last executing test programs: 5.120657721s ago: executing program 0 (id=313): unshare(0x4020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x6}, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#:#*-+((-}%$#\x00', 0x0) 4.695185009s ago: executing program 0 (id=328): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, 0x0) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x2, @empty}}, 0x1e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$usbip_server(r0, &(0x7f0000000080)=@ret_unlink={{0x4, 0xb35, 0x0, 0x0, 0x5}, {0x8}}, 0x30) 3.347552195s ago: executing program 0 (id=324): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.330781795s ago: executing program 0 (id=325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) socket$kcm(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) 3.036450771s ago: executing program 0 (id=334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.59804982s ago: executing program 2 (id=336): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000680)='./file0\x00', &(0x7f0000000f40)=""/136) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x9, 0x9}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000340), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}}, 0x0) 2.231996537s ago: executing program 2 (id=344): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8010, r0, 0x2b062000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x2) 1.827033114s ago: executing program 1 (id=347): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.712681387s ago: executing program 1 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002600010a00000000e6ffffff09000000"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$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") 1.455398642s ago: executing program 1 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) iopl(0x3) dup(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.403713853s ago: executing program 1 (id=352): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000180)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRES64], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x4000091}, 0x4c000) 1.359511574s ago: executing program 3 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) 1.354062854s ago: executing program 4 (id=355): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x105480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x5, 0x1ff, 0x44, @empty, @mcast1, 0x40, 0x8000, 0x0, 0x3c38e439}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.288770405s ago: executing program 4 (id=356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getcwd(&(0x7f0000000280)=""/240, 0xf0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.283173325s ago: executing program 2 (id=357): r0 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) prctl$PR_GET_SECUREBITS(0x1b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.240405876s ago: executing program 3 (id=358): socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 1.084897009s ago: executing program 4 (id=359): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.010949391s ago: executing program 2 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100fe00000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1.010506461s ago: executing program 4 (id=361): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) exit(0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) timer_gettime(0x0, &(0x7f0000000000)) 843.504534ms ago: executing program 3 (id=362): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0xa0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext={0x6, 0x6}, 0x0, 0xa, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz72twjAABOCL8qPkFU80DEDJGBmCTehBYhlgHqaBIijIAiZAKb6vsE/WXeGwDHW5q+RRYv95Hr6rt3c6DpucxsOrWvXJX1n9rzPs69ynacpl7FKt2jRpk5y3866bj6bJ7vqj3wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoj0DAAD//x3nC38=") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x210, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0x36, 0xba}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "2a1a3db231450e3f4a4093c325f807770f511e7f8d14cac085bf00ee2f71a6f184b27d2375"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "379945ce4508bba65b3451a923d7f299bbd97e5a33b76c8673b66a30b8a8885248a7f968de5a16caff067f0cf594e433c2c72b5c9bea55795154a1dd067c175524342cbce7429ff75c7db749f2fad090841aed5a1cbe550a0271abdc34d269cdfe6f5c46737037ce0f78fdbaaf7ae2250a4b4dd9069e94ffb0f5e2"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "381e04ce5805f1c8442107bc87fe0b2ee8abbf63aacc3219178730eccccf9cad8be66eb588e0de6755053c80262c8ac3462627178ca5f5b309a32abb4c66bec9724ef9cc6a2d895277bffa7bcea2fd68a6497db0535b825552771c0bf868470f3a90401cb90418884b160be0f86f70124b74d350f789fb7067d3548c730693152c3ad2f768f4a9fded166af35958caa48db791dc732aac7bf7fc80cbdf6fc2471f86df0fd8cd9d28faaba32bc694eaab64140fa476c393519655108a"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "4096e121c2d5aa0e4828c8dd6fcb707f4af18997af4928ed04496a0a6056465f1f3c20b0ebbbb99e7cc58c37208e64d53286e7ca9bf02df1469cd4ab72f203fff09a634761f4c59271835cea9d11dd5cb0eb9a11a7c37cd63f6680f57eb7f474f460c0afe4a29cad3d0f17c0cbb092d5646d9ab64befe6d47fcf62c76e9734d942837c26780cac503fc67f05"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) close_range(r1, 0xffffffffffffffff, 0x0) 526.76635ms ago: executing program 3 (id=363): r0 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe3, 0x0, 0xfe, 0x0}) 519.62252ms ago: executing program 1 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f00000002c0)=@phonet={0x23, 0xf2, 0x8, 0x7f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="7887ad3230d6aeb3afd7fb9a", 0xc}], 0x1}}], 0x1, 0x4000000) r3 = accept(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) shutdown(r3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 518.53379ms ago: executing program 0 (id=364): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x224, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1d8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1c0, 0x1, [@m_simple={0x184, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x101800, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}}, 0x0) 77.946509ms ago: executing program 2 (id=367): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x105480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x5, 0x1ff, 0x44, @empty, @mcast1, 0x40, 0x8000, 0x0, 0x3c38e439}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 77.757649ms ago: executing program 3 (id=368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB="fdffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000d00000400"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 77.248179ms ago: executing program 4 (id=378): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0xfffffffe, 0x89}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x3800}], 0x41) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, 0x0, 0x0) 17.6923ms ago: executing program 2 (id=369): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 4 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 26.860371][ T29] audit: type=1400 audit(1757449859.628:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.861432][ T3292] cgroup: Unknown subsys name 'net' [ 26.883339][ T29] audit: type=1400 audit(1757449859.628:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.910550][ T29] audit: type=1400 audit(1757449859.668:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.072028][ T3292] cgroup: Unknown subsys name 'cpuset' [ 27.078327][ T3292] cgroup: Unknown subsys name 'rlimit' [ 27.248623][ T29] audit: type=1400 audit(1757449860.018:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.276572][ T29] audit: type=1400 audit(1757449860.018:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.297088][ T29] audit: type=1400 audit(1757449860.018:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.306798][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.317495][ T29] audit: type=1400 audit(1757449860.018:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.344383][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.346278][ T29] audit: type=1400 audit(1757449860.028:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.379713][ T29] audit: type=1400 audit(1757449860.038:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.402982][ T29] audit: type=1400 audit(1757449860.108:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.542188][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.563114][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.578891][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.594032][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.695075][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.702196][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.709587][ T3305] bridge_slave_0: entered allmulticast mode [ 28.716085][ T3305] bridge_slave_0: entered promiscuous mode [ 28.727164][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.740406][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.747477][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.754671][ T3304] bridge_slave_0: entered allmulticast mode [ 28.761161][ T3304] bridge_slave_0: entered promiscuous mode [ 28.772188][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.779303][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.786424][ T3305] bridge_slave_1: entered allmulticast mode [ 28.792823][ T3305] bridge_slave_1: entered promiscuous mode [ 28.807159][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.814265][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.821432][ T3304] bridge_slave_1: entered allmulticast mode [ 28.827757][ T3304] bridge_slave_1: entered promiscuous mode [ 28.834021][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.841140][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.848354][ T3312] bridge_slave_0: entered allmulticast mode [ 28.854602][ T3312] bridge_slave_0: entered promiscuous mode [ 28.865999][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.873062][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.880311][ T3307] bridge_slave_0: entered allmulticast mode [ 28.886831][ T3307] bridge_slave_0: entered promiscuous mode [ 28.895767][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.902993][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.910211][ T3307] bridge_slave_1: entered allmulticast mode [ 28.916763][ T3307] bridge_slave_1: entered promiscuous mode [ 28.928112][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.935265][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942430][ T3312] bridge_slave_1: entered allmulticast mode [ 28.948796][ T3312] bridge_slave_1: entered promiscuous mode [ 28.961032][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.989517][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.007563][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.030467][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.040496][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.050915][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.061184][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.088484][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.103581][ T3305] team0: Port device team_slave_0 added [ 29.128676][ T3305] team0: Port device team_slave_1 added [ 29.140074][ T3307] team0: Port device team_slave_0 added [ 29.146893][ T3307] team0: Port device team_slave_1 added [ 29.153156][ T3304] team0: Port device team_slave_0 added [ 29.159445][ T3312] team0: Port device team_slave_0 added [ 29.165968][ T3312] team0: Port device team_slave_1 added [ 