-fs (loop8): orphan cleanup on readonly fs [ 402.656637][T17884] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.15132: Allocating blocks 41-42 which overlap fs metadata [ 402.675597][T17884] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.15132: Failed to acquire dquot type 0 [ 402.687804][T17884] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 402.710335][T17884] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.15132: corrupted inode contents [ 402.723036][T17865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.734921][T17884] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #12: comm syz.8.15132: mark_inode_dirty error [ 402.746988][T17884] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.15132: corrupted inode contents [ 402.759246][T17884] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.15132: mark_inode_dirty error [ 402.771285][T17884] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.15132: corrupted inode contents [ 402.783526][T17884] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 402.792225][T17884] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.15132: corrupted inode contents [ 402.805284][T17884] EXT4-fs error (device loop8): ext4_truncate:4637: inode #12: comm syz.8.15132: mark_inode_dirty error [ 402.819050][T17865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.830400][T17884] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 402.851274][T17884] EXT4-fs (loop8): 1 truncate cleaned up [ 402.856983][T17884] EXT4-fs (loop8): pa ffff888106a25bd0: logic 1, phys. 41, len 23 [ 402.864917][T17884] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 22, pa_free 23 [ 402.880206][T17884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.906422][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.926774][ T6922] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.940969][ T6922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.960225][ T6922] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.974421][ T6922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.988066][T17931] loop8: detected capacity change from 0 to 512 [ 403.069009][T17956] ALSA: seq fatal error: cannot create timer (-16) [ 403.303455][T17962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.311942][T17962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.462013][T18022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.525186][T18030] loop2: detected capacity change from 0 to 512 [ 403.539877][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.541696][T11466] Bluetooth: hci0: command 0x1003 tx timeout [ 403.554332][T18030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15190: bg 0: block 248: padding at end of block bitmap is not set [ 403.569056][T18030] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.15190: Failed to acquire dquot type 1 [ 403.575547][T18039] loop8: detected capacity change from 0 to 1024 [ 403.582619][T10774] block device autoloading is deprecated and will be removed. [ 403.587262][T18039] EXT4-fs: inline encryption not supported [ 403.602602][T18030] EXT4-fs (loop2): 1 truncate cleaned up [ 403.608241][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15193'. [ 403.617782][T18030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.620958][T18039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.643667][T18030] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.653223][T18039] EXT4-fs (loop8): shut down requested (1) [ 403.670343][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.680079][T14792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.689249][ T6922] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:55: Failed to release dquot type 1 [ 403.711772][T18051] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15194'. [ 403.738971][T18058] loop9: detected capacity change from 0 to 7 [ 403.745294][T18058] buffer_io_error: 20379 callbacks suppressed [ 403.745307][T18058] Buffer I/O error on dev loop9, logical block 0, async page read [ 403.759312][T18058] Buffer I/O error on dev loop9, logical block 0, async page read [ 403.767249][T18058] loop9: unable to read partition table [ 403.773333][T18058] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 403.773333][T18058] ) failed (rc=-5) [ 403.874287][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15206'. [ 403.883456][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15206'. [ 403.926386][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15206'. [ 403.935569][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15206'. [ 404.056049][T32333] hid_parser_main: 47 callbacks suppressed [ 404.056074][T32333] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 404.069642][T32333] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 404.083754][T32333] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x3 [ 404.092267][T32333] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 404.411361][T18200] netlink: 'syz.8.15247': attribute type 16 has an invalid length. [ 404.419309][T18200] netlink: 'syz.8.15247': attribute type 17 has an invalid length. [ 404.439648][T18188] lo speed is unknown, defaulting to 1000 [ 404.520096][T18200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.596116][T18254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18254 comm=syz.1.15263 [ 404.663190][T18264] loop1: detected capacity change from 0 to 1024 [ 404.670428][T18263] loop9: detected capacity change from 0 to 512 [ 404.685605][T18264] EXT4-fs: Invalid want_extra_isize 1820 [ 404.694399][T18263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.723017][T18263] ext4 filesystem being mounted at /1035/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.736693][T18264] loop1: detected capacity change from 0 to 512 [ 404.743807][T18263] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.15267: corrupted inode contents [ 404.756622][T18264] EXT4-fs: Ignoring removed nobh option [ 404.760328][T18263] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.15267: mark_inode_dirty error [ 404.781501][T18264] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.15278: corrupted inode contents [ 404.795771][T18263] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.15267: corrupted inode contents [ 404.804254][T18264] EXT4-fs (loop1): Remounting filesystem read-only [ 404.816258][T18264] EXT4-fs (loop1): 1 truncate cleaned up [ 404.824355][T18264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.838462][T18264] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.850308][T18264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.899715][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.991922][T18311] loop7: detected capacity change from 0 to 512 [ 405.003830][T18311] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 405.019211][T18311] EXT4-fs (loop7): mount failed [ 405.183762][T18346] netlink: 'syz.7.15296': attribute type 21 has an invalid length. [ 405.333161][T18378] random: crng reseeded on system resumption [ 405.516463][T18402] netlink: 'syz.2.15320': attribute type 3 has an invalid length. [ 405.651263][T18437] loop9: detected capacity change from 0 to 8192 [ 405.720722][T18460] loop7: detected capacity change from 0 to 2048 [ 405.735374][T18460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.750627][T18460] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.15339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 405.780566][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.807583][T18434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.820908][T18434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.967096][T18501] netlink: 'syz.9.15354': attribute type 3 has an invalid length. [ 406.412502][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 406.412517][ T29] audit: type=1326 audit(1763103148.715:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03e6036567 code=0x7ffc0000 [ 406.483031][ T29] audit: type=1326 audit(1763103148.715:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03e5fdb779 code=0x7ffc0000 [ 406.483779][T18524] vhci_hcd: invalid port number 96 [ 406.506786][ T29] audit: type=1326 audit(1763103148.715:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03e6036567 