last executing test programs: 1m9.617121477s ago: executing program 1 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m8.7633993s ago: executing program 1 (id=219): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 1m8.655678632s ago: executing program 1 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m8.625871792s ago: executing program 1 (id=224): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) close(0xffffffffffffffff) 1m8.318774527s ago: executing program 1 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1m8.11070994s ago: executing program 1 (id=238): socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m8.11052909s ago: executing program 32 (id=238): socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 31.110330372s ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_init1(0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 30.434068143s ago: executing program 3 (id=830): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0x2, 0x0, &(0x7f00000003c0)={0x2, 0x10}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 30.376368344s ago: executing program 3 (id=823): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') getdents(r3, &(0x7f0000001f80)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) close(r2) 30.314128705s ago: executing program 3 (id=825): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) close(0xffffffffffffffff) 30.103680138s ago: executing program 3 (id=828): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x2c8, 0x1a0, 0x0, 0xd0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 29.808352053s ago: executing program 3 (id=831): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000180)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d63703836312c726f6469722c696f636861727365743d6d6163726f6d616e2c757466383d31481f6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c666c7573682c6e6f6e75060061696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c757466303d302c00"], 0x7f, 0x350, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 29.808118123s ago: executing program 5 (id=832): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 29.797230383s ago: executing program 33 (id=831): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000180)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d63703836312c726f6469722c696f636861727365743d6d6163726f6d616e2c757466383d31481f6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c666c7573682c6e6f6e75060061696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c757466303d302c00"], 0x7f, 0x350, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 29.547437167s ago: executing program 5 (id=837): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 29.4002091s ago: executing program 5 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 29.037335316s ago: executing program 5 (id=844): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) close(0xffffffffffffffff) 28.824728289s ago: executing program 5 (id=846): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 28.611571902s ago: executing program 5 (id=848): socket$kcm(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x78bd, 0x0, 0x0, 0x800000c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 28.564381663s ago: executing program 34 (id=848): socket$kcm(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x78bd, 0x0, 0x0, 0x800000c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 10.232615397s ago: executing program 6 (id=1115): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 7.51717759s ago: executing program 6 (id=1183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 7.304672804s ago: executing program 6 (id=1190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.284662804s ago: executing program 6 (id=1191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r1, &(0x7f00000003c0)='(', 0x1) 6.90875832s ago: executing program 6 (id=1192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) flock(r2, 0x2) dup3(r2, r1, 0x0) 6.578470175s ago: executing program 6 (id=1196): r0 = openat(0xffffffffffffff9c, 0x0, 0x1c9040, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) rmdir(&(0x7f0000000440)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 6.558118346s ago: executing program 35 (id=1196): r0 = openat(0xffffffffffffff9c, 0x0, 0x1c9040, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) rmdir(&(0x7f0000000440)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 3.77875496s ago: executing program 0 (id=1249): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.342463807s ago: executing program 0 (id=1262): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) 2.783600246s ago: executing program 7 (id=1260): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @local, @private=0x10000}}}}) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 2.583881519s ago: executing program 7 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023", @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0, 0x0, 0x7fffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) sync() sync() fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 2.476673421s ago: executing program 0 (id=1270): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4889, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x90) 2.257332064s ago: executing program 2 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.051706048s ago: executing program 2 (id=1281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2.007172878s ago: executing program 2 (id=1282): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x3, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x3, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) eventfd(0x7ff) 1.999306208s ago: executing program 0 (id=1284): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.88423828s ago: executing program 2 (id=1287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.843892181s ago: executing program 0 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1.721954713s ago: executing program 0 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 1.714770413s ago: executing program 7 (id=1292): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, 0x0) 1.418632518s ago: executing program 8 (id=1299): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.179209072s ago: executing program 8 (id=1303): openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x40002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x58, [{}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 839.643117ms ago: executing program 7 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 839.395737ms ago: executing program 2 (id=1305): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_script(r1, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 839.241247ms ago: executing program 8 (id=1306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 839.069197ms ago: executing program 4 (id=1307): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 545.932802ms ago: executing program 8 (id=1308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x310) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 545.572112ms ago: executing program 4 (id=1309): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 503.309172ms ago: executing program 2 (id=1310): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 478.474602ms ago: executing program 7 (id=1311): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 376.278664ms ago: executing program 4 (id=1312): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 270.907876ms ago: executing program 8 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, 0x0) fcntl$setpipe(r1, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 270.679496ms ago: executing program 4 (id=1314): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 155.982888ms ago: executing program 7 (id=1315): timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioperm(0x21, 0xfffffffffffffffd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) 106.995009ms ago: executing program 4 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 73.165399ms ago: executing program 8 (id=1317): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) kernel console output (not intermixed with test programs): 061] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.840661][ T5065] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.883206][ T5065] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 67.004341][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.319709][ T5078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 67.426736][ T5078] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.435289][ T5078] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.443650][ T5078] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.451989][ T5078] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.470734][ T5078] vxlan0: entered promiscuous mode [ 67.723052][ T5095] loop0: detected capacity change from 0 to 2048 [ 67.730166][ T5101] netlink: 'syz.5.468': attribute type 1 has an invalid length. [ 67.748035][ T5101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.777488][ T5099] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.811088][ T5095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.836387][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 67.865619][ T5101] bond1: (slave batadv1): making interface the new active one [ 67.888033][ T5101] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 67.899174][ T5099] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.907212][ T5095] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.951289][ T5095] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28 [ 67.963837][ T5095] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.963837][ T5095] [ 67.973637][ T5095] EXT4-fs (loop0): Total free blocks count 0 [ 67.979674][ T5095] EXT4-fs (loop0): Free/Dirty block details [ 67.985695][ T5095] EXT4-fs (loop0): free_blocks=2415919104 [ 67.991489][ T5095] EXT4-fs (loop0): dirty_blocks=288 [ 67.996773][ T5095] EXT4-fs (loop0): Block reservation details [ 68.003142][ T5095] EXT4-fs (loop0): i_reserved_data_blocks=18 [ 68.010304][ T5099] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.045097][ T5110] loop5: detected capacity change from 0 to 256 [ 68.054737][ T5110] vfat: Bad value for 'utf8' [ 68.063104][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.469'. [ 68.077336][ T5099] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.098434][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.121447][ T5112] loop4: detected capacity change from 0 to 512 [ 68.145221][ T5114] loop5: detected capacity change from 0 to 128 [ 68.159997][ T5099] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.187281][ T5112] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 68.218432][ T5099] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.247740][ T5099] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271286][ T5099] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.382353][ T5131] netlink: 'syz.2.480': attribute type 12 has an invalid length. [ 68.516275][ T5140] lo speed is unknown, defaulting to 1000 [ 68.527920][ T5153] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 68.536907][ T5153] ref_ctr increment failed for inode: 0x36 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888109a43180 [ 68.597643][ T5158] loop4: detected capacity change from 0 to 2048 [ 68.645499][ T5158] loop4: p1 < > p4 [ 68.658851][ T5158] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.710272][ T2998] loop4: p1 < > p4 [ 68.716039][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.764428][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 68.798719][ T5168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.493'. [ 68.815339][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 68.831079][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.943583][ T5176] loop4: detected capacity change from 0 to 512 [ 68.997440][ T5177] loop3: detected capacity change from 0 to 1024 [ 69.007043][ T5176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.025675][ T5177] EXT4-fs: Ignoring removed orlov option [ 69.032387][ T5176] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.050698][ T5177] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 69.088252][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.108271][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.135015][ T5177] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.497: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 69.155778][ T29] kauditd_printk_skb: 2861 callbacks suppressed [ 69.155794][ T29] audit: type=1400 audit(1753244987.714:12165): avc: denied { link } for pid=5175 comm="syz.3.497" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.249321][ T4733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.300258][ T5189] netlink: 'syz.3.499': attribute type 1 has an invalid length. [ 69.318785][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 69.327719][ T29] audit: type=1400 audit(1753244987.894:12166): avc: denied { ioctl } for pid=5190 comm="syz.4.500" path="socket:[11366]" dev="sockfs" ino=11366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.364303][ T5191] batadv0 (unregistering): left allmulticast mode [ 69.370884][ T5191] batadv0 (unregistering): left promiscuous mode [ 69.377317][ T5191] bridge0: port 1(batadv0) entered disabled state [ 69.405887][ T5195] loop5: detected capacity change from 0 to 128 [ 69.421811][ T5195] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.435985][ T5195] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.456617][ T29] audit: type=1400 audit(1753244988.034:12167): avc: denied { ioctl } for pid=5194 comm="syz.5.502" path="/48/mnt/cpuset.memory_pressure_enabled" dev="loop5" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.495521][ T4103] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.554795][ T29] audit: type=1400 audit(1753244988.134:12168): avc: denied { create } for pid=5199 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.606189][ T29] audit: type=1400 audit(1753244988.154:12169): avc: denied { connect } for pid=5199 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.626880][ T5193] xt_CT: No such helper "pptp" [ 69.657860][ T29] audit: type=1400 audit(1753244988.234:12170): avc: denied { create } for pid=5200 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.677888][ T29] audit: type=1400 audit(1753244988.234:12171): avc: denied { connect } for pid=5200 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.697980][ T29] audit: type=1400 audit(1753244988.234:12172): avc: denied { write } for pid=5200 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.750848][ T29] audit: type=1400 audit(1753244988.304:12173): avc: denied { create } for pid=5209 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 69.772007][ T29] audit: type=1400 audit(1753244988.304:12174): avc: denied { write } for pid=5209 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 70.447522][ T5236] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.504676][ T5236] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.543480][ T5236] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.593777][ T5236] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.655192][ T5247] loop4: detected capacity change from 0 to 2048 [ 70.661183][ T5236] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.676153][ T5236] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.697052][ T5247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.702137][ T5236] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.729557][ T5236] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.788792][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.797613][ T5257] lo speed is unknown, defaulting to 1000 [ 70.831658][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.885139][ T5255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.986210][ T5261] loop5: detected capacity change from 0 to 1024 [ 71.003403][ T5261] EXT4-fs: Ignoring removed oldalloc option [ 71.009505][ T5261] EXT4-fs: Ignoring removed bh option [ 71.043266][ T5261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.082532][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 71.343505][ T5265] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.528: Allocating blocks 1-17 which overlap fs metadata [ 71.358152][ T5261] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.528: Allocating blocks 1-17 which overlap fs metadata [ 71.563121][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.592299][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.628880][ T5289] netlink: 5 bytes leftover after parsing attributes in process `syz.0.538'. [ 71.664463][ T5289] 0ªX¹¦D: renamed from gretap0 (while UP) [ 71.672098][ T5292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5292 comm=syz.4.537 [ 71.684611][ T5292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5292 comm=syz.4.537 [ 71.715143][ T5289] 0ªX¹¦D: entered allmulticast mode [ 71.721156][ T5289] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 72.014785][ T5313] lo speed is unknown, defaulting to 1000 [ 72.095898][ T5316] loop5: detected capacity change from 0 to 2048 [ 72.140027][ T5316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.333046][ T5323] sch_fq: defrate 0 ignored. [ 72.337977][ T5325] loop3: detected capacity change from 0 to 164 [ 72.421602][ T5329] loop4: detected capacity change from 0 to 128 [ 72.478564][ T5331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.564186][ T5331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.597659][ T5334] loop4: detected capacity change from 0 to 2048 [ 72.623545][ T5331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.661454][ T5334] loop4: p1 < > p4 [ 72.674058][ T5331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.688431][ T5334] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.758884][ T5331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.770949][ T5331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.783594][ T5331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.798575][ T2998] loop4: p1 < > p4 [ 72.803260][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.815127][ T5331] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907680][ T3702] udevd[3702]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 72.927449][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.963633][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 73.073705][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 73.118866][ T5351] vlan2: entered allmulticast mode [ 73.124142][ T5351] veth0_vlan: entered allmulticast mode [ 73.133233][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.308495][ T5357] netlink: 277 bytes leftover after parsing attributes in process `syz.0.564'. [ 74.279980][ T5392] netlink: 3 bytes leftover after parsing attributes in process `syz.3.579'. [ 74.311330][ T5392] 0ªX¹¦À: renamed from caif0 [ 74.372736][ T5392] 0ªX¹¦À: entered allmulticast mode [ 74.379037][ T5392] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.883107][ T5420] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 74.897205][ T5420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.911709][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 74.928930][ T5420] vlan3: entered promiscuous mode [ 74.934111][ T5420] bond1: entered promiscuous mode [ 74.960798][ T5420] dummy0: entered promiscuous mode [ 74.972042][ T5420] bond0: (slave dummy0): Releasing backup interface [ 74.983438][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 74.983457][ T29] audit: type=1400 audit(1753244993.564:12385): avc: denied { watch } for pid=5425 comm="syz.4.592" path="/file0" dev="ramfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.012150][ T29] audit: type=1400 audit(1753244993.564:12386): avc: denied { execute } for pid=5425 comm="syz.4.592" name="file0" dev="ramfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.017612][ T5420] bond1: (slave dummy0): making interface the new active one [ 75.034284][ T29] audit: type=1400 audit(1753244993.564:12387): avc: denied { execute_no_trans } for pid=5425 comm="syz.4.592" path="/file0" dev="ramfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.076843][ T5420] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.164389][ T29] audit: type=1400 audit(1753244993.744:12388): avc: denied { wake_alarm } for pid=5434 comm="syz.4.597" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.196514][ T29] audit: type=1326 audit(1753244993.774:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 75.220143][ T29] audit: type=1326 audit(1753244993.774:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 75.243634][ T29] audit: type=1326 audit(1753244993.774:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f635491d310 code=0x7ffc0000 [ 75.267121][ T29] audit: type=1326 audit(1753244993.774:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 75.269221][ T5444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.596'. [ 75.290643][ T29] audit: type=1326 audit(1753244993.774:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63549208c7 code=0x7ffc0000 [ 75.290709][ T29] audit: type=1326 audit(1753244993.774:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 75.304529][ T5444] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.355359][ T5444] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.363670][ T5444] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.371933][ T5444] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.413448][ T5444] vxlan0: entered promiscuous mode [ 75.471464][ T5456] bridge: RTM_NEWNEIGH with invalid ether address [ 75.614684][ T5468] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 75.648362][ T5466] syzkaller0: entered promiscuous mode [ 75.653948][ T5466] syzkaller0: entered allmulticast mode [ 75.677745][ T5470] loop0: detected capacity change from 0 to 512 [ 75.700188][ T5470] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 75.717870][ T5470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 75.726529][ T5470] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.611: corrupted in-inode xattr: e_value size too large [ 75.741153][ T5470] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.611: couldn't read orphan inode 15 (err -117) [ 75.753688][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.804082][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.844714][ T5480] random: crng reseeded on system resumption [ 75.857376][ T5480] Restarting kernel threads ... [ 75.865689][ T5480] Done restarting kernel threads. [ 75.872327][ T5484] 9pnet: p9_errstr2errno: server reported unknown error [ 75.920814][ T5488] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.969795][ T5490] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 75.977748][ T5490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.619'. [ 75.993353][ T5488] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.008685][ T5490] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 76.018919][ T5490] team0: Failed to send options change via netlink (err -105) [ 76.026747][ T5490] team0: Port device geneve1 added [ 76.068160][ T5488] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.122093][ T5488] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.135079][ T5498] loop0: detected capacity change from 