29.176622][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.183761][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.190889][ T3313] bridge_slave_0: entered allmulticast mode [ 29.197221][ T3313] bridge_slave_0: entered promiscuous mode [ 29.208764][ T3304] team0: Port device team_slave_1 added [ 29.223781][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.230826][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.237928][ T3313] bridge_slave_1: entered allmulticast mode [ 29.244444][ T3313] bridge_slave_1: entered promiscuous mode [ 29.265055][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.272018][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.298054][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.314715][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.321701][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.347627][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.363692][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.370638][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.396553][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.407782][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.414800][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.440707][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.451662][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.458633][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.484685][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.500541][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.507554][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.533465][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.544605][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.551628][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.577601][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.590878][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.597870][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.623854][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.645316][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.657440][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.695381][ T3307] hsr_slave_0: entered promiscuous mode [ 29.701359][ T3307] hsr_slave_1: entered promiscuous mode [ 29.708628][ T3313] team0: Port device team_slave_0 added [ 29.733883][ T3313] team0: Port device team_slave_1 added [ 29.750557][ T3304] hsr_slave_0: entered promiscuous mode [ 29.756576][ T3304] hsr_slave_1: entered promiscuous mode [ 29.762402][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.768110][ T3304] Cannot create hsr debugfs directory [ 29.775239][ T3305] hsr_slave_0: entered promiscuous mode [ 29.781110][ T3305] hsr_slave_1: entered promiscuous mode [ 29.786906][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 29.792645][ T3305] Cannot create hsr debugfs directory [ 29.804543][ T3312] hsr_slave_0: entered promiscuous mode [ 29.810492][ T3312] hsr_slave_1: entered promiscuous mode [ 29.816450][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.822198][ T3312] Cannot create hsr debugfs directory [ 29.850770][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.857784][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.883709][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.904149][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.911158][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.937311][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.004772][ T3313] hsr_slave_0: entered promiscuous mode [ 30.010860][ T3313] hsr_slave_1: entered promiscuous mode [ 30.016884][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.022628][ T3313] Cannot create hsr debugfs directory [ 30.155859][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.166977][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.175518][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.185960][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.204943][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.216484][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.231526][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.240119][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.257777][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.267377][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.280458][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.299558][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.331169][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.340062][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.349270][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.357852][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.386496][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.409908][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.420928][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.441012][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.448129][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.457070][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.464222][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.474758][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.484381][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.494386][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.526984][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.540354][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.568343][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.582732][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.589778][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.605769][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.613656][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.632038][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.643738][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.650808][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.673270][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.680379][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.691180][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.698274][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.707192][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.714373][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.733132][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.749926][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.756993][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.769900][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.783524][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.795973][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.803038][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.822740][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.829873][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.845471][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.855863][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.876859][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.887327][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.943952][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.986608][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.013669][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.033659][ T3307] veth0_vlan: entered promiscuous mode [ 31.050474][ T3307] veth1_vlan: entered promiscuous mode [ 31.101219][ T3307] veth0_macvtap: entered promiscuous mode [ 31.114216][ T3307] veth1_macvtap: entered promiscuous mode [ 31.123549][ T3305] veth0_vlan: entered promiscuous mode [ 31.133552][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.155837][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.168508][ T3305] veth1_vlan: entered promiscuous mode [ 31.180486][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.196212][ T3304] veth0_vlan: entered promiscuous mode [ 31.213109][ T2659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.232243][ T3304] veth1_vlan: entered promiscuous mode [ 31.240605][ T2659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.274818][ T3304] veth0_macvtap: entered promiscuous mode [ 31.285141][ T2659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.294325][ T2659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.304829][ T3304] veth1_macvtap: entered promiscuous mode [ 31.316761][ T3305] veth0_macvtap: entered promiscuous mode [ 31.324503][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.335922][ T3312] veth0_vlan: entered promiscuous mode [ 31.367078][ T3313] veth0_vlan: entered promiscuous mode [ 31.377434][ T3305] veth1_macvtap: entered promiscuous mode [ 31.387447][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.400244][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.408815][ T3313] veth1_vlan: entered promiscuous mode [ 31.417454][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.424946][ T3312] veth1_vlan: entered promiscuous mode [ 31.434032][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.453937][ T1388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465323][ T1388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481915][ T1388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.492194][ T3313] veth0_macvtap: entered promiscuous mode [ 31.500379][ T1388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519844][ T3312] veth0_macvtap: entered promiscuous mode [ 31.528483][ T1388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537958][ T3313] veth1_macvtap: entered promiscuous mode [ 31.554633][ T1388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.568970][ T3312] veth1_macvtap: entered promiscuous mode [ 31.573341][ T3478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.583626][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.600640][ T1388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.614269][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.623239][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.636965][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.651959][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.662490][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.689182][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.721666][ T3483] loop3: detected capacity change from 0 to 128 [ 31.744478][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749652][ T3483] syz.3.4: attempt to access beyond end of device [ 31.749652][ T3483] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 31.767539][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.803266][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.829593][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.847867][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.876671][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.885967][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 31.885979][ T29] audit: type=1326 audit(1757449864.638:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 31.915288][ T29] audit: type=1326 audit(1757449864.648:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 31.938308][ T29] audit: type=1326 audit(1757449864.648:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 31.961400][ T29] audit: type=1326 audit(1757449864.648:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 31.984688][ T29] audit: type=1326 audit(1757449864.648:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.007880][ T29] audit: type=1326 audit(1757449864.648:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.030941][ T29] audit: type=1326 audit(1757449864.648:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.054082][ T29] audit: type=1326 audit(1757449864.648:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.077288][ T29] audit: type=1326 audit(1757449864.648:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.100413][ T29] audit: type=1326 audit(1757449864.648:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 32.127385][ T3505] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 32.135136][ T3505] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.237184][ T3511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.351071][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.358544][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.382743][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.390130][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.402721][ T3514] loop1: detected capacity change from 0 to 512 [ 32.409861][ T3514] ======================================================= [ 32.409861][ T3514] WARNING: The mand mount option has been deprecated and [ 32.409861][ T3514] and is ignored by this kernel. Remove the mand [ 32.409861][ T3514] option from the mount to silence this warning. [ 32.409861][ T3514] ======================================================= [ 32.500731][ T3518] netlink: 'syz.3.13': attribute type 13 has an invalid length. [ 32.508474][ T3518] netlink: 'syz.3.13': attribute type 17 has an invalid length. [ 32.518357][ T3514] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.546928][ T3514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 32.558060][ T3514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.564481][ T3514] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.12: bad orphan inode 267 [ 32.575344][ T3514] EXT4-fs (loop1): Remounting filesystem read-only [ 32.582364][ T3514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 32.600728][ T3518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.940566][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 33.100435][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.107761][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.198261][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.208146][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.250888][ T1388] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.260450][ T3550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 33.269408][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.282649][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.293702][ T1388] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.308446][ T1388] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.324733][ T1388] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.433553][ T3564] loop4: detected capacity change from 0 to 2048 [ 33.450823][ T3564] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 33.499829][ T3567] @: renamed from vlan0 (while UP) [ 33.595189][ T3569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.734651][ T3505] syz.2.3 (3505) used greatest stack depth: 10120 bytes left [ 33.844843][ T3573] loop2: detected capacity change from 0 to 2048 [ 33.893670][ T3295] loop2: p1 < > p3 p4 < > [ 33.898927][ T3295] loop2: p3 start 4284289 is beyond EOD, truncated [ 33.911361][ T3577] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 33.925201][ T3573] loop2: p1 < > p3 p4 < > [ 33.927030][ T3577] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 33.944048][ T3573] loop2: p3 start 4284289 is beyond EOD, truncated [ 33.965069][ T2994] loop2: p1 < > p3 p4 < > [ 33.974126][ T2994] loop2: p3 start 4284289 is beyond EOD, truncated [ 34.038804][ T3582] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 34.097348][ T3586] bridge_slave_0: left allmulticast mode [ 34.103108][ T3586] bridge_slave_0: left promiscuous mode [ 34.108858][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.128709][ T3586] bridge_slave_1: left allmulticast mode [ 34.134598][ T3586] bridge_slave_1: left promiscuous mode [ 34.140256][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.151194][ T3586] bond0: (slave bond_slave_0): Releasing backup interface [ 34.161775][ T3586] bond0: (slave bond_slave_1): Releasing backup interface [ 34.173520][ T3586] team0: Port device team_slave_0 removed [ 34.182523][ T3586] team0: Port device team_slave_1 removed [ 34.356924][ T3593] loop1: detected capacity change from 0 to 2048 [ 34.364036][ T3596] loop2: detected capacity change from 0 to 1024 [ 34.370868][ T3596] EXT4-fs: Ignoring removed orlov option [ 34.401818][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.455293][ T3297] loop1: p1 < > p4 [ 34.459908][ T3297] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.478914][ T3593] loop1: p1 < > p4 [ 34.497972][ T3593] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.617893][ T3606] capability: warning: `syz.0.42' uses 32-bit capabilities (legacy support in use) [ 34.734686][ T3569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.842984][ T3569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.861953][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.885179][ T3382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3382 comm=kworker/0:3 [ 34.912770][ T3569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.913983][ T3608] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 34.982806][ T3463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.013261][ T3463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.036938][ T3614] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 35.041767][ T3463] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.070166][ T3614] netlink: 'syz.1.46': attribute type 49 has an invalid length. [ 35.074413][ T3463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.087170][ T3617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 35.093758][ T3617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.101296][ T3617] vhci_hcd vhci_hcd.0: Device attached [ 35.109430][ T3620] random: crng reseeded on system resumption [ 35.236740][ T3627] loop3: detected capacity change from 0 to 1024 [ 35.267441][ T3627] EXT4-fs: inline encryption not supported [ 35.283339][ T3627] EXT4-fs: Ignoring removed bh option [ 35.306758][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.348934][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.374883][ T3382] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 35.548595][ T3618] vhci_hcd: cannot find the pending unlink 2869 [ 35.555885][ T3618] vhci_hcd: connection reset by peer [ 35.561701][ T51] vhci_hcd: stop threads [ 35.565967][ T51] vhci_hcd: release socket [ 35.570387][ T51] vhci_hcd: disconnect device [ 35.809835][ T3637] loop2: detected capacity change from 0 to 1024 [ 35.823293][ T3637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.839010][ T3637] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.53: Allocating blocks 385-513 which overlap fs metadata [ 35.854885][ T3637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 35.863740][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 35.927396][ T3637] EXT4-fs (loop2): pa ffff888106e5f0e0: logic 16, phys. 129, len 24 [ 35.935455][ T3637] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 35.959765][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.089050][ T3649] netlink: 60 bytes leftover after parsing attributes in process `syz.4.56'. [ 36.098851][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 36.141969][ T3652] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 36.210753][ T3652] loop1: detected capacity change from 0 to 2048 [ 36.223097][ T3652] EXT4-fs: Ignoring removed bh option [ 36.247409][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.276052][ T3652] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.293397][ T3652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 36.305917][ T3652] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.305917][ T3652] [ 36.315645][ T3652] EXT4-fs (loop1): Total free blocks count 0 [ 36.321678][ T3652] EXT4-fs (loop1): Free/Dirty block details [ 36.327611][ T3652] EXT4-fs (loop1): free_blocks=2415919104 [ 36.333394][ T3652] EXT4-fs (loop1): dirty_blocks=64 [ 36.338519][ T3652] EXT4-fs (loop1): Block reservation details [ 36.344542][ T3652] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 36.363879][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.967560][ T3671] tipc: Started in network mode [ 36.972593][ T3671] tipc: Node identity 9220149e871, cluster identity 4711 [ 36.979804][ T3671] tipc: Enabled bearer , priority 0 [ 36.993113][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 36.993127][ T29] audit: type=1400 audit(1757449869.768:335): avc: denied { ioctl } for pid=3670 comm="syz.0.64" path="socket:[4898]" dev="sockfs" ino=4898 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.993356][ T3671] syzkaller0: entered promiscuous mode [ 37.030270][ T3671] syzkaller0: entered allmulticast mode [ 37.038918][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.075524][ T3671] tipc: Resetting bearer [ 37.092144][ T3670] tipc: Resetting bearer [ 37.099456][ T3670] tipc: Disabling bearer [ 37.112169][ T29] audit: type=1400 audit(1757449869.858:336): avc: denied { append } for pid=3675 comm="syz.2.66" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.149626][ T29] audit: type=1400 audit(1757449869.918:337): avc: denied { read } for pid=3675 comm="syz.2.66" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.184827][ T29] audit: type=1400 audit(1757449869.918:338): avc: denied { open } for pid=3675 comm="syz.2.66" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.208429][ T29] audit: type=1400 audit(1757449869.918:339): avc: denied { ioctl } for pid=3675 comm="syz.2.66" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.233847][ T3680] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 37.286104][ T3684] loop1: detected capacity change from 0 to 512 [ 37.294228][ T3684] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.307374][ T3684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.328880][ T3684] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.347968][ T3684] EXT4-fs (loop1): 1 truncate cleaned up [ 37.355519][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.389824][ T29] audit: type=1400 audit(1757449870.158:340): avc: denied { execmem } for pid=3683 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.524036][ T29] audit: type=1326 audit(1757449870.268:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62c44ebe9 code=0x7ffc0000 [ 37.547239][ T29] audit: type=1326 audit(1757449870.268:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff62c44ebe9 code=0x7ffc0000 [ 37.570337][ T29] audit: type=1326 audit(1757449870.268:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62c44ebe9 code=0x7ffc0000 [ 37.590141][ T3690] SELinux: ebitmap: truncated map [ 37.593691][ T29] audit: type=1326 audit(1757449870.268:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62c44ebe9 code=0x7ffc0000 [ 37.616687][ T3690] SELinux: failed to load policy [ 37.742366][ T3695] loop3: detected capacity change from 0 to 1024 [ 37.751386][ T3695] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.762290][ T3695] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.772323][ T3695] JBD2: no valid journal superblock found [ 37.778057][ T3695] EXT4-fs (loop3): Could not load journal inode [ 38.161935][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.277484][ T3722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 38.533901][ T3720] Set syz1 is full, maxelem 65536 reached [ 38.625054][ T3725] loop0: detected capacity change from 0 to 2048 [ 38.667152][ T3725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 38.702674][ T3731] lo speed is unknown, defaulting to 1000 [ 38.708468][ T3731] lo speed is unknown, defaulting to 1000 [ 38.736666][ T3731] lo speed is