code=0x7ffc0000 [ 406.512057][T18524] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 406.535573][ T29] audit: type=1326 audit(1763103148.715:17590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03e5fdb779 code=0x7ffc0000 [ 406.566174][ T29] audit: type=1326 audit(1763103148.715:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 406.589937][ T29] audit: type=1326 audit(1763103148.715:17592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 406.613620][ T29] audit: type=1326 audit(1763103148.715:17593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 406.637417][ T29] audit: type=1326 audit(1763103148.715:17594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 406.661258][ T29] audit: type=1326 audit(1763103148.715:17595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18519 comm="syz.1.15359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 406.685135][ T29] audit: type=1326 audit(1763103148.765:17596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.8.15364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33cf8e6567 code=0x7ffc0000 [ 406.788372][T18541] rdma_op ffff88816185dd80 conn xmit_rdma 0000000000000000 [ 407.188303][T18616] loop7: detected capacity change from 0 to 1024 [ 407.208425][T18616] EXT4-fs: Ignoring removed bh option [ 407.219908][T18616] EXT4-fs: inline encryption not supported [ 407.228258][T18616] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.243982][T10774] block device autoloading is deprecated and will be removed. [ 407.260071][T18616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 407.269040][T18616] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.15398: lblock 2 mapped to illegal pblock 2 (length 1) [ 407.284190][T18616] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.15398: lblock 0 mapped to illegal pblock 48 (length 1) [ 407.303308][T18616] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15398: Failed to acquire dquot type 0 [ 407.314969][T18616] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 407.325019][T18616] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.15398: mark_inode_dirty error [ 407.336798][T18616] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 407.365858][T18616] EXT4-fs (loop7): 1 orphan inode deleted [ 407.379878][ T6889] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 407.389510][T18631] SELinux: ebitmap: truncated map [ 407.399404][T18616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.402218][T18631] SELinux: failed to load policy [ 407.419717][ T6889] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 407.432638][T18638] __nla_validate_parse: 14 callbacks suppressed [ 407.432731][T18638] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15406'. [ 407.454240][T18638] IPVS: Error connecting to the multicast addr [ 407.462376][T18616] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.15398: lblock 0 mapped to illegal pblock 48 (length 1) [ 407.491617][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.515680][T18646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18646 comm=syz.1.15409 [ 407.528444][T18646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18646 comm=syz.1.15409 [ 407.565774][T18652] loop8: detected capacity change from 0 to 1024 [ 407.572750][T18652] EXT4-fs: inline encryption not supported [ 407.601297][T18652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.646429][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.908314][T18702] loop1: detected capacity change from 0 to 1024 [ 407.916126][T18702] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 407.919169][T18705] loop8: detected capacity change from 0 to 128 [ 407.927028][T18702] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 407.928264][T18702] JBD2: no valid journal superblock found [ 407.948994][T18702] EXT4-fs (loop1): Could not load journal inode [ 407.961156][T18702] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 408.160902][T18728] xt_hashlimit: max too large, truncated to 1048576 [ 408.326428][T18744] netlink: 'syz.2.15447': attribute type 3 has an invalid length. [ 408.331145][T18746] loop9: detected capacity change from 0 to 512 [ 408.373118][T18746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.387411][T18746] ext4 filesystem being mounted at /1073/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.437127][T18746] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.15448: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 408.457631][T18746] EXT4-fs (loop9): Remounting filesystem read-only [ 408.482287][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.550475][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15459'. [ 408.572762][T18782] loop2: detected capacity change from 0 to 1764 [ 408.669104][ T10] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 408.676537][ T10] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 408.678498][T18795] loop9: detected capacity change from 0 to 8192 [ 408.688484][ T10] hid-generic 0000:0003:0000.001E: hidraw0: HID v0.03 Device [syz0] on syz0 [ 408.704592][ T1583] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 408.712536][ T1583] FAT-fs (loop9): Filesystem has been set read-only [ 408.896677][T18849] geneve2: entered promiscuous mode [ 408.901958][T18849] geneve2: entered allmulticast mode [ 408.962547][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15494'. [ 408.991978][T18867] loop7: detected capacity change from 0 to 128 [ 409.034358][T18876] netlink: 'syz.8.15500': attribute type 5 has an invalid length. [ 409.646929][T18889] xt_hashlimit: max too large, truncated to 1048576 [ 409.709159][T18900] netlink: 'syz.8.15507': attribute type 3 has an invalid length. [ 409.848803][T10774] block device autoloading is deprecated and will be removed. [ 409.860223][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.881701][T18926] loop1: detected capacity change from 0 to 128 [ 409.897986][T18930] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 409.929625][T18938] loop9: detected capacity change from 0 to 7 [ 409.943034][T18938] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.948218][T18937] bridge1: entered promiscuous mode [ 409.959872][T18938] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.967776][T18938] loop9: unable to read partition table [ 409.973746][T18938] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 409.973746][T18938] ) failed (rc=-5) [ 410.005082][T18945] netlink: 'syz.1.15521': attribute type 1 has an invalid length. [ 410.131793][T18959] loop7: detected capacity change from 0 to 1024 [ 410.140234][T18959] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 410.151195][T18959] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 410.183920][T18959] JBD2: no valid journal superblock found [ 410.189674][T18959] EXT4-fs (loop7): Could not load journal inode [ 410.204583][T18959] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 410.237307][T18968] pimreg: entered allmulticast mode [ 410.247360][T18968] pimreg: left allmulticast mode [ 410.413077][T18984] loop9: detected capacity change from 0 to 7 [ 410.430397][T18984] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.439130][T18987] netlink: 'syz.7.15538': attribute type 1 has an invalid length. [ 410.447213][T18984] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.455080][T18984] loop9: unable to read partition table [ 410.475638][T18984] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 410.475638][T18984] ) failed (rc=-5) [ 410.489707][T18991] ip6t_srh: unknown srh match flags 4000 [ 410.520613][T18995] bridge1: entered promiscuous mode [ 410.544190][T19004] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 410.594259][T19010] xt_hashlimit: max too large, truncated to 1048576 [ 410.616472][T18982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.641903][T19016] loop9: detected capacity change from 0 to 1024 [ 410.648333][T18982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.658369][T19020] loop7: detected capacity change from 0 to 512 [ 410.663742][T19016] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 410.675554][T19016] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 