0 to 128 [ 76.295293][ T5492] syz.0.617: attempt to access beyond end of device [ 76.295293][ T5492] loop0: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 76.309772][ T5492] syz.0.617: attempt to access beyond end of device [ 76.309772][ T5492] loop0: rw=524288, sector=609, nr_sectors = 256 limit=128 [ 76.325238][ T5492] syz.0.617: attempt to access beyond end of device [ 76.325238][ T5492] loop0: rw=0, sector=353, nr_sectors = 8 limit=128 [ 76.338629][ T5492] syz.0.617: attempt to access beyond end of device [ 76.338629][ T5492] loop0: rw=0, sector=353, nr_sectors = 8 limit=128 [ 76.369715][ T5502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'. [ 76.490625][ T5509] sch_fq: defrate 0 ignored. [ 76.596254][ T5521] unsupported nla_type 52263 [ 76.614541][ T5521] 0ªX¹¦D: left allmulticast mode [ 76.635816][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.643119][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.682548][ T5521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.692882][ T5521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.716806][ T5521] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.725766][ T5521] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.734309][ T5521] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.742787][ T5521] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.754283][ T5521] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.762907][ T5521] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.771531][ T5521] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.779958][ T5521] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.788607][ T5521] vxlan0: left promiscuous mode [ 76.801302][ T5488] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.814035][ T5488] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.827367][ T5488] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.839755][ T5488] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.919870][ T5523] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.990266][ T5523] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.015515][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.636'. [ 77.057422][ T5523] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.122224][ T5523] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.211696][ T5523] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.255764][ T5523] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.296083][ T5523] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.308866][ T5523] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.318569][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 77.489668][ T5565] netlink: 'syz.3.651': attribute type 7 has an invalid length. [ 77.497558][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 77.633768][ T5572] lo speed is unknown, defaulting to 1000 [ 77.641271][ T5573] loop0: detected capacity change from 0 to 1024 [ 77.665434][ T5573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.737805][ T5573] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.655: Allocating blocks 385-513 which overlap fs metadata [ 77.799949][ T5573] EXT4-fs (loop0): pa ffff888106a43620: logic 16, phys. 129, len 24 [ 77.808214][ T5573] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 77.831358][ T5587] loop5: detected capacity change from 0 to 2048 [ 77.863824][ T5587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.887640][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.976147][ T5594] : renamed from bond0 [ 78.034917][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.207833][ T5614] xt_CT: No such helper "pptp" [ 78.335845][ T5626] pim6reg1: entered promiscuous mode [ 78.341285][ T5626] pim6reg1: entered allmulticast mode [ 78.984739][ T5652] loop3: detected capacity change from 0 to 512 [ 79.013593][ T5652] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.022807][ T5654] netlink: 'syz.5.686': attribute type 27 has an invalid length. [ 79.048594][ T5652] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.091631][ T5652] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.684: corrupted inode contents [ 79.104246][ T5652] EXT4-fs (loop3): Remounting filesystem read-only [ 79.112215][ T5652] EXT4-fs (loop3): 1 truncate cleaned up [ 79.118050][ T4852] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.129003][ T4852] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.142460][ T4852] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.146564][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.160089][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.168055][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.197526][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 79.211296][ T4733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.268796][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.284156][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.375947][ T5654] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.384607][ T5654] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.393172][ T5654] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.401591][ T5654] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.413457][ T5654] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.422256][ T5654] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.430954][ T5654] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.439369][ T5654] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.450232][ T5654] vxlan0: left promiscuous mode [ 79.457582][ T5660] veth0: entered promiscuous mode [ 79.576378][ T5683] loop0: detected capacity change from 0 to 128 [ 79.603077][ T5690] netlink: 'syz.5.696': attribute type 1 has an invalid length. [ 79.612985][ T5683] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 79.639654][ T5690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.677941][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.696'. [ 79.704673][ T5693] program syz.0.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.760055][ T5697] loop4: detected capacity change from 0 to 512 [ 79.829506][ T2998] udevd[2998]: worker [3294] terminated by signal 33 (Unknown signal 33) [ 79.838695][ T5697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.861845][ T5697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.700: bg 0: block 248: padding at end of block bitmap is not set [ 79.876734][ T2998] udevd[2998]: worker [3294] failed while handling '/devices/virtual/block/loop4' [ 79.885212][ T5690] bond2 (unregistering): Released all slaves [ 79.902752][ T5697] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.700: Failed to acquire dquot type 1 [ 79.906115][ T5707] loop0: detected capacity change from 0 to 512 [ 79.917182][ T5697] EXT4-fs (loop4): 1 truncate cleaned up [ 79.921045][ T5707] EXT4-fs: Ignoring removed nobh option [ 79.926348][ T5695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.698'. [ 79.943021][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.957714][ T5707] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.703: iget: bad i_size value: 38620345925642 [ 79.979535][ T5707] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.703: couldn't read orphan inode 15 (err -117) [ 79.995172][ T5707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.011489][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 80.020971][ T5710] IPVS: Error joining to the multicast group [ 80.022017][ T5697] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 80.040574][ T5697] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 80.102039][ T5707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.703: bg 0: block 5: invalid block bitmap [ 80.112014][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 80.112040][ T29] audit: type=1400 audit(1753244998.684:12520): avc: denied { ioctl } for pid=5716 comm="syz.2.708" path="socket:[14340]" dev="sockfs" ino=14340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.152844][ T5697] syz.4.700 (5697) used greatest stack depth: 9304 bytes left [ 80.161339][ T5707] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 80.162649][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.173775][ T5707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.173775][ T5707] [ 80.192692][ T5707] EXT4-fs (loop0): Total free blocks count 0 [ 80.198742][ T5707] EXT4-fs (loop0): Free/Dirty block details [ 80.204720][ T5707] EXT4-fs (loop0): free_blocks=0 [ 80.209792][ T5707] EXT4-fs (loop0): dirty_blocks=1 [ 80.215039][ T5707] EXT4-fs (loop0): Block reservation details [ 80.221106][ T5707] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 80.231064][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.707'. [ 80.286531][ T29] audit: type=1326 audit(1753244998.864:12521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.297607][ T5726] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 80.310010][ T29] audit: type=1326 audit(1753244998.864:12522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.310045][ T29] audit: type=1326 audit(1753244998.864:12523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.366461][ T29] audit: type=1326 audit(1753244998.864:12524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.389921][ T29] audit: type=1326 audit(1753244998.864:12525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.414140][ T29] audit: type=1326 audit(1753244998.954:12526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 80.420280][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.713'. [ 80.437717][ T29] audit: type=1326 audit(1753244998.974:12527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.5.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb839e9a9 code=0x7ffc0000 [ 80.437756][ T29] audit: type=1326 audit(1753244998.974:12528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.5.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb839e9a9 code=0x7ffc0000 [ 80.437788][ T29] audit: type=1326 audit(1753244998.974:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.5.