unknown, defaulting to 1000 [ 38.743789][ T3731] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.753524][ T3731] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.775018][ T3731] lo speed is unknown, defaulting to 1000 [ 38.782465][ T3731] lo speed is unknown, defaulting to 1000 [ 38.844930][ T3733] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.859859][ T3736] loop1: detected capacity change from 0 to 2048 [ 38.866777][ T3731] lo speed is unknown, defaulting to 1000 [ 38.874270][ T3733] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 784 with error 28 [ 38.886699][ T3733] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.886699][ T3733] [ 38.896366][ T3733] EXT4-fs (loop0): Total free blocks count 0 [ 38.897392][ T3731] lo speed is unknown, defaulting to 1000 [ 38.902381][ T3733] EXT4-fs (loop0): Free/Dirty block details [ 38.902407][ T3733] EXT4-fs (loop0): free_blocks=2415919104 [ 38.902421][ T3733] EXT4-fs (loop0): dirty_blocks=800 [ 38.902434][ T3733] EXT4-fs (loop0): Block reservation details [ 38.930996][ T3733] EXT4-fs (loop0): i_reserved_data_blocks=50 [ 38.943778][ T3739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 38.965998][ T3736] EXT4-fs (loop1): failed to initialize system zone (-117) [ 38.973202][ T3731] lo speed is unknown, defaulting to 1000 [ 38.981394][ T3736] EXT4-fs (loop1): mount failed [ 39.057708][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 39.058787][ T3744] loop1: detected capacity change from 0 to 512 [ 39.075005][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 39.081082][ T3744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.093618][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.109265][ T3744] EXT4-fs error (device loop1): ext4_init_orphan_info:611: comm syz.1.84: orphan file block 0: bad magic [ 39.122049][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.129201][ T3744] EXT4-fs (loop1): Remounting filesystem read-only [ 39.130203][ T3748] loop3: detected capacity change from 0 to 512 [ 39.135877][ T3744] EXT4-fs (loop1): mount failed [ 39.154600][ T3748] EXT4-fs: Ignoring removed i_version option [ 39.172018][ T3748] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 39.180079][ T3748] System zones: 0-2, 18-18, 34-35 [ 39.187888][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.200525][ T3748] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.226152][ T3754] loop1: detected capacity change from 0 to 512 [ 39.241818][ T3754] EXT4-fs: Ignoring removed nobh option [ 39.344845][ T3754] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.87: iget: bad i_size value: 38620345925642 [ 39.358704][ T3754] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.87: couldn't read orphan inode 15 (err -117) [ 39.371168][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.396170][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.551117][ T3767] EXT4-fs (loop1): shut down requested (0) [ 39.758750][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 39.783763][ T3773] loop4: detected capacity change from 0 to 128 [ 39.805358][ T3775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3775 comm=syz.3.94 [ 39.875379][ T3778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.931033][ T3778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.074381][ T3778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.192254][ T1388] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 40.211261][ T1388] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.211888][ T3778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.223745][ T1388] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.223745][ T1388] [ 40.240737][ T3788] netlink: 100 bytes leftover after parsing attributes in process `syz.4.98'. [ 40.243669][ T1388] EXT4-fs (loop1): Total free blocks count 0 [ 40.258550][ T1388] EXT4-fs (loop1): Free/Dirty block details [ 40.259567][ T3789] process 'syz.2.97' launched '/dev/fd/7' with NULL argv: empty string added [ 40.264534][ T1388] EXT4-fs (loop1): free_blocks=0 [ 40.264549][ T1388] EXT4-fs (loop1): dirty_blocks=12424 [ 40.264561][ T1388] EXT4-fs (loop1): Block reservation details [ 40.289635][ T1388] EXT4-fs (loop1): i_reserved_data_blocks=12424 [ 40.347755][ T1388] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.358454][ T1388] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.370350][ T1388] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.386665][ T1388] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.413378][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 40.424417][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 40.438295][ T3793] hsr_slave_0 (unregistering): left promiscuous mode [ 40.461353][ T3382] usb 9-1: enqueue for inactive port 0 [ 40.471292][ T3382] usb 9-1: enqueue for inactive port 0 [ 40.497454][ T3797] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 40.511130][ T3797] 8021q: VLANs not supported on ipvlan0 [ 40.526943][ T3801] loop4: detected capacity change from 0 to 512 [ 40.541555][ T3382] vhci_hcd: vhci_device speed not set [ 40.548504][ T3801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.562563][ T3801] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.660922][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.770258][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 40.779169][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 40.901730][ C0] hrtimer: interrupt took 36154 ns [ 40.937489][ T3810] Set syz1 is full, maxelem 65536 reached [ 41.797166][ T3818] loop3: detected capacity change from 0 to 764 [ 41.804310][ T3834] 9pnet_fd: Insufficient options for proto=fd [ 41.830932][ T3818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.984441][ T3837] loop4: detected capacity change from 0 to 1024 [ 41.991445][ T3837] EXT4-fs: inline encryption not supported [ 41.997278][ T3837] EXT4-fs: Ignoring removed i_version option [ 42.005322][ T3837] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.340892][ T3837] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.115: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.392181][ T3837] __quota_error: 217 callbacks suppressed [ 42.392200][ T3837] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 42.406228][ T3837] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.115: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.421051][ T3837] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 42.429860][ T3837] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.115: Failed to acquire dquot type 0 [ 42.441265][ T3837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.450884][ T3837] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.115: mark_inode_dirty error [ 42.462331][ T3837] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.472570][ T3837] EXT4-fs (loop4): 1 orphan inode deleted [ 42.479444][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.493136][ T1388] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.760017][ T1388] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 42.768571][ T1388] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 43.202200][ T3847] loop1: detected capacity change from 0 to 1024 [ 43.209245][ T3847] EXT4-fs: inline encryption not supported [ 43.215240][ T3847] EXT4-fs: Ignoring removed i_version option [ 43.255642][ T3818] mmap: syz.3.108 (3818) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.351359][ T3847] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.221593][ T3837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.231597][ T29] audit: type=1400 audit(1757449877.998:562): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.442835][ T3847] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.117: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.501689][ T3847] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 45.509900][ T3847] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.117: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.524363][ T3847] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 45.533146][ T3847] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.117: Failed to acquire dquot type 0 [ 45.544719][ T3847] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.556256][ T3847] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.117: mark_inode_dirty error [ 45.571168][ T3837] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.115: Invalid inode table block 1 in block_group 0 [ 45.583933][ T3847] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.594184][ T3847] EXT4-fs (loop1): 1 orphan inode deleted [ 45.600222][ T3847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.612948][ T3837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.622526][ T37] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.644415][ T3837] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.115: mark_inode_dirty error [ 45.691882][ T37] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 45.700339][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 45.853494][ T29] audit: type=1400 audit(1757449878.628:563): avc: denied { watch watch_reads } for pid=3853 comm="syz.2.119" path="/20" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.889673][ T3854] netlink: 'syz.2.119': attribute type 39 has an invalid length. [ 46.061919][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.139180][ T3307] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 46.171472][ T3307] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 46.192211][ T29] audit: type=1400 audit(1757449878.958:564): avc: denied { create } for pid=3858 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.211996][ T29] audit: type=1400 audit(1757449878.958:565): avc: denied { ioctl } for pid=3858 comm="syz.0.122" path="socket:[6081]" dev="sockfs" ino=6081 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.237283][ T3859] usb usb9: usbfs: process 3859 (syz.0.122) did not claim interface 32 before use [ 46.249397][ T3307] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 46.302634][ T3864] loop0: detected capacity change from 0 to 1024 [ 46.326484][ T3864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.351187][ T3866] netlink: 'syz.2.124': attribute type 11 has an invalid length. [ 46.359264][ T3866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'. [ 46.424339][ T3879] loop3: detected capacity change from 0 to 512 [ 46.484314][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.517938][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.541847][ T3879] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.604513][ T3879] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ¬í: iget: bad i_size value: 2533274857506816 [ 46.716687][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.771738][ T3906] loop3: detected capacity change from 0 to 512 [ 46.815017][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.925962][ T3906] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.092462][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.241147][ T3931] loop1: detected capacity change from 0 to 512 [ 47.250108][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 47.277789][ T3931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.338375][ T3931] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.135: corrupted xattr entries [ 47.396910][ T3931] EXT4-fs (loop1): Remounting filesystem read-only [ 47.435589][ T3931] EXT4-fs (loop1): 1 truncate cleaned up [ 47.457212][ T3931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.487236][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 47.487249][ T29] audit: type=1326 audit(1757449880.258:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b9f67d550 