410.686762][T10774] block device autoloading is deprecated and will be removed. [ 410.690691][T19016] JBD2: no valid journal superblock found [ 410.699986][T19016] EXT4-fs (loop9): Could not load journal inode [ 410.707897][T19020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.716578][T19016] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 410.720530][T19020] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.774658][T19020] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.15550: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 410.794757][T19020] EXT4-fs (loop7): Remounting filesystem read-only [ 410.809420][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.829992][T19031] ip6t_srh: unknown srh match flags 4000 [ 410.882151][T19043] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 410.916207][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15560'. [ 410.953603][T19052] vlan2: entered allmulticast mode [ 411.021103][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.028529][T19060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.040457][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.047943][T19060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.064799][T19060] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 411.071923][T19060] batman_adv: batadv0: Removing interface: veth1_vlan [ 411.083496][T19060] bridge0: port 3(batadv0) entered disabled state [ 411.099464][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15576'. [ 411.110274][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15576'. [ 411.119659][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15576'. [ 411.129127][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15576'. [ 411.197793][T10774] block device autoloading is deprecated and will be removed. [ 411.236116][T19079] loop1: detected capacity change from 0 to 512 [ 411.275174][T19079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.289593][T19079] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.324844][T19079] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.15567: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 411.345029][T19079] EXT4-fs (loop1): Remounting filesystem read-only [ 411.378861][T19094] loop7: detected capacity change from 0 to 512 [ 411.387401][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.516628][T10774] block device autoloading is deprecated and will be removed. [ 411.658407][T19109] loop9: detected capacity change from 0 to 32768 [ 411.692184][T19109] loop9: p1 p3 < > [ 411.826953][T19153] loop2: detected capacity change from 0 to 512 [ 411.841176][T19153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.853772][T19153] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.887734][T19153] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.15590: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 411.908106][T19153] EXT4-fs (loop2): Remounting filesystem read-only [ 411.923148][T14792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.937409][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 411.937469][ T29] audit: type=1326 audit(1763103154.235:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 411.970035][ T29] audit: type=1326 audit(1763103154.235:17902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 411.993770][ T29] audit: type=1326 audit(1763103154.235:17903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.017515][ T29] audit: type=1326 audit(1763103154.235:17904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.041305][ T29] audit: type=1326 audit(1763103154.235:17905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.042611][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.065118][ T29] audit: type=1326 audit(1763103154.235:17906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.074103][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.096966][ T29] audit: type=1326 audit(1763103154.235:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.128279][ T29] audit: type=1326 audit(1763103154.235:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.151960][ T29] audit: type=1326 audit(1763103154.265:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.175607][ T29] audit: type=1326 audit(1763103154.265:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.2.15592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c211ef6c9 code=0x7ffc0000 [ 412.485074][T19172] loop1: detected capacity change from 0 to 164 [ 412.493703][T19172] syz.1.15595: attempt to access beyond end of device [ 412.493703][T19172] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 412.508378][T19172] syz.1.15595: attempt to access beyond end of device [ 412.508378][T19172] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 413.274687][T19194] xt_hashlimit: max too large, truncated to 1048576 [ 413.438665][T19204] loop1: detected capacity change from 0 to 8192 [ 413.448900][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.456360][T19215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.464584][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.472085][T19215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.475705][T10774] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 413.487037][T10774] FAT-fs (loop1): Filesystem has been set read-only [ 413.522332][T19223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.531305][T19223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.614668][T19227] loop7: detected capacity change from 0 to 1024 [ 413.622299][T19227] EXT4-fs: Invalid want_extra_isize 1820 [ 413.633659][T19227] loop7: detected capacity change from 0 to 512 [ 413.640544][T19227] EXT4-fs: Ignoring removed nobh option [ 413.651298][T19227] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15617: corrupted inode contents [ 413.663939][T19227] EXT4-fs (loop7): Remounting filesystem read-only [ 413.671490][T19227] EXT4-fs (loop7): 1 truncate cleaned up [ 413.677521][T19227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.690228][T19227] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.702064][T19227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.065522][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15624'. [ 414.222313][T19264] loop1: detected capacity change from 0 to 512 [ 414.231093][T19264] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 414.246132][T19264] EXT4-fs (loop1): mount failed [ 414.306062][T19276] loop2: detected capacity change from 0 to 1024 [ 414.313438][T19276] EXT4-fs: Invalid want_extra_isize 1820 [ 414.324251][T19276] loop2: detected capacity change from 0 to 512 [ 414.330759][T19276] EXT4-fs: Ignoring removed nobh option [ 414.342632][T19276] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.15629: corrupted inode contents [ 414.354998][T19276] EXT4-fs (loop2): Remounting filesystem read-only [ 414.362063][T19276] EXT4-fs (loop2): 1 truncate cleaned up [ 414.368046][T19276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.380983][T19276] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.391891][T19276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.905833][T19299] netlink: 'syz.7.15636': attribute type 5 has an invalid length. [ 414.947495][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15640'. [ 414.994357][T19317] netlink: 'syz.8.15644': attribute type 16 has an invalid length. [ 414.998449][T19318] loop7: detected capacity change from 0 to 1024 [ 415.002300][T19317] netlink: 'syz.8.15644': attribute type 17 has an invalid length. [ 415.017359][T19318] EXT4-fs: inline encryption not supported [ 415.017364][T19317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.031216][T19318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.067685][T19318] EXT4-fs (loop7): shut down requested (1) [ 415.086019][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.256021][T19343] loop8: detected capacity change from 0 to 8192 [ 415.283835][T13820] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 415.291717][T13820] FAT-fs (loop8): Filesystem has been set read-only [ 415.419409][T19373] Falling back ldisc for ttyS3. [ 415.506929][T19387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15674'. [ 415.516432][T19387] unsupported