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb839e9a9 code=0x7ffc0000 [ 80.449527][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.594443][ T5730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5730 comm=syz.5.713 [ 80.645158][ T5740] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 80.653020][ T5740] netlink: 51 bytes leftover after parsing attributes in process `syz.4.717'. [ 80.665982][ T5730] netlink: 'syz.5.713': attribute type 1 has an invalid length. [ 80.724822][ T5742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 80.991860][ T5756] loop0: detected capacity change from 0 to 512 [ 81.017212][ T5756] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.025557][ T5756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.065955][ T3702] udevd[3702]: failed to send result of seq 10743 to main daemon: Connection refused [ 81.074009][ T5756] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.723: corrupted inode contents [ 81.103066][ T5756] EXT4-fs (loop0): Remounting filesystem read-only [ 81.116390][ T5766] veth0: entered promiscuous mode [ 81.120075][ T5756] EXT4-fs (loop0): 1 truncate cleaned up [ 81.127545][ T4902] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.138307][ T4902] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.156684][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'. [ 81.165804][ T4902] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.176838][ T5766] veth0 (unregistering): left promiscuous mode [ 81.186230][ T5756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.215590][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.254680][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 81.269965][ T5773] IPVS: Error joining to the multicast group [ 81.421597][ T5793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5793 comm=syz.4.734 [ 81.437337][ T5793] hsr_slave_0: left promiscuous mode [ 81.443715][ T5793] hsr_slave_1: left promiscuous mode [ 81.468770][ T5796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5796 comm=syz.0.735 [ 81.482497][ T5796] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 84.568072][ T5809] netlink: 'syz.5.739': attribute type 2 has an invalid length. [ 84.576005][ T5809] __nla_validate_parse: 2 callbacks suppressed [ 84.576138][ T5809] netlink: 51 bytes leftover after parsing attributes in process `syz.5.739'. [ 84.577168][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 84.624846][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 84.640726][ T5812] IPVS: Error joining to the multicast group [ 84.679763][ T5815] pim6reg1: entered promiscuous mode [ 84.685933][ T5815] pim6reg1: entered allmulticast mode [ 84.704854][ T5820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.743'. [ 84.728205][ T5823] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 84.739882][ T5822] $Hÿ: renamed from bond0 [ 84.757334][ T5822] $Hÿ: entered promiscuous mode [ 84.764908][ T5825] netlink: 'syz.5.747': attribute type 1 has an invalid length. [ 84.780137][ T5825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.795335][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.747'. [ 84.809753][ T5825] bond2 (unregistering): Released all slaves [ 84.831268][ T5830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5830 comm=syz.0.749 [ 84.848730][ T5830] netlink: 14 bytes leftover after parsing attributes in process `syz.0.749'. [ 84.864681][ T5830] hsr_slave_0: left promiscuous mode [ 84.870883][ T5830] hsr_slave_1: left promiscuous mode [ 84.890957][ T5836] loop5: detected capacity change from 0 to 2048 [ 84.907436][ T5837] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.916009][ T5837] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.924477][ T5837] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.932926][ T5837] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.942594][ T5836] EXT4-fs (loop5): failed to initialize system zone (-117) [ 84.949870][ T5836] EXT4-fs (loop5): mount failed [ 84.970868][ T5836] netlink: 'syz.5.753': attribute type 39 has an invalid length. [ 85.039615][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 85.057290][ T5849] IPVS: Error joining to the multicast group [ 85.110103][ T5853] loop5: detected capacity change from 0 to 256 [ 85.126012][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 85.126038][ T29] audit: type=1326 audit(1753245003.704:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5ee785967 code=0x7ffc0000 [ 85.136415][ T5853] FAT-fs (loop5): Directory bread(block 64) failed [ 85.170934][ T5853] FAT-fs (loop5): Directory bread(block 65) failed [ 85.172379][ T29] audit: type=1326 audit(1753245003.744:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 85.183488][ T5853] FAT-fs (loop5): Directory bread(block 66) failed [ 85.201166][ T29] audit: type=1326 audit(1753245003.744:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 85.201200][ T29] audit: type=1326 audit(1753245003.744:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 85.201225][ T29] audit: type=1326 audit(1753245003.744:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 85.240510][ T5853] FAT-fs (loop5): Directory bread(block 67) failed [ 85.254823][ T29] audit: type=1326 audit(1753245003.744:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 85.254856][ T29] audit: type=1326 audit(1753245003.744:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5ee72ab89 code=0x7ffc0000 [ 85.254895][ T29] audit: type=1326 audit(1753245003.744:13164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5ee785967 code=0x7ffc0000 [ 85.313521][ T5853] FAT-fs (loop5): Directory bread(block 68) failed [ 85.332347][ T29] audit: type=1326 audit(1753245003.744:13165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5ee72ab89 code=0x7ffc0000 [ 85.332385][ T29] audit: type=1326 audit(1753245003.744:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd5ee78e9a9 code=0x7ffc0000 [ 85.387263][ T5853] FAT-fs (loop5): Directory bread(block 69) failed [ 85.418745][ T5862] $Hÿ: renamed from bond0 (while UP) [ 85.419735][ T5853] FAT-fs (loop5): Directory bread(block 70) failed [ 85.433900][ T5862] $Hÿ: entered promiscuous mode [ 85.439056][ T5862] bond_slave_0: entered promiscuous mode [ 85.454197][ T5853] FAT-fs (loop5): Directory bread(block 71) failed [ 85.461520][ T5853] FAT-fs (loop5): Directory bread(block 72) failed [ 85.490449][ T5853] FAT-fs (loop5): Directory bread(block 73) failed [ 85.503182][ T5870] loop3: detected capacity change from 0 to 512 [ 85.510309][ T5870] ext4: Unknown parameter 'uid' [ 85.518299][ T5870] Cannot find add_set index 0 as target [ 85.530900][ T5871] loop4: detected capacity change from 0 to 1024 [ 85.569031][ T5853] +}[@: attempt to access beyond end of device [ 85.569031][ T5853] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 85.588499][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.607565][ T5870] loop3: detected capacity change from 0 to 8192 [ 85.644543][ T5878] xt_CT: No such helper "pptp" [ 85.787304][ T5887] netlink: 44 bytes leftover after parsing attributes in process `syz.5.767'. [ 85.839185][ T5891] loop3: detected capacity change from 0 to 512 [ 85.849747][ T5891] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.857763][ T5891] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.768: bg 0: block 248: padding at end of block bitmap is not set [ 85.874621][ T5891] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.768: Failed to acquire dquot type 1 [ 85.887678][ T5891] EXT4-fs (loop3): 1 truncate cleaned up [ 85.895418][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.944618][ T5891] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 85.956017][ T5891] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 86.031023][ T4733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.296240][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.341461][ T5921] loop3: detected capacity change from 0 to 256 [ 86.343859][ T5922] loop0: detected capacity change from 0 to 512 [ 86.354832][ T5922] ext4: Unknown parameter 'uid' [ 86.362129][ T5922] Cannot find del_set index 2 as target [ 86.363386][ T5921] FAT-fs (loop3): Directory bread(block 64) failed [ 86.374901][ T5921] FAT-fs (loop3): Directory bread(block 65) failed [ 86.383301][ T5921] FAT-fs (loop3): Directory bread(block 66) failed [ 86.390138][ T5921] FAT-fs (loop3): Directory bread(block 67) failed [ 86.397178][ T5921] FAT-fs (loop3): Directory bread(block 68) failed [ 86.405777][ T5921] FAT-fs (loop3): Directory bread(block 69) failed [ 86.412717][ T5921] FAT-fs (loop3): Directory bread(block 70) failed [ 86.419609][ T5921] FAT-fs (loop3): Directory bread(block 71) failed [ 86.419844][ T5922] loop0: detected capacity change from 0 to 8192 [ 86.428432][ T5921] FAT-fs (loop3): Directory bread(block 72) failed [ 86.439767][ T5921] FAT-fs (loop3): Directory bread(block 73) failed [ 86.467504][ T5921] +}[@: attempt to access beyond end of device [ 86.467504][ T5921] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 86.589490][ T5927] pim6reg1: entered promiscuous mode [ 86.594999][ T5927] pim6reg1: entered allmulticast mode [ 87.383034][ T6036] loop5: detected capacity change from 0 to 512 [ 87.404957][ T6036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.418139][ T6036] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.628962][ T6060] lo speed is unknown, defaulting to 1000 [ 87.805464][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.066220][ T6093] loop4: detected capacity change from 0 to 256 [ 88.080721][ T6093] FAT-fs (loop4): Directory bread(block 64) failed [ 88.087487][ T6093] FAT-fs (loop4): Directory bread(block 65) failed [ 88.094241][ T6093] FAT-fs (loop4): Directory bread(block 66) failed [ 88.101314][ T6093] FAT-fs (loop4): Directory bread(block 67) failed [ 88.108039][ T6093] FAT-fs (loop4): Directory bread(block 68) failed [ 88.109808][ T6097] netlink: zone id is out of range [ 88.114688][ T6093] FAT-fs (loop4): Directory bread(block 69) failed [ 88.114804][ T6093] FAT-fs (loop4): Directory bread(block 70) failed [ 88.114825][ T6093] FAT-fs (loop4): Directory bread(block 71) failed [ 88.114921][ T6093] FAT-fs (loop4): Directory bread(block 72) failed [ 88.114937][ T6093] FAT-fs (loop4): Directory bread(block 73) failed [ 88.153861][ T6097] netlink: zone id is out of range [ 88.159022][ T6097] netlink: zone id is out of range [ 88.164204][ T6097] netlink: zone id is out of range [ 88.169350][ T6097] netlink: zone id is out of range [ 88.174629][ T6097] netlink: zone id is out of range [ 88.179924][ T6097] netlink: zone id is out of range [ 88.185123][ T6097] netlink: zone id is out of range [ 88.190244][ T6097] netlink: zone id is out of range [ 88.195395][ T6097] netlink: zone id is out of range [ 88.201431][ T6093] +}[@: attempt to access beyond end of device [ 88.201431][ T6093] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 88.268955][ T6103] loop3: detected capacity change from 0 to 1024 [ 88.281368][ T6103] EXT4-fs: inline encryption not supported [ 88.287397][ T6103] EXT4-fs: Ignoring removed i_version option [ 88.306920][ T6103] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.328283][ T6103] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.802: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.350735][ T6103] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.802: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.362424][ T6108] lo speed is unknown, defaulting to 1000 [ 88.400715][ T6103] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.802: Failed to acquire dquot type 0 [ 88.420626][ T6103] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 88.470659][ T6103] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.802: mark_inode_dirty error [ 88.510955][ T6103] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 88.530530][ T6103] EXT4-fs (loop3): 1 orphan inode deleted [ 88.536842][ T6103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.553890][ T4850] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.576573][ T4850] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 88.623471][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.680218][ T6103] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.802: Invalid inode table block 1 in block_group 0 [ 88.695696][ T6121] lo speed is unknown, defaulting to 1000 [ 88.710423][ T6103] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 88.792288][ T6137] netlink: 'syz.0.816': attribute type 12 has an invalid length. [ 88.800280][ T6103] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.802: mark_inode_dirty error [ 88.834200][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 88.939149][ T6146] netlink: 'syz.3.830': attribute type 12 has an invalid length. [ 88.992895][ T6150] lo speed is unknown, defaulting to 1000 [ 89.062815][ T6159] loop3: detected capacity change from 0 to 512 [ 89.081663][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 89.099620][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.114652][ T6159] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.262890][ T4733] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 89.290124][ T4733] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 89.522325][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.522974][ T4899] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.569748][ T6177] loop5: detected capacity change from 0 to 2048 [ 89.582277][ T4899] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.610162][ T6177] loop5: p1 < > p4 [ 89.615800][ T6177] loop5: p4 size 8388608 extends beyond EOD, truncated [ 89.637947][ T6182] lo speed is unknown, defaulting to 1000 [ 89.683232][ T6188] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 89.692049][ T6188] ref_ctr increment failed for inode: 0x3d5 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811a0e2c00 [ 89.712520][ T4899] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.754966][ T6183] lo speed is unknown, defaulting to 1000 [ 89.771190][ T4899] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.867937][ T6183] chnl_net:caif_netlink_parms(): no params data found [ 89.969235][ T4899] bridge_slave_1: left allmulticast mode [ 89.975219][ T4899] bridge_slave_1: left promiscuous mode [ 89.981166][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.996202][ T4899] bridge_slave_0: left allmulticast mode [ 90.002050][ T4899] bridge_slave_0: left promiscuous mode [ 90.007796][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.110866][ T4899] team0: Port device geneve1 removed [ 90.192816][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.203045][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.212650][ T4899] bond0 (unregistering): Released all slaves [ 90.238016][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 90.238036][ T29] audit: type=1400 audit(1753245008.814:13725): avc: denied { relabelfrom } for pid=6223 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.264177][ T29] audit: type=1400 audit(1753245008.814:13726): avc: denied { relabelto } for pid=6223 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.285487][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.292736][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.300787][ T4899] IPVS: stopping backup sync thread 5726 ... [ 90.302297][ T6183] bridge_slave_0: entered allmulticast mode [ 90.313725][ T6183] bridge_slave_0: entered promiscuous mode [ 90.337429][ T6230] loop5: detected capacity change from 0 to 512 [ 90.350724][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.357903][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.365469][ T6183] bridge_slave_1: entered allmulticast mode [ 90.368019][ T6230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.372393][ T6183] bridge_slave_1: entered promiscuous mode [ 90.384289][ T6230] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.402958][ T29] audit: type=1400 audit(1753245008.984:13727): avc: denied { shutdown } for pid=6227 comm="syz.2.845" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.443530][ T4899] hsr_slave_0: left promiscuous mode [ 90.449504][ T4899] hsr_slave_1: left promiscuous mode [ 90.455640][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.463148][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.472308][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.479853][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.492105][ T4899] veth1_macvtap: left promiscuous mode [ 90.497790][ T4899] veth0_macvtap: left promiscuous mode [ 90.503819][ T4899] veth1_vlan: left promiscuous mode [ 90.509206][ T4899] veth0_vlan: left promiscuous mode [ 90.541931][ T4103] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 90.557045][ T4103] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 90.599716][ T4899] team0 (unregistering): Port device team_slave_1 removed [ 90.607363][ T6237] loop0: detected capacity change from 0 to 1024 [ 90.614259][ T4899] team0 (unregistering): Port device team_slave_0 removed [ 90.616129][ T6237] EXT4-fs: Ignoring removed orlov option [ 90.627598][ T6237] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.644298][ T6237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.665993][ T6237] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.847: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 90.666105][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.705062][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.716212][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.732826][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.743881][ T6183] team0: Port device team_slave_0 added [ 90.751641][ T6183] team0: Port device team_slave_1 added [ 90.772732][ T6244] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 90.786779][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.793985][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.820381][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.839008][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.851273][ T6249] bond0 (unregistering): Released all slaves [ 90.862889][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.869938][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.896030][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.955490][ T6183] hsr_slave_0: entered promiscuous mode [ 90.961778][ T6183] hsr_slave_1: entered promiscuous mode [ 91.097848][ T6268] netlink: 5 bytes leftover after parsing attributes in process `syz.4.863'. [ 91.106630][ T6183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.118260][ T6268] 0ªX¹¦D: renamed from gretap0 [ 91.127410][ T6268] 0ªX¹¦D: entered allmulticast mode [ 91.133904][ T6183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.143156][ T6183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.153312][ T6251] lo speed is unknown, defaulting to 1000 [ 91.153387][ T6183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.192566][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 91.213354][ T29] audit: type=1326 audit(1753245009.794:13728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.237058][ T29] audit: type=1326 audit(1753245009.794:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.260759][ T29] audit: type=1326 audit(1753245009.794:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.284381][ T29] audit: type=1326 audit(1753245009.794:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.308063][ T29] audit: type=1326 audit(1753245009.794:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.331932][ T29] audit: type=1326 audit(1753245009.794:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.355442][ T29] audit: type=1326 audit(1753245009.794:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5a7be9a9 code=0x7ffc0000 [ 91.422149][ T6282] lo speed is unknown, defaulting to 1000 [ 91.446675][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 91.515040][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.522311][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.529704][ T6251] bridge_slave_0: entered allmulticast mode [ 91.536278][ T6251] bridge_slave_0: entered promiscuous mode [ 91.543075][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.550310][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.557876][ T6251] bridge_slave_1: entered allmulticast mode [ 91.564796][ T6251] bridge_slave_1: entered promiscuous mode [ 91.588615][ T4899] bridge_slave_1: left allmulticast mode [ 91.594471][ T4899] bridge_slave_1: left promiscuous mode [ 91.600286][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.613312][ T4899] bridge_slave_0: left allmulticast mode [ 91.619074][ T4899] bridge_slave_0: left promiscuous mode [ 91.625111][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.633731][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 91.732761][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.742570][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.751845][ T4899] bond0 (unregistering): Released all slaves [ 91.761728][ T4899] bond1 (unregistering): (slave batadv1): Releasing active interface [ 91.770555][ T4899] bond1 (unregistering): Released all slaves [ 91.787969][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.799013][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.806823][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.814367][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.822319][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.829869][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.842962][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.866661][ T6251] team0: Port device team_slave_0 added [ 91.874891][ T4899] hsr_slave_0: left promiscuous mode [ 91.880981][ T4899] hsr_slave_1: left promiscuous mode [ 91.886958][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.894916][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.939352][ T4899] team0 (unregistering): Port device team_slave_1 removed [ 91.954743][ T4899] team0 (unregistering): Port device team_slave_0 removed [ 91.993838][ T6251] team0: Port device team_slave_1 added [ 92.025141][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.032233][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.058266][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.069781][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.076990][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.103262][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.115434][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.122916][ T6300] lo speed is unknown, defaulting to 1000 [ 92.142768][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.150023][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.170003][ T6251] hsr_slave_0: entered promiscuous mode [ 92.176556][ T6251] hsr_slave_1: entered promiscuous mode [ 92.182849][ T6251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.190764][ T6251] Cannot create hsr debugfs directory [ 92.197933][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.205068][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.325662][ T6251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 92.334835][ T6251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 92.344696][ T6251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 92.354027][ T6251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 92.371817][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.412213][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.445711][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.456449][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.463751][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.479702][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.486907][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.555432][ T6183] veth0_vlan: entered promiscuous mode [ 92.565641][ T6183] veth1_vlan: entered promiscuous mode [ 92.585848][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.593719][ T6183] veth0_macvtap: entered promiscuous mode [ 92.602223][ T6183] veth1_macvtap: entered promiscuous mode [ 92.613885][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.626567][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.636943][ T6183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.645762][ T6183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.654632][ T6183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663494][ T6183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.755551][ T6348] loop6: detected capacity change from 0 to 256 [ 92.768136][ T6348] FAT-fs (loop6): Directory bread(block 64) failed [ 92.774991][ T6348] FAT-fs (loop6): Directory bread(block 65) failed [ 92.784313][ T6348] FAT-fs (loop6): Directory bread(block 66) failed [ 92.791035][ T6348] FAT-fs (loop6): Directory bread(block 67) failed [ 92.797610][ T6348] FAT-fs (loop6): Directory bread(block 68) failed [ 92.804471][ T6348] FAT-fs (loop6): Directory bread(block 69) failed [ 92.811171][ T6348] FAT-fs (loop6): Directory bread(block 70) failed [ 92.817808][ T6348] FAT-fs (loop6): Directory bread(block 71) failed [ 92.824589][ T6348] FAT-fs (loop6): Directory