code=0x7ffc0000 [ 47.578607][ T29] audit: type=1326 audit(1757449880.288:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5b9f67d937 code=0x7ffc0000 [ 47.601889][ T29] audit: type=1326 audit(1757449880.288:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b9f67d550 code=0x7ffc0000 [ 47.625115][ T29] audit: type=1326 audit(1757449880.288:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.648405][ T29] audit: type=1326 audit(1757449880.308:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.671647][ T29] audit: type=1326 audit(1757449880.308:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.694935][ T29] audit: type=1326 audit(1757449880.308:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.718607][ T29] audit: type=1326 audit(1757449880.308:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.742293][ T29] audit: type=1326 audit(1757449880.308:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.765525][ T29] audit: type=1326 audit(1757449880.308:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 47.789525][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.955343][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 47.962825][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.970222][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.977768][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.985211][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.992701][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.000094][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 48.007527][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.014929][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.022359][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.031785][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 48.115625][ T3955] fido_id[3955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.176512][ T3961] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 48.184461][ T3961] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 48.394634][ T3968] netlink: 'syz.3.149': attribute type 13 has an invalid length. [ 48.560414][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 48.569417][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 48.747916][ T3977] netlink: 'syz.3.152': attribute type 6 has an invalid length. [ 48.755652][ T3977] netlink: 168 bytes leftover after parsing attributes in process `syz.3.152'. [ 48.942003][ T3988] syzkaller1: entered promiscuous mode [ 48.947503][ T3988] syzkaller1: entered allmulticast mode [ 49.122663][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 49.336303][ T4009] netlink: 'syz.0.159': attribute type 7 has an invalid length. [ 49.344038][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 49.391580][ T4011] hub 9-0:1.0: USB hub found [ 49.396299][ T4011] hub 9-0:1.0: 8 ports detected [ 50.075317][ T4023] loop1: detected capacity change from 0 to 1024 [ 50.075725][ T4023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.118033][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.134260][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.157000][ T4027] netlink: 'syz.1.163': attribute type 13 has an invalid length. [ 50.228229][ T4027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.376822][ T4035] loop1: detected capacity change from 0 to 1024 [ 50.511951][ T4037] loop1: detected capacity change from 0 to 128 [ 50.523400][ T4037] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.531278][ T4037] FAT-fs (loop1): Filesystem has been set read-only [ 50.543016][ T4037] syz.1.167: attempt to access beyond end of device [ 50.543016][ T4037] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 50.592103][ T4037] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.592128][ T4037] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.592252][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592252][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592334][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592334][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592368][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592368][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592407][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592407][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592512][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592512][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592602][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592602][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592644][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592644][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592686][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592686][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.592795][ T4037] syz.1.167: attempt to access beyond end of device [ 50.592795][ T4037] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.624519][ T4042] Buffer I/O error on dev loop1, logical block 2065, async page read [ 50.624547][ T4042] Buffer I/O error on dev loop1, logical block 2066, async page read [ 50.624566][ T4042] Buffer I/O error on dev loop1, logical block 2067, async page read [ 50.624584][ T4042] Buffer I/O error on dev loop1, logical block 2068, async page read [ 50.624626][ T4042] Buffer I/O error on dev loop1, logical block 2069, async page read [ 50.624640][ T4042] Buffer I/O error on dev loop1, logical block 2070, async page read [ 50.624697][ T4042] Buffer I/O error on dev loop1, logical block 2071, async page read [ 50.624711][ T4042] Buffer I/O error on dev loop1, logical block 2072, async page read [ 50.624732][ T4042] Buffer I/O error on dev loop1, logical block 2065, async page read [ 50.624749][ T4042] Buffer I/O error on dev loop1, logical block 2066, async page read [ 50.714780][ T4045] loop2: detected capacity change from 0 to 128 [ 50.870455][ T4049] loop2: detected capacity change from 0 to 256 [ 50.897179][ T4049] pim6reg: entered allmulticast mode [ 50.898913][ T4049] pim6reg: left allmulticast mode [ 50.970570][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.970656][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.197613][ T4052] loop2: detected capacity change from 0 to 1024 [ 51.217860][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.302407][ T4057] loop3: detected capacity change from 0 to 1024 [ 51.302649][ T4057] EXT4-fs: Ignoring removed bh option [ 51.302743][ T4057] EXT4-fs: inline encryption not supported [ 51.312243][ T4057] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.320188][ T4057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.321127][ T4057] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.173: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.321212][ T4057] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.173: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.321786][ T4057] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.173: Failed to acquire dquot type 0 [ 51.321973][ T4057] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.322086][ T4057] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.173: mark_inode_dirty error [ 51.322273][ T4057] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 51.322301][ T4057] EXT4-fs (loop3): 1 orphan inode deleted [ 51.322657][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.322932][ T139] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.323132][ T139] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 51.323751][ T4057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.324073][ T4057] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.173: Invalid inode table block 1 in block_group 0 [ 51.324173][ T4057] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.324270][ T4057] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz.3.173: mark_inode_dirty error [ 51.329428][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.477386][ T4068] loop3: detected capacity change from 0 to 256 [ 51.487605][ T4068] FAT-fs (loop3): Directory bread(block 64) failed [ 51.487634][ T4068] FAT-fs (loop3): Directory bread(block 65) failed [ 51.487661][ T4068] FAT-fs (loop3): Directory bread(block 66) failed [ 51.487682][ T4068] FAT-fs (loop3): Directory bread(block 67) failed [ 51.487775][ T4068] FAT-fs (loop3): Directory bread(block 68) failed [ 51.487795][ T4068] FAT-fs (loop3): Directory bread(block 69) failed [ 51.487818][ T4068] FAT-fs (loop3): Directory bread(block 70) failed [ 51.487838][ T4068] FAT-fs (loop3): Directory bread(block 71) failed [ 51.487860][ T4068] FAT-fs (loop3): Directory bread(block 72) failed [ 51.487876][ T4068] FAT-fs (loop3): Directory bread(block 73) failed [ 51.532075][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 51.578441][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 51.937681][ T4083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.000643][ T4083] team0: Port device bond1 added [ 52.107698][ T4096] netlink: 'syz.3.188': attribute type 7 has an invalid length. [ 52.153647][ T4104] loop3: detected capacity change from 0 to 4096 [ 52.167867][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.274217][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.308293][ T4113] Zero length message leads to an empty skb [ 52.315291][ T4113] netlink: 14 bytes leftover after parsing attributes in process `syz.4.193'. [ 52.324734][ T4113] hsr_slave_1: left promiscuous mode [ 52.404050][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 52.455437][ T4115] team0 (unregistering): Port device team_slave_0 removed [ 52.505562][ T4115] team0 (unregistering): Port device team_slave_1 removed [ 52.532072][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 52.532098][ T29] audit: type=1400 audit(1757449885.258:824): avc: denied { execmem } for pid=4117 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.557390][ T29] audit: type=1400 audit(1757449885.268:825): avc: denied { ioctl } for pid=4117 comm="syz.4.194" path="socket:[7454]" dev="sockfs" ino=7454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.619271][ T4115] team0 (unregistering): Port device bond1 removed [ 52.663576][ T4120] tipc: Started in network mode [ 52.668631][ T4120] tipc: Node identity caa2ecc34054, cluster identity 4711 [ 52.675838][ T4120] tipc: Enabled bearer , priority 0 [ 52.686683][ T4120] syzkaller0: entered promiscuous mode [ 52.692236][ T4120] syzkaller0: entered allmulticast mode [ 52.708517][ T4120] tipc: Resetting bearer [ 52.752941][ T4119] tipc: Resetting bearer [ 52.763042][ T4119] tipc: Disabling bearer [ 52.968967][ T29] audit: type=1400 audit(1757449885.738:826): avc: denied { bind } for pid=4123 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.996450][ T29] audit: type=1400 audit(1757449885.768:827): avc: denied { setopt } for pid=4123 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.017694][ T4126] loop3: detected capacity change from 0 to 2048 [ 53.025979][ T4124] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.063140][ T3295] Alternate GPT is invalid, using primary GPT. [ 53.069529][ T3295] loop3: p2 p3 p7 [ 53.082172][ T4126] Alternate GPT is invalid, using primary GPT. [ 53.088533][ T4126] loop3: p2 p3 p7 [ 53.093760][ T4124] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.105727][ T29] audit: type=1326 audit(1757449885.878:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.160464][ T29] audit: type=1326 audit(1757449885.878:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.183878][ T29] audit: type=1326 audit(1757449885.908:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.207375][ T29] audit: type=1326 audit(1757449885.908:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.230759][ T29] audit: type=1326 audit(1757449885.908:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.254146][ T29] audit: type=1326 audit(1757449885.908:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06515aebe9 code=0x7ffc0000 [ 53.278718][ T4124] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.303798][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 53.315126][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.326013][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.344923][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 53.355520][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.366662][ T4124] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.382700][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.425695][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 53.469132][ T139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.581556][ T1388] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.630927][ T1388] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.702112][ T1388] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.024589][ T4137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 54.033532][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 54.042426][ T4137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 54.065243][ T4137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 54.624603][ T4153] loop0: detected capacity change from 0 to 512 [ 54.635519][ T4153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.647764][ T4153] EXT4-fs (loop0): 1 truncate cleaned up [ 54.654007][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.774105][ T4163] loop1: detected capacity change from 0 to 512 [ 54.780173][ T4160] loop4: detected capacity change from 0 to 1024 [ 54.787782][ T4163] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.798941][ T4163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.811134][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.825127][ T4163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 54.835058][ T4160] random: crng reseeded on system resumption [ 54.847902][ T4163] System zones: 1-12 [ 54.864522][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.898250][ T4163] EXT4-fs (loop1): 1 truncate cleaned up [ 54.905726][ T4163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.135545][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 55.186104][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.227792][ T4188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.240689][ T4188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.266314][ T4188] bond0 (unregistering): Released all slaves [ 55.357027][ T4191] loop3: detected capacity change from 0 to 512 [ 55.363819][ T4191] EXT4-fs: Ignoring removed nobh option [ 55.374383][ T4191] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 55.390129][ T4191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.397131][ T4191] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.215: bad orphan inode 15 [ 55.407571][ T4191] ext4_test_bit(bit=14, block=18) = 1 [ 55.412997][ T4191] is_bad_inode(inode)=0 [ 55.417158][ T4191] NEXT_ORPHAN(inode)=1023 [ 55.421526][ T4191] max_ino=32 [ 55.424730][ T4191] i_nlink=0 [ 55.428633][ T4191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.215: bg 0: block 161: padding at end of block bitmap is not set [ 55.451993][ T4191] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.464192][ T4191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.505915][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.535261][ T4199] atomic_op ffff888103f30128 conn xmit_atomic 0000000000000000 [ 55.548630][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.558869][ T4199] loop2: detected capacity change from 0 to 128 [ 55.589569][ T4199] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.667696][ T4203] loop3: detected capacity change from 0 to 1024 [ 55.692208][ T4199] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.744611][ T4203] EXT4-fs: Ignoring removed oldalloc option [ 55.750597][ T4203] EXT4-fs: Ignoring removed bh option [ 55.788988][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.806738][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.978222][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.041363][ T4222] loop3: detected capacity change from 0 to 512 [ 56.070368][ T4222] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 56.079262][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.110537][ T4222] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.129851][ T4222] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.225: corrupted inode contents [ 56.161286][ T4222] EXT4-fs (loop3): Remounting filesystem read-only [ 56.167904][ T4222] EXT4-fs (loop3): 1 truncate cleaned up [ 56.173766][ T139] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.184375][ T139] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.236450][ T139] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.267475][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.298421][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.373807][ T4232] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 56.386357][ T4232] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 56.434929][ T4234] loop0: detected capacity change from 0 to 1024 [ 56.446751][ T4234] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 56.567520][ T4242] syzkaller0: entered promiscuous mode [ 56.573100][ T4242] syzkaller0: entered allmulticast mode [ 56.615520][ T4245] __nla_validate_parse: 4 callbacks suppressed [ 56.615532][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.735479][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.765249][ T4249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 56.848973][ T4249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4249 comm=syz.1.235 [ 57.407969][ T4254] lo speed is unknown, defaulting to 1000 [ 57.556390][ T4257] netlink: 'syz.2.237': attribute type 4 has an invalid length. [ 57.585632][ T4257] netlink: 'syz.2.237': attribute type 4 has an invalid length. [ 57.731075][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 57.731088][ T29] audit: type=1400 audit(1757449890.498:911): avc: denied { getopt } for pid=4258 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.796699][ T29] audit: type=1400 audit(1757449890.568:912): avc: denied { connect } for pid=4258 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.816262][ T29] audit: type=1400 audit(1757449890.568:913): avc: denied { name_connect } for pid=4258 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.844703][ T29] audit: type=1400 audit(1757449890.618:914): avc: denied { write } for pid=4258 comm="syz.3.238" lport=49750 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.913033][ T29] audit: type=1326 audit(1757449890.678:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 57.936343][ T29] audit: type=1326 audit(1757449890.678:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 57.936686][ T4264] loop1: detected capacity change from 0 to 4096 [ 57.959693][ T29] audit: type=1326 audit(1757449890.678:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 57.989274][ T29] audit: type=1326 audit(1757449890.678:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5b9f67ebe9 code=0x7ffc0000 [ 58.012565][ T29] audit: type=1326 audit(1757449890.678:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b9f67ec23 code=0x7ffc0000 [ 58.037559][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.039963][ T29] audit: type=1326 audit(1757449890.688:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b9f67d69f code=0x7ffc0000 [ 58.083199][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.117184][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 58.164785][ T4283] loop2: detected capacity change from 0 to 1024 [ 58.172574][ T4283] EXT4-fs: Ignoring removed bh option [ 58.178029][ T4283] EXT4-fs: inline encryption not supported [ 58.188381][ T4283] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.199628][ T4283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 58.209296][ T4283] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.245: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.226066][ T4283] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.245: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.243005][ T4283] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.245: Failed to acquire dquot type 0 [ 58.254563][ T4283] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.269159][ T4283] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.245: mark_inode_dirty error [ 58.280659][ T4283] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.292036][ T4283] EXT4-fs (loop2): 1 orphan inode deleted [ 58.298200][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.318066][ T139] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.332593][ T139] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 58.344988][ T4283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.354488][ T4283] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.245: Invalid inode table block 1 in block_group 0 [ 58.367996][ T4283] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.377736][ T4283] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.245: mark_inode_dirty error [ 58.459187][ T4299] loop2: detected capacity change from 0 to 2048 [ 58.511680][ T4299] loop2: p1 < > p4 [ 58.516284][ T4299] loop2: p4 size 8388608 extends beyond EOD, truncated [ 58.595042][ T4304] loop0: detected capacity change from 0 to 2048 [ 58.626400][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.651063][ T4310] loop1: detected capacity change from 0 to 128 [ 58.712950][ T4310] bio_check_eod: 42647 callbacks suppressed [ 58.712964][ T4310] syz.1.251: attempt to access beyond end of device [ 58.712964][ T4310] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 58.755304][ T4315] loop2: detected capacity change from 0 to 164 [ 58.763454][ T4315] iso9660: Unknown parameter '@' [ 58.873776][ T4323] loop1: detected capacity change from 0 to 128 [ 58.937662][ T4326] loop2: detected capacity change from 0 to 256 [ 58.955198][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.959288][ T4328] loop1: detected capacity change from 0 to 1024 [ 58.975509][ T4328] EXT4-fs: Ignoring removed bh option [ 58.976966][ T4326] pim6reg: entered allmulticast mode [ 58.981061][ T4328] EXT4-fs: inline encryption not supported [ 58.993650][ T4328] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.995493][ T4326] pim6reg: left allmulticast mode [ 59.019399][ T4328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 59.030285][ T4328] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.259: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.052517][ T4328] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.259: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.067393][ T4328] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.259: Failed to acquire dquot type 0 [ 59.073849][ T4335] loop0: detected capacity change from 0 to 512 [ 59.087994][ T4328] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 59.098319][ T4328] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.259: mark_inode_dirty error [ 59.109691][ T4328] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 59.120275][ T4328] EXT4-fs (loop1): 1 orphan inode deleted [ 59.126564][ T4328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.132108][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 59.139208][ T37] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.162856][ T4335] ext4: Unknown parameter 'pcr' [ 59.168247][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 