nlmsg_type 40 [ 415.741166][T19438] random: crng reseeded on system resumption [ 415.741500][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.756239][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.790489][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.799552][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.866641][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.874769][T19456] loop1: detected capacity change from 0 to 1024 [ 415.875753][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15697'. [ 415.882907][T19456] EXT4-fs: inline encryption not supported [ 415.931177][T19456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.974402][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15708'. [ 415.978134][T19469] loop8: detected capacity change from 0 to 512 [ 415.990871][T19456] EXT4-fs (loop1): shut down requested (1) [ 416.018093][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.029116][T19469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.044894][T19469] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.095666][T19469] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.15709: corrupted inode contents [ 416.118202][T19469] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.15709: mark_inode_dirty error [ 416.137169][T19469] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.15709: corrupted inode contents [ 416.182201][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.331935][T19509] loop1: detected capacity change from 0 to 2048 [ 416.377724][T19509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.414862][T19509] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.15722: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 416.460569][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.505877][ T6887] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.565488][T19540] netlink: 'syz.1.15730': attribute type 3 has an invalid length. [ 416.710509][T19555] Falling back ldisc for ttyS3. [ 417.135207][T19576] loop8: detected capacity change from 0 to 2048 [ 417.161476][T19576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.179261][T19576] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.15747: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 417.182312][T19583] netlink: 'syz.7.15751': attribute type 3 has an invalid length. [ 417.214430][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.238846][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 417.238862][ T29] audit: type=1326 audit(1763103159.535:18406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.268837][ T29] audit: type=1326 audit(1763103159.535:18407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.300411][T19600] bridge0: port 3(syz_tun) entered blocking state [ 417.306891][T19600] bridge0: port 3(syz_tun) entered disabled state [ 417.307190][ T29] audit: type=1326 audit(1763103159.595:18408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.315940][T19600] syz_tun: entered allmulticast mode [ 417.337192][ T29] audit: type=1326 audit(1763103159.595:18409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.337220][ T29] audit: type=1326 audit(1763103159.595:18410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.343188][T19600] syz_tun: entered promiscuous mode [ 417.366169][ T29] audit: type=1326 audit(1763103159.605:18411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.366217][ T29] audit: type=1326 audit(1763103159.605:18412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.366287][ T29] audit: type=1326 audit(1763103159.605:18413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.477161][T19600] bridge0: port 3(syz_tun) entered blocking state [ 417.478340][ T29] audit: type=1326 audit(1763103159.695:18414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.483636][T19600] bridge0: port 3(syz_tun) entered forwarding state [ 417.514021][ T29] audit: type=1326 audit(1763103159.695:18415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19594 comm="syz.8.15754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 417.559267][T19604] loop7: detected capacity change from 0 to 512 [ 417.566401][T19604] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.577922][T19604] EXT4-fs (loop7): 1 truncate cleaned up [ 417.590234][T19604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.616651][T19613] SELinux: policydb version 0 does not match my version range 15-35 [ 417.625380][T19613] SELinux: failed to load policy [ 417.682533][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.720349][T19620] loop2: detected capacity change from 0 to 2048 [ 417.732712][T19627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.743043][T19627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.760825][T19620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.776494][T19620] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.15765: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 417.802922][T14792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.851129][T19627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.861558][T19627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.893472][T19653] netlink: 'syz.2.15773': attribute type 16 has an invalid length. [ 417.901445][T19653] netlink: 'syz.2.15773': attribute type 17 has an invalid length. [ 417.905626][T19645] lo speed is unknown, defaulting to 1000 [ 417.942039][T19653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.975188][T19627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.985669][T19627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.058394][T19627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.068795][T19627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.116141][ T6887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.124367][ T6887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.135862][ T6932] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.144111][ T6932] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.154735][ T6925] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.162958][ T6925] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.173846][ T6932] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.182246][ T6932] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.191496][ T6925] bridge_slave_1: left allmulticast mode [ 418.197177][ T6925] bridge_slave_1: left promiscuous mode [ 418.202903][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.211399][ T6925] bridge_slave_0: left allmulticast mode [ 418.217062][ T6925] bridge_slave_0: left promiscuous mode [ 418.222754][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.302637][ T6925] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.312057][ T6925] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.321529][ T6925] .` (unregistering): Released all slaves [ 418.329369][ T6925] bond0 (unregistering): (slave bond1): Releasing backup interface [ 418.337405][ T6925] bond1 (unregistering): left promiscuous mode [ 418.344224][ T6925] bond0 (unregistering): Released all slaves [ 418.352660][ T6925] bond1 (unregistering): Released all slaves [ 418.413002][ T6925] IPVS: stopping master sync thread 29720 ... [ 418.445786][ T6925] hsr_slave_0: left promiscuous mode [ 418.451461][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.458826][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.487027][ T6925] team0 (unregistering): Port device team_slave_1 removed [ 418.496712][ T6925] team0 (unregistering): Port device team_slave_0 removed [ 418.579854][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.586427][T19705] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 418.592927][T19705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.600372][T19705] vhci_hcd vhci_hcd.0: Device attached [ 418.624808][T19706] vhci_hcd: connection closed [ 418.627469][T14830] vhci_hcd: stop threads [ 418.636413][T14830] vhci_hcd: release socket [ 418.640922][T14830] vhci_hcd: disconnect device [ 418.730114][ T6925] IPVS: stop unused estimator thread 0... [ 418.736966][T19722] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.818937][T19722] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.901682][T19722] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.975248][T19722] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.065843][ T6932] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.077253][ T6932] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.088515][ T6932] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.099720][ T6932] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.282557][T19802] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.325830][T19802] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.370074][T10774] block device autoloading is deprecated and will be removed. [ 419.416799][T19802] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.466766][T19802] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.515163][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.525588][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.536576][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.547765][T14830] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.886094][T19839] vhci_hcd: invalid port number 0 [ 419.934420][T19851] rdma_op ffff8881148b7580 conn xmit_rdma 0000000000000000 [ 419.958742][T19858] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 419.968809][T19857] loop1: detected capacity change from 0 to 2048 [ 419.981073][T19857] EXT4-fs (loop1): failed to initialize system zone (-117) [ 419.988430][T19857] EXT4-fs (loop1): mount failed [ 420.072802][T19879] loop1: detected capacity change from 0 to 1024 [ 420.094923][T19884] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 420.114465][T19879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.150476][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.454575][T19929] loop1: detected capacity change from 0 to 1024 [ 420.461303][T19929] EXT4-fs: Ignoring removed bh option [ 420.466750][T19929] EXT4-fs: inline encryption not supported [ 420.473045][T19929] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.483945][T19929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 420.492862][T19929] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.15857: lblock 2 mapped to illegal pblock 2 (length 1) [ 420.507689][T19929] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.15857: lblock 0 mapped to illegal pblock 48 (length 1) [ 420.522674][T19929] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.15857: Failed to acquire dquot type 0 [ 420.534442][T19929] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 420.544616][T19929] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.15857: mark_inode_dirty error [ 420.556569][T19929] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 420.566959][T19929] EXT4-fs (loop1): 1 orphan inode deleted [ 420.573270][T19929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.585917][ T6932] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.600391][ T6932] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:65: Failed to release dquot type 0 [ 420.621975][T19929] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.15857: lblock 0 mapped to illegal pblock 48 (length 1) [ 420.679053][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.827677][T19939] __nla_validate_parse: 5 callbacks suppressed [ 420.827692][T19939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15860'. [ 421.206561][T19995] IPVS: Unknown mcast interface: vcan0 [ 421.331649][T20013] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.372093][T20022] netlink: 'syz.9.15900': attribute type 16 has an invalid length. [ 421.380154][T20022] netlink: 'syz.9.15900': attribute type 17 has an invalid length. [ 421.419139][T20022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.427639][T20022] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.438527][T20022] 0ªX¹¦À: left allmulticast mode [ 421.443634][T20022] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 421.464990][T20029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.484725][T20013] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.503992][T20012] lo speed is unknown, defaulting to 1000 [ 421.515153][T20033] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 421.554589][T20013] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.584230][T20035] loop2: detected capacity change from 0 to 2048 [ 421.653562][T20035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 421.713201][T20013] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.811299][T14830] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.842238][T14830] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.850747][T14830] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.859042][T14830] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.996142][T20035] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 422.017893][T20035] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 422.031247][T20035] EXT4-fs (loop2): This should not happen!! Data will be lost [ 422.031247][T20035] [ 422.041500][T20035] EXT4-fs (loop2): Total free blocks count 0 [ 422.047508][T20035] EXT4-fs (loop2): Free/Dirty block details [ 422.053435][T20035] EXT4-fs (loop2): free_blocks=2415919104 [ 422.059163][T20035] EXT4-fs (loop2): dirty_blocks=8208 [ 422.065015][T20035] EXT4-fs (loop2): Block reservation details [ 422.071118][T20035] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 422.100384][T20053] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 422.290177][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15907'. [ 422.330325][T20088] loop7: detected capacity change from 0 to 128 [ 422.342861][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15905'. [ 422.358303][T20088] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.374754][T20088] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 422.420773][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 422.420788][ T29] audit: type=1400 audit(1763103164.725:18562): avc: denied { setattr } for pid=20087 comm="syz.7.15908" path="/305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 422.503089][T14538] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.569931][ T29] audit: type=1326 audit(1763103164.865:18563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.9.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6c6ef6c9 code=0x7ffc0000 [ 422.593767][ T29] audit: type=1326 audit(1763103164.865:18564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.9.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6c6ef6c9 code=0x7ffc0000 [ 422.617478][ T29] audit: type=1326 audit(1763103164.865:18565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.9.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7efe6c6ef6c9 code=0x7ffc0000 [ 422.641105][ T29] audit: type=1326 audit(1763103164.865:18566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.9.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6c6ef6c9 code=0x7ffc0000 [ 422.664912][ T29] audit: type=1326 audit(1763103164.865:18567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.9.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6c6ef6c9 code=0x7ffc0000 [ 422.719512][ T29] audit: type=1400 audit(1763103165.015:18568): avc: denied { ioctl } for pid=20110 comm="syz.1.15916" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.771900][ T29] audit: type=1326 audit(1763103165.075:18569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20118 comm="syz.1.15918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 422.795825][ T29] audit: type=1326 audit(1763103165.075:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20118 comm="syz.1.15918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 422.819705][ T29] audit: type=1326 audit(1763103165.075:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20118 comm="syz.1.15918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e603f6c9 code=0x7ffc0000 [ 422.904272][T20129] netlink: 'syz.1.15922': attribute type 3 has an invalid length. [ 423.061425][T20153] SELinux: failed to load policy [ 423.094451][T20165] loop2: detected capacity change from 0 to 256 [ 423.101718][T20165] FAT-fs (loop2): bogus number of FAT sectors [ 423.107823][T20165] FAT-fs (loop2): Can't find a valid FAT filesystem [ 423.412648][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15945'. [ 