bread(block 72) failed [ 92.831551][ T6348] FAT-fs (loop6): Directory bread(block 73) failed [ 92.846874][ T6251] veth0_vlan: entered promiscuous mode [ 92.858243][ T6251] veth1_vlan: entered promiscuous mode [ 92.864124][ T6348] +}[@: attempt to access beyond end of device [ 92.864124][ T6348] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 92.879209][ T6251] veth0_macvtap: entered promiscuous mode [ 92.888650][ T6251] veth1_macvtap: entered promiscuous mode [ 92.902745][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.917091][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.929132][ T6356] loop0: detected capacity change from 0 to 2048 [ 92.938194][ T6251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947133][ T6251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.955947][ T6251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964799][ T6251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974357][ T6340] xt_CT: No such helper "pptp" [ 93.012045][ T6355] loop4: detected capacity change from 0 to 128 [ 93.018616][ T6356] loop0: p1 < > p4 [ 93.026930][ T6356] loop0: p4 size 8388608 extends beyond EOD, truncated [ 93.048253][ T6355] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.094814][ T6355] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.146007][ T6368] lo speed is unknown, defaulting to 1000 [ 93.168316][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.220186][ T6373] lo speed is unknown, defaulting to 1000 [ 93.238444][ T6368] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 93.247305][ T6368] ref_ctr increment failed for inode: 0x22 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811a0e4200 [ 93.449890][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'. [ 93.527488][ T6395] sch_fq: defrate 0 ignored. [ 93.529292][ T6397] loop7: detected capacity change from 0 to 256 [ 93.546945][ T6391] netlink: 'syz.6.881': attribute type 1 has an invalid length. [ 93.556291][ T6397] FAT-fs (loop7): Directory bread(block 64) failed [ 93.563576][ T6397] FAT-fs (loop7): Directory bread(block 65) failed [ 93.570256][ T6397] FAT-fs (loop7): Directory bread(block 66) failed [ 93.580047][ T6397] FAT-fs (loop7): Directory bread(block 67) failed [ 93.585730][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.881'. [ 93.587367][ T6397] FAT-fs (loop7): Directory bread(block 68) failed [ 93.602430][ T6391] bridge_slave_1: left allmulticast mode [ 93.603636][ T6397] FAT-fs (loop7): Directory bread(block 69) failed [ 93.608207][ T6391] bridge_slave_1: left promiscuous mode [ 93.614928][ T6397] FAT-fs (loop7): Directory bread(block 70) failed [ 93.620544][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.630410][ T6397] FAT-fs (loop7): Directory bread(block 71) failed [ 93.642193][ T6391] bridge_slave_0: left allmulticast mode [ 93.647924][ T6391] bridge_slave_0: left promiscuous mode [ 93.653951][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.661464][ T6397] FAT-fs (loop7): Directory bread(block 72) failed [ 93.668682][ T6397] FAT-fs (loop7): Directory bread(block 73) failed [ 93.701607][ T6401] loop0: detected capacity change from 0 to 2048 [ 93.709254][ T6397] +}[@: attempt to access beyond end of device [ 93.709254][ T6397] loop7: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 93.726110][ T6401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.821854][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.948835][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.889'. [ 93.983131][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.990772][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.011885][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.019494][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.030026][ T6408] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 94.126136][ T6425] loop0: detected capacity change from 0 to 1024 [ 94.133455][ T6425] EXT4-fs: Ignoring removed oldalloc option [ 94.139470][ T6425] EXT4-fs: Ignoring removed bh option [ 94.172009][ T6425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.581175][ T6425] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.893: Allocating blocks 1-17 which overlap fs metadata [ 94.598085][ T6434] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.893: Allocating blocks 1-17 which overlap fs metadata [ 94.776205][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.805577][ T6446] loop0: detected capacity change from 0 to 256 [ 94.829673][ T6446] FAT-fs (loop0): Directory bread(block 64) failed [ 94.853219][ T6446] FAT-fs (loop0): Directory bread(block 65) failed [ 94.866399][ T6446] FAT-fs (loop0): Directory bread(block 66) failed [ 94.881363][ T6446] FAT-fs (loop0): Directory bread(block 67) failed [ 94.896036][ T6446] FAT-fs (loop0): Directory bread(block 68) failed [ 94.912415][ T6446] FAT-fs (loop0): Directory bread(block 69) failed [ 94.929358][ T6446] FAT-fs (loop0): Directory bread(block 70) failed [ 94.947306][ T6446] FAT-fs (loop0): Directory bread(block 71) failed [ 94.958299][ T6446] FAT-fs (loop0): Directory bread(block 72) failed [ 94.976102][ T6446] FAT-fs (loop0): Directory bread(block 73) failed [ 95.006397][ T6446] +}[@: attempt to access beyond end of device [ 95.006397][ T6446] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 95.247166][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 95.247185][ T29] audit: type=1326 audit(1753245013.824:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.309782][ T29] audit: type=1326 audit(1753245013.824:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.333440][ T29] audit: type=1326 audit(1753245013.824:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.357064][ T29] audit: type=1326 audit(1753245013.834:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.380512][ T29] audit: type=1326 audit(1753245013.834:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.404014][ T29] audit: type=1326 audit(1753245013.834:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.427799][ T29] audit: type=1326 audit(1753245013.834:14020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.451399][ T29] audit: type=1326 audit(1753245013.834:14021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.477540][ T29] audit: type=1326 audit(1753245014.054:14022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.501302][ T29] audit: type=1326 audit(1753245014.054:14023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 95.773390][ T6465] loop4: detected capacity change from 0 to 164 [ 95.820731][ T6465] ISOFS: unable to read i-node block [ 95.826076][ T6465] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 96.304512][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 96.313543][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.325982][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.357247][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.383764][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.408152][ T6496] 0ªX¹¦D: left allmulticast mode [ 96.454129][ T6496] $Hÿ: left promiscuous mode [ 96.463811][ T6496] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 96.473097][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.489606][ T6496] net_ratelimit: 20 callbacks suppressed [ 96.489677][ T6496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.511290][ T3382] lo speed is unknown, defaulting to 1000 [ 96.517043][ T3382] syz0: Port: 1 Link ACTIVE [ 96.706300][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.930'. [ 96.720249][ T6512] vlan2: entered allmulticast mode [ 96.725645][ T6512] veth0_to_bridge: entered allmulticast mode [ 96.888504][ T6521] lo speed is unknown, defaulting to 1000 [ 97.150905][ T6532] random: crng reseeded on system resumption [ 97.162445][ T6532] Restarting kernel threads ... [ 97.171210][ T6532] Done restarting kernel threads. [ 97.297509][ T6546] bridge: RTM_NEWNEIGH with invalid ether address [ 97.429248][ T6555] loop7: detected capacity change from 0 to 2048 [ 97.462106][ T6555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.490578][ T6555] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.946: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 97.520893][ T6555] EXT4-fs (loop7): Remounting filesystem read-only [ 97.535512][ T6555] xt_hashlimit: max too large, truncated to 1048576 [ 97.547793][ T6560] loop4: detected capacity change from 0 to 128 [ 97.616335][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.793499][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.802988][ T6552] syz.4.945: attempt to access beyond end of device [ 97.802988][ T6552] loop4: rw=524288, sector=353, nr_sectors = 160 limit=128 [ 97.821610][ T6552] syz.4.945: attempt to access beyond end of device [ 97.821610][ T6552] loop4: rw=524288, sector=673, nr_sectors = 16 limit=128 [ 97.837147][ T6552] syz.4.945: attempt to access beyond end of device [ 97.837147][ T6552] loop4: rw=0, sector=353, nr_sectors = 8 limit=128 [ 97.853969][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.854892][ T6552] syz.4.945: attempt to access beyond end of device [ 97.854892][ T6552] loop4: rw=0, sector=353, nr_sectors = 8 limit=128 [ 97.915491][ T6570] 8021q: adding VLAN 0 to HW filter on device  [ 97.933226][ T6570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.982024][ T6581] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.028805][ T6585] netlink: 'syz.6.955': attribute type 10 has an invalid length. [ 98.036791][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.6.955'. [ 98.051614][ T6585] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 98.060764][ T6585] team0: Failed to send options change via netlink (err -105) [ 98.068284][ T6585] team0: Port device geneve1 added [ 98.081908][ T6581] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.133681][ T6581] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.193257][ T6581] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.257424][ T6581] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.269244][ T6581] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.280901][ T6581] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292533][ T6581] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.391743][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'. [ 98.406698][ T6601] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.415082][ T6601] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.423651][ T6601] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.432217][ T6601] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.441199][ T6601] vxlan0: entered promiscuous mode [ 99.802623][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.964'. [ 99.820560][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.828112][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.844283][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.851859][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.875507][ T6739] sch_fq: defrate 0 ignored. [ 99.929610][ T6741] loop7: detected capacity change from 0 to 128 [ 100.091619][ T6737] syz.7.966: attempt to access beyond end of device [ 100.091619][ T6737] loop7: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 100.106354][ T6737] syz.7.966: attempt to access beyond end of device [ 100.106354][ T6737] loop7: rw=524288, sector=609, nr_sectors = 256 limit=128 [ 100.120300][ T6737] syz.7.966: attempt to access beyond end of device [ 100.120300][ T6737] loop7: rw=0, sector=353, nr_sectors = 8 limit=128 [ 100.133944][ T6737] syz.7.966: attempt to access beyond end of device [ 100.133944][ T6737] loop7: rw=0, sector=353, nr_sectors = 8 limit=128 [ 100.172560][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 100.206678][ T6747] loop7: detected