59.195764][ T4328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.205667][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 59.222999][ T4328] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.259: Invalid inode table block 1 in block_group 0 [ 59.235849][ T4328] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 59.246338][ T4328] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.259: mark_inode_dirty error [ 59.298344][ T4348] loop2: detected capacity change from 0 to 128 [ 59.318813][ T4348] syz.2.265: attempt to access beyond end of device [ 59.318813][ T4348] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 59.335664][ T4350] loop0: detected capacity change from 0 to 2048 [ 59.392018][ T3295] loop0: p1 < > p4 [ 59.396576][ T3295] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.419829][ T4350] loop0: p1 < > p4 [ 59.424759][ T4350] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.427589][ T4357] loop4: detected capacity change from 0 to 164 [ 59.447281][ T4357] iso9660: Unknown parameter '@' [ 59.685940][ T4370] loop3: detected capacity change from 0 to 128 [ 59.708587][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 59.834773][ T4375] lo speed is unknown, defaulting to 1000 [ 59.846183][ T4376] loop2: detected capacity change from 0 to 2048 [ 59.903148][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.066118][ T4390] loop0: detected capacity change from 0 to 1024 [ 60.075864][ T4390] EXT4-fs: Ignoring removed bh option [ 60.098251][ T4390] EXT4-fs: inline encryption not supported [ 60.106243][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.139002][ T4390] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.150497][ T4390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.159852][ T4390] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.277: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.182539][ T4390] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.277: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.205357][ T4390] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.277: Failed to acquire dquot type 0 [ 60.236989][ T4390] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 60.254677][ T4390] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.277: mark_inode_dirty error [ 60.266032][ T4390] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 60.277087][ T4390] EXT4-fs (loop0): 1 orphan inode deleted [ 60.283378][ T4390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.296055][ T1388] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.311020][ T1388] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 60.324549][ T4390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.334066][ T4390] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.277: Invalid inode table block 1 in block_group 0 [ 60.348023][ T4390] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 60.357910][ T4390] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.277: mark_inode_dirty error [ 60.428402][ T4411] loop3: detected capacity change from 0 to 164 [ 60.435343][ T4411] iso9660: Unknown parameter '@' [ 60.446363][ T4408] loop4: detected capacity change from 0 to 128 [ 60.488160][ T4408] syz.4.278: attempt to access beyond end of device [ 60.488160][ T4408] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 60.528739][ T4417] bridge_slave_0: left allmulticast mode [ 60.534498][ T4417] bridge_slave_0: left promiscuous mode [ 60.540214][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.551039][ T4417] bridge_slave_1: left allmulticast mode [ 60.556871][ T4417] bridge_slave_1: left promiscuous mode [ 60.562592][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.592099][ T4424] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 60.599949][ T4424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.285'. [ 60.613332][ T4417] bond0: (slave bond_slave_0): Releasing backup interface [ 60.621248][ T4417] bond0: (slave bond_slave_1): Releasing backup interface [ 60.629272][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.641153][ T4424] veth1_vlan: left promiscuous mode [ 60.647400][ T4424] batman_adv: batadv0: Adding interface: veth1_vlan [ 60.654081][ T4424] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.681360][ T4424] batman_adv: batadv0: Interface activated: veth1_vlan [ 60.711157][ T4421] syzkaller0: entered promiscuous mode [ 60.716725][ T4421] syzkaller0: entered allmulticast mode [ 60.906449][ T4437] loop4: detected capacity change from 0 to 512 [ 60.913373][ T4437] EXT4-fs: Ignoring removed nobh option [ 60.919401][ T4437] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 60.935281][ T4437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.955112][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.290: bad orphan inode 15 [ 60.976737][ T4437] ext4_test_bit(bit=14, block=18) = 1 [ 60.982205][ T4437] is_bad_inode(inode)=0 [ 60.986474][ T4437] NEXT_ORPHAN(inode)=1023 [ 60.990813][ T4437] max_ino=32 [ 60.994047][ T4437] i_nlink=0 [ 61.028049][ T4437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.290: bg 0: block 161: padding at end of block bitmap is not set [ 61.044363][ T4437] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 61.057117][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.125338][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.208157][ T4441] loop0: detected capacity change from 0 to 4096 [ 61.222596][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.254111][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.319350][ T4449] loop2: detected capacity change from 0 to 512 [ 61.326841][ T4449] journal_path: Lookup failure for './file0/../file0' [ 61.333665][ T4449] EXT4-fs: error: could not find journal device path [ 62.016900][ T4460] loop1: detected capacity change from 0 to 164 [ 62.023660][ T4460] iso9660: Unknown parameter '@' [ 62.062341][ T4454] loop4: detected capacity change from 0 to 1024 [ 62.070378][ T4456] SELinux: ebitmap: truncated map [ 62.080541][ T4456] SELinux: failed to load policy [ 62.090885][ T4454] EXT4-fs: Ignoring removed bh option [ 62.121596][ T4454] EXT4-fs: inline encryption not supported [ 62.143316][ T4454] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.177729][ T4454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 62.207234][ T4454] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.296: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.223022][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 62.229552][ T4454] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.296: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.251976][ T4454] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.296: Failed to acquire dquot type 0 [ 62.278513][ T4454] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 62.290804][ T4454] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.296: mark_inode_dirty error [ 62.304850][ T4454] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 62.327398][ T4454] EXT4-fs (loop4): 1 orphan inode deleted [ 62.348823][ T4454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.361717][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.376816][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 62.413019][ T4454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.422964][ T4482] loop2: detected capacity change from 0 to 4096 [ 62.431679][ T4454] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.296: Invalid inode table block 1 in block_group 0 [ 62.460935][ T4482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.481441][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 62.496739][ T4454] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 62.516045][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.527443][ T4454] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.296: mark_inode_dirty error [ 62.546873][ T4496] loop3: detected capacity change from 0 to 2048 [ 62.630038][ T4503] tipc: Enabled bearer , priority 0 [ 62.638569][ T4503] syzkaller0: entered promiscuous mode [ 62.644154][ T4503] syzkaller0: entered allmulticast mode [ 62.654481][ T4496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 62.710539][ T4503] tipc: Resetting bearer [ 62.718262][ T4501] tipc: Resetting bearer [ 62.726333][ T4501] tipc: Disabling bearer [ 62.801270][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 62.801329][ T29] audit: type=1400 audit(1757449895.568:1396): avc: denied { append } for pid=4491 comm="syz.3.312" path="/74/file2/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.910724][ T4499] Set syz1 is full, maxelem 65536 reached [ 62.987565][ T4512] SELinux: ebitmap: truncated map [ 63.016317][ T4508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.132327][ T4512] SELinux: failed to load policy [ 63.207581][ T4508] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1960 with error 28 [ 63.220116][ T4508] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.220116][ T4508] [ 63.229836][ T4508] EXT4-fs (loop3): Total free blocks count 0 [ 63.235837][ T4508] EXT4-fs (loop3): Free/Dirty block details [ 63.241745][ T4508] EXT4-fs (loop3): free_blocks=2415919104 [ 63.247487][ T4508] EXT4-fs (loop3): dirty_blocks=1968 [ 63.252831][ T4508] EXT4-fs (loop3): Block reservation details [ 63.258826][ T4508] EXT4-fs (loop3): i_reserved_data_blocks=123 [ 63.386632][ T4511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 63.393188][ T4511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.400785][ T4511] vhci_hcd vhci_hcd.0: Device attached [ 63.464633][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 63.573649][ T29] audit: type=1400 audit(1757449896.328:1397): avc: denied { create } for pid=4519 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.594452][ T29] audit: type=1400 audit(1757449896.328:1398): avc: denied { listen } for pid=4519 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.651310][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 63.651554][ T29] audit: type=1400 audit(1757449896.388:1399): avc: denied { accept } for pid=4519 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.683244][ T4513] vhci_hcd: cannot find the pending unlink 2869 [ 63.687160][ T29] audit: type=1400 audit(1757449896.448:1400): avc: denied { write } for pid=4519 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.703521][ T4528] syzkaller0: entered promiscuous mode [ 63.715070][ T4528] syzkaller0: entered allmulticast mode [ 63.736232][ T4513] vhci_hcd: connection reset by peer [ 63.747373][ T1388] vhci_hcd: stop threads [ 63.751703][ T1388] vhci_hcd: release socket [ 63.756144][ T1388] vhci_hcd: disconnect device [ 63.762774][ T4525] infiniband syz!: set active [ 63.767477][ T4525] infiniband syz!: added team_slave_0 [ 63.784793][ T4525] RDS/IB: syz!: added [ 63.789028][ T4525] smc: adding ib device syz! with port count 1 [ 63.795443][ T4525] smc: ib device syz! port 1 has pnetid [ 63.888936][ T4537] tipc: Started in network mode [ 63.893886][ T4537] tipc: Node identity 1ebddd9c7b1d, cluster identity 4711 [ 63.901057][ T4537] tipc: Enabled bearer , priority 0 [ 63.909946][ T4537] syzkaller0: entered promiscuous mode [ 63.915497][ T4537] syzkaller0: entered allmulticast mode [ 63.935604][ T4537] tipc: Resetting bearer [ 63.943011][ T4536] tipc: Resetting bearer [ 63.957483][ T4536] tipc: Disabling bearer [ 64.293999][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.301168][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.340641][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 64.359300][ T4547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 64.375935][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.413185][ T4550] loop1: detected capacity