423.421797][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15945'. [ 423.608492][T20234] SELinux: failed to load policy [ 423.641373][T20245] pimreg: entered allmulticast mode [ 423.647303][T20245] pimreg: left allmulticast mode [ 423.793298][T20274] loop7: detected capacity change from 0 to 164 [ 423.806117][T20274] syz.7.15977: attempt to access beyond end of device [ 423.806117][T20274] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 423.820897][T20274] syz.7.15977: attempt to access beyond end of device [ 423.820897][T20274] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 423.996454][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15984'. [ 424.077068][T20311] netlink: 'syz.8.15992': attribute type 21 has an invalid length. [ 424.092009][T20311] netlink: 156 bytes leftover after parsing attributes in process `syz.8.15992'. [ 424.101326][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15992'. [ 424.123152][T20321] loop9: detected capacity change from 0 to 512 [ 424.135394][T20321] EXT4-fs: Ignoring removed oldalloc option [ 424.146318][T20321] EXT4-fs (loop9): 1 truncate cleaned up [ 424.152633][T20321] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.167245][T20321] EXT4-fs (loop9): shut down requested (0) [ 424.184495][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.288855][T20356] loop8: detected capacity change from 0 to 256 [ 424.472558][T20394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16020'. [ 424.486897][T20396] netlink: 'syz.7.16016': attribute type 16 has an invalid length. [ 424.494946][T20396] netlink: 'syz.7.16016': attribute type 17 has an invalid length. [ 424.505609][T20384] lo speed is unknown, defaulting to 1000 [ 424.550624][T20396] $Hÿ: left promiscuous mode [ 424.555443][T20396] bond_slave_0: left promiscuous mode [ 424.560928][T20396] bond_slave_1: left promiscuous mode [ 424.567308][T20396] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 424.579709][T20396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.683856][T20435] loop1: detected capacity change from 0 to 512 [ 424.695287][T20435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 424.710482][T20433] loop8: detected capacity change from 0 to 4096 [ 424.717562][T20433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.726211][T20435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 424.731989][T20433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.773412][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 424.911492][T20465] loop1: detected capacity change from 0 to 1024 [ 424.919971][T20465] EXT4-fs: Ignoring removed bh option [ 424.938526][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.949553][T20465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.966640][T20474] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 424.970647][T20476] netlink: 'syz.2.16044': attribute type 29 has an invalid length. [ 424.996807][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.008703][T20476] netlink: 'syz.2.16044': attribute type 29 has an invalid length. [ 425.018014][T20476] netlink: 508 bytes leftover after parsing attributes in process `syz.2.16044'. [ 425.031717][T20482] loop1: detected capacity change from 0 to 512 [ 425.080819][T20492] netlink: 'syz.1.16049': attribute type 3 has an invalid length. [ 425.106292][T20496] tls_set_device_offload_rx: netdev not found [ 425.544842][T20571] netlink: 'syz.1.16076': attribute type 16 has an invalid length. [ 425.552834][T20571] netlink: 'syz.1.16076': attribute type 17 has an invalid length. [ 425.714021][T20571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.731428][T20560] lo speed is unknown, defaulting to 1000 [ 425.841368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.992662][T20625] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.036578][T20625] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.090606][T20625] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.143331][ T6932] Bluetooth: hci0: Frame reassembly failed (-84) [ 426.157352][T20625] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.228628][ T6887] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.246341][ T6887] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.265961][ T6887] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.274322][ T6887] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.385438][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16112'. [ 426.503886][T20700] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16121'. [ 426.596870][T32333] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 426.604628][T32333] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 426.617574][T32333] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 426.633049][T32333] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 426.711622][T20736] loop8: detected capacity change from 0 to 512 [ 426.740484][T20736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.784087][T20736] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.16135: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 426.837942][T20736] EXT4-fs (loop8): Remounting filesystem read-only [ 426.867889][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.889788][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16141'. [ 426.931703][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16141'. [ 426.975193][T20765] syzkaller0: entered promiscuous mode [ 426.980715][T20765] syzkaller0: entered allmulticast mode [ 427.015173][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16146'. [ 427.042992][T20779] loop7: detected capacity change from 0 to 1024 [ 427.060632][T20779] EXT4-fs: Ignoring removed orlov option [ 427.447202][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 427.447215][ T29] audit: type=1400 audit(433.520:18990): avc: denied { create } for pid=20811 comm="syz.2.16161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 427.474577][ T29] audit: type=1400 audit(433.552:18991): avc: denied { write } for pid=20811 comm="syz.2.16161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 427.558185][T20820] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 427.622277][ T29] audit: type=1326 audit(433.709:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.645519][ T29] audit: type=1326 audit(433.709:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.668719][ T29] audit: type=1326 audit(433.709:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.691861][ T29] audit: type=1326 audit(433.709:18995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.714924][ T29] audit: type=1326 audit(433.709:18996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.742113][ T29] audit: type=1326 audit(433.709:18997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.767250][ T29] audit: type=1326 audit(433.709:18998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 427.790385][ T29] audit: type=1326 audit(433.709:18999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.8.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cf8ef6c9 code=0x7ffc0000 [ 428.050348][ T3792] Bluetooth: hci0: command 0x1003 tx timeout [ 428.056377][T11466] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 428.108043][T20878] netlink: 'syz.2.16200': attribute type 16 has an invalid length. [ 428.115976][T20878] netlink: 'syz.2.16200': attribute type 17 has an invalid length. [ 428.130918][T20882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.147824][T20882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.158819][T20878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.245415][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16202'. [ 428.255154][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16202'. [ 428.322900][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16206'. [ 428.484906][ T6932] Bluetooth: hci0: Frame reassembly failed (-84) [ 428.726591][T20955] netlink: 32 bytes leftover after parsing attributes in process `syz.8.16221'. [ 428.818158][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.826768][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.847893][T20977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16231'. [ 430.411309][T11466] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 430.412654][ T3792] Bluetooth: hci0: command 0x1003 tx timeout [ 430.569595][ T6889] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.377515][T21145] loop2: detected capacity change from 0 to 512 [ 431.384834][T21145] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 431.442965][T21157] __nla_validate_parse: 5 callbacks suppressed [ 431.442982][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16300'. [ 431.456446][T21155] loop7: detected capacity change from 0 to 2048 [ 431.471948][T21155] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.478534][T21155] EXT4-fs: Ignoring removed i_version option [ 431.489804][T21165] loop9: detected capacity change from 0 to 164 [ 431.493780][T21167] netlink: 'syz.8.16306': attribute type 1 has an invalid length. [ 431.511756][T21167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.532123][T21167] bond3: (slave geneve2): making interface the new active one [ 431.541070][T21167] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 431.704562][T21222] loop8: detected capacity change from 0 to 8192 [ 431.835731][T21256] lo speed is unknown, defaulting to 1000 [ 431.947640][T21286] netlink: 92 bytes leftover after parsing attributes in process `syz.7.16328'. [ 431.956903][T21286] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16328'. [ 431.980651][T21285] loop8: detected capacity change from 0 to 512 [ 432.001497][T21285] EXT4-fs (loop8): too many log groups per flexible block group [ 432.015539][T21285] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 432.023781][T21285] EXT4-fs (loop8): mount failed [ 432.087955][T21307] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 432.088333][T21305] IPVS: stopping master sync thread 21307 ... [ 432.140711][T21311] loop7: detected capacity change from 0 to 764 [ 432.226118][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 432.226132][ T29] audit: type=1326 audit(438.541:19315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.266350][ T29] audit: type=1326 audit(438.541:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.289580][ T29] audit: type=1326 audit(438.541:19317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.312768][ T29] audit: type=1326 audit(438.541:19318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.336196][ T29] audit: type=1326 audit(438.541:19319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.359309][ T29] audit: type=1326 audit(438.541:19320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.382512][ T29] audit: type=1326 audit(438.541:19321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.405569][ T29] audit: type=1326 audit(438.541:19322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.428565][ T29] audit: type=1326 audit(438.541:19323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.451577][ T29] audit: type=1326 audit(438.541:19324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21330 comm="syz.7.16343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 432.537579][T21353] netlink: 'syz.8.16356': attribute type 3 has an invalid length. [ 432.546205][T11466] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.628482][T21366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 432.635008][T21366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 432.642563][T21366] vhci_hcd vhci_hcd.0: Device attached [ 432.655577][T21374] vhci_hcd: connection closed [ 432.658098][ T6889] vhci_hcd: stop threads [ 432.667130][ T6889] vhci_hcd: release socket [ 432.671577][ T6889] vhci_hcd: disconnect device [ 433.162091][T21386] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 433.165233][T21392] loop2: detected capacity change from 0 to 512 [ 433.168657][T21386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.182367][T21386] vhci_hcd vhci_hcd.0: Device attached [ 433.204685][T21392] EXT4-fs mount: 4 callbacks suppressed [ 433.204733][T21392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.218583][T21393] vhci_hcd: connection closed [ 433.226144][T14830] vhci_hcd: stop threads [ 433.235166][T14830] vhci_hcd: release socket [ 433.239654][T14830] vhci_hcd: disconnect device [ 433.244906][T21392] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.16367: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 433.251191][T21401] loop7: detected capacity change from 0 to 1024 [ 433.271696][T21392] EXT4-fs (loop2): Remounting filesystem read-only [ 433.286137][T21401] EXT4-fs: Ignoring removed orlov option [ 433.293552][T14792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.312697][T21401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.346285][T14538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.388343][ T6889] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.647126][T21461] lo speed is unknown, defaulting to 1000 [ 434.013439][T21511] loop7: detected capacity change from 0 to 32768 [ 434.067305][T21511] loop7: p1 p3 < > [ 434.212826][T21537] veth0: entered promiscuous mode [ 434.220986][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16411'. [ 434.238449][T21541] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 434.244999][T21541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 434.252535][T21541] vhci_hcd vhci_hcd.0: Device attached [ 434.259400][T21544] vhci_hcd: connection closed [ 434.259559][T14830] vhci_hcd: stop threads [ 434.268560][T14830] vhci_hcd: release socket [ 434.272986][T14830] vhci_hcd: disconnect device [ 434.344948][T21558] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.16418'. [ 434.768036][T21567] macvtap0: entered promiscuous mode [ 434.774173][T21567] macvtap0: left promiscuous mode [ 434.790253][T21571] loop9: detected capacity change from 0 to 2048 [ 434.800696][T21571] EXT4-fs (loop9): failed to initialize system zone (-117) [ 434.808582][T21571] EXT4-fs (loop9): mount failed [ 434.891696][T21591] loop8: detected capacity change from 0 to 1024 [ 434.898514][T21591] EXT4-fs: Ignoring removed orlov option [ 434.904771][T21591] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 434.924771][T21591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.946344][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.963494][T21600] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 435.361738][ T3792] Bluetooth: hci0: command 0x1003 tx timeout [ 435.361778][T11466] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 435.406691][T21613] loop8: detected capacity change from 0 to 1024 [ 435.415906][T21614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 435.422474][T21614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 435.430114][T21614] vhci_hcd vhci_hcd.0: Device attached [ 435.431778][T21613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.447745][T21618] vhci_hcd: connection closed [ 435.448539][ T6873] vhci_hcd: stop threads [ 435.457601][ T6873] vhci_hcd: release socket [ 435.457610][ T6873] vhci_hcd: disconnect device [ 435.474925][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.953663][T21635] loop1: detected capacity change from 0 to 128 [ 435.968446][T21635] FAT-fs (loop1): Directory bread(block 162) failed [ 435.975876][T21635] FAT-fs (loop1): Directory bread(block 163) failed [ 435.976122][T21634] loop9: detected capacity change from 0 to 1024 [ 435.989129][T21635] FAT-fs (loop1): Directory bread(block 164) failed [ 435.996249][T21635] FAT-fs (loop1): Directory bread(block 165) failed [ 436.004284][T21635] FAT-fs (loop1): Directory bread(block 166) failed [ 436.007016][T21634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.038271][T21635] FAT-fs (loop1): Directory bread(block 167) failed [ 436.044959][T21635] FAT-fs (loop1): Directory bread(block 168) failed [ 436.045403][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.051646][T21635] FAT-fs (loop1): Directory bread(block 169) failed [ 436.086483][T21639] loop8: detected capacity change from 0 to 2048 [ 436.098613][T21652] loop9: detected capacity change from 0 to 512 [ 436.106033][T21652] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 436.106087][T21639] EXT4-fs (loop8): failed to initialize system zone (-117) [ 436.114713][T21652] EXT4-fs (loop9): invalid