change from 0 to 2048 [ 64.431436][ T4554] loop4: detected capacity change from 0 to 128 [ 64.464117][ T1388] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.499260][ T1388] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.519684][ T1388] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.536872][ T4560] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 64.561438][ T31] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.575298][ T29] audit: type=1400 audit(1757449897.338:1401): avc: denied { create } for pid=4561 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.595017][ T29] audit: type=1400 audit(1757449897.338:1402): avc: denied { write } for pid=4561 comm="syz.0.334" path="socket:[8367]" dev="sockfs" ino=8367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.630060][ T29] audit: type=1400 audit(1757449897.398:1403): avc: denied { setopt } for pid=4561 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.651777][ T4562] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 64.659637][ T4562] netlink: 55 bytes leftover after parsing attributes in process `syz.0.334'. [ 64.683924][ T4560] loop2: detected capacity change from 0 to 2048 [ 64.691016][ T4560] EXT4-fs: Ignoring removed bh option [ 64.746764][ T4560] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.762259][ T4560] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 64.774892][ T4560] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.774892][ T4560] [ 64.784772][ T4560] EXT4-fs (loop2): Total free blocks count 0 [ 64.791052][ T4560] EXT4-fs (loop2): Free/Dirty block details [ 64.797164][ T4560] EXT4-fs (loop2): free_blocks=2415919104 [ 64.803080][ T4560] EXT4-fs (loop2): dirty_blocks=64 [ 64.808431][ T4560] EXT4-fs (loop2): Block reservation details [ 64.814622][ T4560] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 64.895505][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.907969][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.907969][ T12] [ 64.973069][ T4558] Set syz1 is full, maxelem 65536 reached [ 65.007267][ T29] audit: type=1400 audit(1757449897.778:1404): avc: denied { create } for pid=4568 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.030512][ T29] audit: type=1400 audit(1757449897.798:1405): avc: denied { bind } for pid=4568 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.059091][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 65.078639][ T4574] siw: device registration error -23 [ 65.118588][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 65.158002][ T4579] loop4: detected capacity change from 0 to 1024 [ 65.165265][ T4579] EXT4-fs: Ignoring removed bh option [ 65.170794][ T4579] EXT4-fs: inline encryption not supported [ 65.177693][ T4579] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.192422][ T4579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 65.202241][ T4579] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.341: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.216884][ T4579] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.341: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.231547][ T4579] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.341: Failed to acquire dquot type 0 [ 65.242878][ T4579] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 65.252613][ T4579] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.341: mark_inode_dirty error [ 65.264019][ T4579] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 65.274237][ T4579] EXT4-fs (loop4): 1 orphan inode deleted [ 65.280739][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.295577][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 65.308521][ T4579] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.341: Invalid inode table block 1 in block_group 0 [ 65.321613][ T4579] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 65.331295][ T4579] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.341: mark_inode_dirty error [ 65.369021][ T4587] netlink: 100 bytes leftover after parsing attributes in process `syz.1.353'. [ 65.388034][ T4590] loop2: detected capacity change from 0 to 512 [ 65.395174][ T4590] EXT4-fs: Ignoring removed nobh option [ 65.407856][ T4590] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.344: iget: bad i_size value: 38620345925642 [ 65.431927][ T4590] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.344: couldn't read orphan inode 15 (err -117) [ 65.452104][ T4594] loop1: detected capacity change from 0 to 2048 [ 65.512560][ T3295] loop1: p1 < > p4 [ 65.516822][ T3295] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.524508][ T4595] EXT4-fs (loop2): shut down requested (0) [ 65.534286][ T4594] loop1: p1 < > p4 [ 65.541360][ T4594] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.584659][ T4597] tipc: Started in network mode [ 65.589565][ T4597] tipc: Node identity 7aed67ac1548, cluster identity 4711 [ 65.596848][ T4597] tipc: Enabled bearer , priority 0 [ 65.604920][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 65.612362][ T4597] syzkaller0: entered promiscuous mode [ 65.617370][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 65.620171][ T4597] syzkaller0: entered allmulticast mode [ 65.638976][ T4597] tipc: Resetting bearer [ 65.670126][ T4596] tipc: Resetting bearer [ 65.678063][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 65.690496][ T4596] tipc: Disabling bearer [ 65.902977][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 65.937984][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 65.950517][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.950517][ T12] [ 65.960187][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 65.966208][ T12] EXT4-fs (loop2): Free/Dirty block details [ 65.972219][ T12] EXT4-fs (loop2): free_blocks=0 [ 65.977165][ T12] EXT4-fs (loop2): dirty_blocks=16004 [ 65.982613][ T12] EXT4-fs (loop2): Block reservation details [ 65.988676][ T12] EXT4-fs (loop2): i_reserved_data_blocks=16004 [ 66.007240][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 66.031180][ T4605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4605 comm=syz.3.349 [ 66.059572][ T4603] loop1: detected capacity change from 0 to 512 [ 66.089135][ T4603] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.210496][ T4611] SELinux: ebitmap: truncated map [ 66.216903][ T4611] SELinux: failed to load policy [ 66.250986][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 66.272357][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 66.325566][ T4619] netlink: 'syz.4.356': attribute type 13 has an invalid length. [ 66.333369][ T4619] netlink: 'syz.4.356': attribute type 17 has an invalid length. [ 66.385206][ T4621] loop3: detected capacity change from 0 to 1024 [ 66.400400][ T4621] EXT4-fs: Ignoring removed bh option [ 66.400498][ T4621] EXT4-fs: inline encryption not supported [ 66.411990][ T4619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.429258][ T4621] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.447204][ T4621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 66.457187][ T4613] netlink: zone id is out of range [ 66.457371][ T4621] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.358: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.462368][ T4613] netlink: zone id is out of range [ 66.481790][ T4621] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.358: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.496859][ T4621] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.358: Failed to acquire dquot type 0 [ 66.509259][ T4621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 66.520526][ T4621] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.358: mark_inode_dirty error [ 66.532490][ T4621] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 66.543698][ T4621] EXT4-fs (loop3): 1 orphan inode deleted [ 66.553743][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.571506][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 66.585250][ T4621] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.358: Invalid inode table block 1 in block_group 0 [ 66.604065][ T4621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 66.613937][ T4621] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz.3.358: mark_inode_dirty error [ 66.728122][ T4636] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 66.796097][ T4638] loop3: detected capacity change from 0 to 8192 [ 67.149617][ T4645] loop0: detected capacity change from 0 to 512 [ 67.200182][ T4645] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.209135][ T4645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.230494][ T4645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 67.248369][ T4645] System zones: 1-12 [ 67.253260][ T4645] EXT4-fs (loop0): 1 truncate cleaned up [ 67.260127][ T4649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.315303][ T4649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.394972][ T4649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.432797][ T4649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.542996][ T4655] loop3: detected capacity change from 0 to 128 [ 67.595719][ T4645] ================================================================== [ 67.603850][ T4645] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 67.611962][ T4645] [ 67.614302][ T4645] write to 0xffff88811b4bea68 of 8 bytes by task 4653 on cpu 1: [ 67.621948][ T4645] filemap_splice_read+0x4f4/0x740 [ 67.627085][ T4645] ext4_file_splice_read+0x8f/0xb0 [ 67.632219][ T4645] splice_direct_to_actor+0x26c/0x680 [ 67.637611][ T4645] do_splice_direct+0xda/0x150 [ 67.642382][ T4645] do_sendfile+0x380/0x650 [ 67.647022][ T4645] __x64_sys_sendfile64+0x105/0x150 [ 67.652250][ T4645] x64_sys_call+0x2bb0/0x2ff0 [ 67.656967][ T4645] do_syscall_64+0xd2/0x200 [ 67.661517][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.667426][ T4645] [ 67.669762][ T4645] write to 0xffff88811b4bea68 of 8 bytes by task 4645 on cpu 0: [ 67.677396][ T4645] filemap_splice_read+0x4f4/0x740 [ 67.682526][ T4645] ext4_file_splice_read+0x8f/0xb0 [ 67.687667][ T4645] splice_direct_to_actor+0x26c/0x680 [ 67.693052][ T4645] do_splice_direct+0xda/0x150 [ 67.697832][ T4645] do_sendfile+0x380/0x650 [ 67.702283][ T4645] __x64_sys_sendfile64+0x105/0x150 [ 67.707514][ T4645] x64_sys_call+0x2bb0/0x2ff0 [ 67.712230][ T4645] do_syscall_64+0xd2/0x200 [ 67.716797][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.722884][ T4645] [ 67.725314][ T4645] value changed: 0x000000000000429a -> 0x00000000000042d1 [ 67.732438][ T4645] [ 67.734785][ T4645] Reported by Kernel Concurrency Sanitizer on: [ 67.740963][ T4645] CPU: 0 UID: 0 PID: 4645 Comm: syz.0.364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.750608][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.760668][ T4645] ================================================================== [ 67.771856][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788814][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 67.802320][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.814458][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.824051][ T3463] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.845631][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 67.872173][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 67.872189][ T29] audit: type=1326 audit(1757449900.638:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 67.901745][ T29] audit: type=1326 audit(1757449900.638:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dc61ebe9 code=0x7ffc0000 [ 68.701298][ T36] usb 1-1: enqueue for inactive port 0 [ 68.706785][ T36] usb 1-1: enqueue for inactive port 0 [ 68.781318][ T36] vhci_hcd: vhci_device speed not set