journal inode [ 436.122759][T21639] EXT4-fs (loop8): mount failed [ 436.127906][T21652] EXT4-fs (loop9): can't get journal size [ 436.133031][T21635] FAT-fs (loop1): Directory bread(block 162) failed [ 436.144626][T21635] FAT-fs (loop1): Directory bread(block 163) failed [ 436.148613][T21652] EXT4-fs (loop9): 1 truncate cleaned up [ 436.157523][T21652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.161619][T21635] syz.1.16450: attempt to access beyond end of device [ 436.161619][T21635] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 436.183297][T21635] syz.1.16450: attempt to access beyond end of device [ 436.183297][T21635] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 436.215673][T21662] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 436.225962][T21667] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 436.257168][ T1583] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.276761][T21675] loop1: detected capacity change from 0 to 512 [ 436.775339][T21700] loop2: detected capacity change from 0 to 2048 [ 436.792783][T21712] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 436.801149][T21700] EXT4-fs (loop2): failed to initialize system zone (-117) [ 436.808677][T21710] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 436.819698][T21700] EXT4-fs (loop2): mount failed [ 436.891674][T21724] rdma_op ffff8881112bdd80 conn xmit_rdma 0000000000000000 [ 436.993714][T21744] vhci_hcd: invalid port number 0 [ 437.074199][T21754] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 437.097189][T21759] loop7: detected capacity change from 0 to 2048 [ 437.122605][T21766] rdma_op ffff8881023e0d80 conn xmit_rdma 0000000000000000 [ 437.131859][T21759] EXT4-fs (loop7): failed to initialize system zone (-117) [ 437.139378][T21759] EXT4-fs (loop7): mount failed [ 437.168571][T21774] vhci_hcd: invalid port number 0 [ 437.238574][T21787] loop1: detected capacity change from 0 to 164 [ 437.259880][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 437.259895][ T29] audit: type=1400 audit(443.835:19434): avc: denied { write } for pid=21785 comm="syz.1.16493" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 437.289916][T21797] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 437.359769][T21816] loop1: detected capacity change from 0 to 2048 [ 437.374211][ T29] audit: type=1400 audit(443.951:19435): avc: denied { map } for pid=21811 comm="syz.2.16499" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 437.374294][T21812] vhci_hcd: invalid port number 96 [ 437.374304][T21812] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 437.418885][T21816] EXT4-fs (loop1): failed to initialize system zone (-117) [ 437.431656][T21816] EXT4-fs (loop1): mount failed [ 437.446179][T21822] rdma_op ffff8881023e3180 conn xmit_rdma 0000000000000000 [ 437.550839][ T29] audit: type=1326 audit(444.130:19436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.574009][ T29] audit: type=1326 audit(444.130:19437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.619339][ T29] audit: type=1326 audit(444.193:19438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.642647][ T29] audit: type=1326 audit(444.193:19439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.655451][T21856] loop8: detected capacity change from 0 to 2048 [ 437.665817][ T29] audit: type=1326 audit(444.193:19440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.665880][ T29] audit: type=1326 audit(444.203:19441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.665905][ T29] audit: type=1326 audit(444.203:19442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.665928][ T29] audit: type=1326 audit(444.203:19443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.7.16513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0524b0f6c9 code=0x7ffc0000 [ 437.784774][T21856] EXT4-fs (loop8): failed to initialize system zone (-117) [ 437.792075][T21856] EXT4-fs (loop8): mount failed [ 437.881912][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16524'. [ 438.030485][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16537'. [ 438.101351][T21905] lo speed is unknown, defaulting to 1000 [ 438.212269][T32335] kernel write not supported for file [eventfd] (pid: 32335 comm: kworker/1:12) [ 438.913162][T22011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.929295][T22013] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 439.890895][T22040] loop8: detected capacity change from 0 to 512 [ 439.893476][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16577'. [ 439.903966][T22040] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 439.929685][T22040] EXT4-fs (loop8): 1 truncate cleaned up [ 439.953842][T22040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.112497][T13820] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.785745][T22062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.817254][T22062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.908994][T22083] bridge0: port 3(syz_tun) entered blocking state [ 440.915520][T22083] bridge0: port 3(syz_tun) entered disabled state [ 440.922261][T22083] syz_tun: entered allmulticast mode [ 440.928583][T22083] syz_tun: entered promiscuous mode [ 440.934316][T22083] bridge0: port 3(syz_tun) entered blocking state [ 440.940792][T22083] bridge0: port 3(syz_tun) entered forwarding state [ 440.957449][T22087] SELinux: policydb version 0 does not match my version range 15-35 [ 440.966135][T22087] SELinux: failed to load policy [ 440.987119][T22091] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16610'. [ 440.997245][T22093] loop1: detected capacity change from 0 to 1024 [ 441.008233][T22093] EXT4-fs: Ignoring removed orlov option [ 441.022138][T22093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.136391][T22100] ================================================================== [ 441.144787][T22100] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 441.153058][T22100] [ 441.155386][T22100] write to 0xffff88811abf28b8 of 4 bytes by task 22093 on cpu 0: [ 441.163101][T22100] writeback_single_inode+0x150/0x3f0 [ 441.168667][T22100] sync_inode_metadata+0x5b/0x90 [ 441.173763][T22100] generic_buffers_fsync_noflush+0xd9/0x120 [ 441.179681][T22100] ext4_sync_file+0x1ab/0x690 [ 441.184886][T22100] vfs_fsync_range+0x10d/0x130 [ 441.189674][T22100] ext4_buffered_write_iter+0x34f/0x3c0 [ 441.195332][T22100] ext4_file_write_iter+0x387/0xf60 [ 441.200542][T22100] iter_file_splice_write+0x666/0xa60 [ 441.205940][T22100] direct_splice_actor+0x156/0x2a0 [ 441.211070][T22100] splice_direct_to_actor+0x312/0x680 [ 441.216990][T22100] do_splice_direct+0xda/0x150 [ 441.222254][T22100] do_sendfile+0x380/0x650 [ 441.226891][T22100] __x64_sys_sendfile64+0x105/0x150 [ 441.232371][T22100] x64_sys_call+0x2bb4/0x3000 [ 441.237677][T22100] do_syscall_64+0xd2/0x200 [ 441.242375][T22100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.248467][T22100] [ 441.250975][T22100] read to 0xffff88811abf28b8 of 4 bytes by task 22100 on cpu 1: [ 441.258608][T22100] vfs_fsync_range+0x9b/0x130 [ 441.263568][T22100] ext4_buffered_write_iter+0x34f/0x3c0 [ 441.269216][T22100] ext4_file_write_iter+0x387/0xf60 [ 441.274900][T22100] iter_file_splice_write+0x666/0xa60 [ 441.280377][T22100] direct_splice_actor+0x156/0x2a0 [ 441.285598][T22100] splice_direct_to_actor+0x312/0x680 [ 441.291591][T22100] do_splice_direct+0xda/0x150 [ 441.296366][T22100] do_sendfile+0x380/0x650 [ 441.300811][T22100] __x64_sys_sendfile64+0x105/0x150 [ 441.306037][T22100] x64_sys_call+0x2bb4/0x3000 [ 441.310725][T22100] do_syscall_64+0xd2/0x200 [ 441.315327][T22100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.321241][T22100] [ 441.323573][T22100] value changed: 0x00000070 -> 0x00000002 [ 441.329737][T22100] [ 441.332062][T22100] Reported by Kernel Concurrency Sanitizer on: [ 441.338309][T22100] CPU: 1 UID: 0 PID: 22100 Comm: syz.1.16601 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.349960][T22100] Tainted: [W]=WARN [ 441.353767][T22100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.363846][T22100] ================================================================== [ 441.861216][T10774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.