capacity change from 0 to 512 [ 100.218657][ T6747] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 100.228613][ T6747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 100.237074][ T6747] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.970: corrupted in-inode xattr: e_value size too large [ 100.252143][ T6747] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.970: couldn't read orphan inode 15 (err -117) [ 100.265218][ T6747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.291778][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.312093][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 100.368239][ T6758] netlink: 'syz.7.973': attribute type 1 has an invalid length. [ 100.376777][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.973'. [ 100.386253][ T6758] hsr_slave_0: left promiscuous mode [ 100.394267][ T6758] hsr_slave_1: left promiscuous mode [ 100.415250][ T6760] lo speed is unknown, defaulting to 1000 [ 100.492712][ T6764] lo speed is unknown, defaulting to 1000 [ 100.620295][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 100.620313][ T29] audit: type=1326 audit(1753245019.194:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.650182][ T29] audit: type=1326 audit(1753245019.194:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.673913][ T29] audit: type=1326 audit(1753245019.194:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.698062][ T29] audit: type=1326 audit(1753245019.194:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.721552][ T29] audit: type=1326 audit(1753245019.194:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.745480][ T29] audit: type=1326 audit(1753245019.194:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.769221][ T29] audit: type=1326 audit(1753245019.194:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.792784][ T29] audit: type=1326 audit(1753245019.194:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.816390][ T29] audit: type=1326 audit(1753245019.194:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.839934][ T29] audit: type=1326 audit(1753245019.194:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.7.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd67d3ce9a9 code=0x7ffc0000 [ 100.897691][ T6783] netlink: 'syz.4.984': attribute type 10 has an invalid length. [ 100.905722][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.984'. [ 100.915030][ T6783] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.923349][ T6783] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.931612][ T6783] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.941512][ T6783] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 100.950495][ T6783] team0: Failed to send options change via netlink (err -105) [ 100.958048][ T6783] team0: Port device geneve1 added [ 100.970192][ T6778] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.032107][ T6778] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.092231][ T6778] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.179009][ T6778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.191632][ T6778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.203673][ T6778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.216615][ T6778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.365962][ T6802] lo speed is unknown, defaulting to 1000 [ 101.508358][ T6810] lo speed is unknown, defaulting to 1000 [ 102.298796][ T6832] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 102.306885][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1003'. [ 102.334797][ T6832] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 102.429428][ T6841] syzkaller0: entered promiscuous mode [ 102.435122][ T6841] syzkaller0: entered allmulticast mode [ 103.212440][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'. [ 103.272262][ T6861] lo speed is unknown, defaulting to 1000 [ 103.294971][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1012'. [ 103.312006][ T6865] loop6: detected capacity change from 0 to 128 [ 103.434857][ T6871] : renamed from bond0 (while UP) [ 103.492353][ T6873] loop7: detected capacity change from 0 to 1024 [ 103.514182][ T6873] EXT4-fs: Ignoring removed oldalloc option [ 103.520239][ T6873] EXT4-fs: Ignoring removed bh option [ 103.547531][ T6879] loop0: detected capacity change from 0 to 128 [ 103.559501][ T6873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.621989][ T6852] syz.6.1009: attempt to access beyond end of device [ 103.621989][ T6852] loop6: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 103.660847][ T6852] syz.6.1009: attempt to access beyond end of device [ 103.660847][ T6852] loop6: rw=524288, sector=609, nr_sectors = 192 limit=128 [ 103.703108][ T6852] syz.6.1009: attempt to access beyond end of device [ 103.703108][ T6852] loop6: rw=0, sector=353, nr_sectors = 8 limit=128 [ 103.856939][ T6873] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1018: Allocating blocks 1-17 which overlap fs metadata [ 103.876051][ T6892] syzkaller0: entered promiscuous mode [ 103.881826][ T6892] syzkaller0: entered allmulticast mode [ 103.890713][ T6886] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1018: Allocating blocks 1-17 which overlap fs metadata [ 104.049652][ T6896] loop6: detected capacity change from 0 to 2048 [ 104.061133][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.071756][ T6896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.100168][ T6900] loop7: detected capacity change from 0 to 512 [ 104.109083][ T6900] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.1029: iget: bad extended attribute block 1 [ 104.123002][ T6183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.132201][ T6900] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1029: couldn't read orphan inode 15 (err -117) [ 104.144873][ T6900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.166327][ T6900] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #2: block 13: comm syz.7.1029: lblock 0 mapped to illegal pblock 13 (length 1) [ 104.197863][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.409587][ T6928] loop7: detected capacity change from 0 to 2048 [ 104.425164][ T6928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.520746][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.911739][ T6946] sch_fq: defrate 4294967295 ignored. [ 104.986043][ T6950] veth0: entered promiscuous mode [ 104.991716][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 105.002008][ T6950] veth0 (unregistering): left promiscuous mode [ 105.202882][ T6959] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.250788][ T6966] netlink: 'syz.7.1054': attribute type 10 has an invalid length. [ 105.258822][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1054'. [ 105.293865][ T6961] loop6: detected capacity change from 0 to 8192 [ 105.301181][ T6961] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 105.345660][ T6970] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 105.356306][ T6959] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.392929][ T6966] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 105.404991][ T6971] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 105.483735][ T6966] team0: Failed to send options change via netlink (err -105) [ 105.483763][ T6966] team0: Port device geneve1 added [ 105.523975][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.537660][ T6971] bond0 (unregistering): Released all slaves [ 105.554312][ T6979] netlink: 'syz.6.1061': attribute type 11 has an invalid length. [ 105.583426][ T6959] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.633854][ T6959] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.698624][ T6959] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.710820][ T6959] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.722882][ T6959] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.750013][ T6959] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.105624][ T6997] loop4: detected capacity change from 0 to 1024 [ 106.569608][ T7011] loop4: detected capacity change from 0 to 128 [ 107.219376][ T7029] loop7: detected capacity change from 0 to 512 [ 107.235574][ T7031] netlink: zone id is out of range [ 107.244071][ T7031] netlink: zone id is out of range [ 107.249262][ T7031] netlink: zone id is out of range [ 107.254485][ T7031] netlink: zone id is out of range [ 107.259843][ T7031] netlink: zone id is out of range [ 107.265833][ T7031] netlink: zone id is out of range [ 107.278272][ T7031] netlink: zone id is out of range [ 107.283668][ T7031] netlink: zone id is out of range [ 107.288988][ T7031] netlink: zone id is out of range [ 107.301287][ T7029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.482772][ T7029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.495664][ T7029] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.511243][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 107.511317][ T29] audit: type=1400 audit(1753245026.094:14431): avc: denied { mounton } for pid=7028 comm="syz.7.1081" path="/43/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.554339][ T29] audit: type=1326 audit(1753245026.124:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.0.1093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e5a7be9a9 code=0x0 [ 107.579580][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.652215][ T7046] veth0: entered promiscuous mode [ 107.658077][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1084'. [ 107.665047][ T29] audit: type=1400 audit(1753245026.234:14433): avc: denied { watch_reads } for pid=7047 comm="syz.2.1087" path="/221" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.737196][ T7052] syzkaller0: entered promiscuous mode [ 107.743017][ T7052] syzkaller0: entered allmulticast mode [ 108.415592][ T29] audit: type=1400 audit(1753245026.994:14434): avc: denied { nlmsg_write } for pid=7136 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 109.092507][ T29] audit: type=1326 audit(1753245027.674:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.132265][ T29] audit: type=1326 audit(1753245027.694:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.156070][ T29] audit: type=1326 audit(1753245027.694:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.180051][ T29] audit: type=1326 audit(1753245027.694:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.203813][ T29] audit: type=1326 audit(1753245027.694:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.227592][ T29] audit: type=1326 audit(1753245027.694:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f75f2c0e9a9 code=0x7ffc0000 [ 109.727923][ T7265] loop0: detected capacity change from 0 to 512 [ 109.735382][ T7265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.749728][ T7267] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.764647][ T7265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.777580][ T7265] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.802043][ T7267] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.818866][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.836262][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 109.862177][ T7267] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.931995][ T7267] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.961572][ T7297] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 109.961572][ T7297] The task syz.4.1134 (7297) triggered the difference, watch for misbehavior. [ 109.989434][ T7267] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.001324][ T7267] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.013022][ T7267] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.024540][ T7267] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.146328][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 110.173247][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.181753][ T7308] bond0: (slave bond2): Enslaving as an active interface with an up link [ 110.197885][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 110.209014][ T7308] bond0 (unregistering): (slave bond2): Releasing backup interface [ 110.218832][ T7308] bond0 (unregistering): Released all slaves [ 110.357743][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 110.366980][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 110.375992][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 110.385549][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 110.449241][ T7322] wireguard0: entered promiscuous mode [ 110.454824][ T7322] wireguard0: entered allmulticast mode [ 110.849780][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 110.982916][ T7352] loop7: detected capacity change from 0 to 512 [ 110.999705][ T7352] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.1158: casefold flag without casefold feature [ 111.017571][ T7355] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.027544][ T7355] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.037845][ T7352] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1158: couldn't read orphan inode 15 (err -117) [ 111.050513][ T7352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.112166][ T7355] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.122159][ T7355] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.142257][ T7360] loop4: detected capacity change from 0 to 512 [ 111.162233][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.178398][ T7360] ext4 filesystem being mounted at /240/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.192220][ T7355] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.202115][ T7355] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.217509][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.228299][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.270438][ T7355] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.280409][ T7355] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.298182][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 111.338926][ T7372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.349590][ T7372] bond0: (slave bond1): Enslaving as an active interface with an up link [ 111.366680][ T7355] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.375058][ T7355] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.386241][ T7372] bond0 (unregistering): (slave bond1): Releasing backup interface [ 111.396727][ T7372] bond0 (unregistering): Released all slaves [ 111.407826][ T7381] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.422069][ T7355] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.430506][ T7355] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.443817][ T7355] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.452111][ T7355] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.464621][ T7355] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.473024][ T7355] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.493933][ T7381] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.554132][ T7391] loop7: detected capacity change from 0 to 256 [ 111.562099][ T7381] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.562437][ T7391] vfat: Unknown parameter 'shor†name' [ 111.621604][ T7381] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.657639][ T7397] loop0: detected capacity change from 0 to 512 [ 111.662208][ T7399] loop7: detected capacity change from 0 to 1024 [ 111.682048][ T7397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.693836][ T7399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.695165][ T7397] ext4 filesystem being mounted at /234/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.740975][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.750924][ T7381] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.762973][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.765020][ T7381] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.785996][ T7381] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.801335][ T7381] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.889785][ T7416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.898759][ T7416] bond1: (slave bond2): Enslaving as an active interface with an up link [ 111.956880][ T7425] wireguard0: entered promiscuous mode [ 111.962546][ T7425] wireguard0: entered allmulticast mode [ 111.975428][ T7416] bond1 (unregistering): (slave bond2): Releasing backup interface [ 111.985419][ T7416] bond1 (unregistering): Released all slaves [ 112.091221][ T7439] loop6: detected capacity change from 0 to 2048 [ 112.112054][ T7439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.160547][ T7439] loop6: detected capacity change from 2048 to 0 [ 112.167982][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.167982][ T7439] loop6: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 112.181939][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.181939][ T7439] loop6: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 112.195497][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.195497][ T7439] loop6: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 112.209116][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.209116][ T7439] loop6: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 112.222893][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.222893][ T7439] loop6: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 112.236556][ T7439] EXT4-fs error (device loop6): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.6.1191: unable to read itable block [ 112.249401][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.249401][ T7439] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 112.262795][ T7439] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.271205][ T7439] EXT4-fs (loop6): I/O error while writing superblock [ 112.278175][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.278175][ T7439] loop6: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 112.291628][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.291628][ T7439] loop6: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 112.304987][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.304987][ T7439] loop6: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 112.318641][ T7439] syz.6.1191: attempt to access beyond end of device [ 112.318641][ T7439] loop6: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 112.332114][ T7439] EXT4-fs error (device loop6): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.6.1191: unable to read itable block [ 112.345155][ T7439] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.353508][ T7439] EXT4-fs (loop6): I/O error while writing superblock [ 112.360402][ T7439] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: IO failure [ 112.369107][ T7439] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.377476][ T7439] EXT4-fs (loop6): I/O error while writing superblock [ 112.384285][ T7439] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.1191: mark_inode_dirty error [ 112.395668][ T7439] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.403986][ T7439] EXT4-fs (loop6): I/O error while writing superblock [ 112.410944][ T7439] EXT4-fs error (device loop6): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.6.1191: unable to read itable block [ 112.423775][ T7439] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.432271][ T7439] EXT4-fs (loop6): I/O error while writing superblock [ 112.451613][ T6183] EXT4-fs error (device loop6): ext4_get_inode_loc:4930: inode #2: block 4: comm syz-executor: unable to read itable block [ 112.464568][ T6183] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.476488][ T6183] EXT4-fs (loop6): I/O error while writing superblock [ 112.483372][ T6183] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: IO failure [ 112.492232][ T6183] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.500741][ T6183] EXT4-fs (loop6): I/O error while writing superblock [ 112.507704][ T6183] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 112.519376][ T6183] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.527857][ T6183] EXT4-fs (loop6): I/O error while writing superblock [ 112.544738][ T4850] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4915: inode #18: block 6: comm kworker/u8:15: unable to read itable block [ 112.558862][ T4850] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.567669][ T4850] EXT4-fs (loop6): I/O error while writing superblock [ 112.574750][ T4850] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4915: inode #2: block 4: comm kworker/u8:15: unable to read itable block [ 112.589721][ T4850] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 112.783067][ T4902] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.831913][ T4902] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.871982][ T4902] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.902973][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 112.902992][ T29] audit: type=1400 audit(1753245031.484:14610): avc: denied { connect } for pid=7466 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.942756][ T4902] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.976580][ T7460] lo speed is unknown, defaulting to 1000 [ 113.053991][ T4902] team0: Port device geneve1 removed [ 113.063747][ T4902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.073610][ T4902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.083311][ T4902] bond0 (unregistering): Released all slaves [ 113.092393][ T4902] bond2 (unregistering): Released all slaves [ 113.123622][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 113.137867][ T4902] hsr_slave_0: left promiscuous mode [ 113.143897][ T4902] hsr_slave_1: left promiscuous mode [ 113.152333][ T4902] veth1_macvtap: left promiscuous mode [ 113.157873][ T4902] veth0_macvtap: left promiscuous mode [ 113.163452][ T4902] veth1_vlan: left promiscuous mode [ 113.168682][ T4902] veth0_vlan: left promiscuous mode [ 113.233161][ T4902] team0 (unregistering): Port device team_slave_1 removed [ 113.243688][ T4902] team0 (unregistering): Port device team_slave_0 removed [ 113.299309][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.306468][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.313730][ T7460] bridge_slave_0: entered allmulticast mode [ 113.320297][ T7460] bridge_slave_0: entered promiscuous mode [ 113.327194][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.334512][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.342083][ T7460] bridge_slave_1: entered allmulticast mode [ 113.354127][ T7460] bridge_slave_1: entered promiscuous mode [ 113.370485][ T7481] __nla_validate_parse: 7 callbacks suppressed [ 113.370554][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1210'. [ 113.388768][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.421582][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.440704][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 113.452109][ T7460] team0: Port device team_slave_0 added [ 113.468595][ T7460] team0: Port device team_slave_1 added [ 113.505023][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.512111][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.522648][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 113.538147][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.559425][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.566530][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.568163][ T29] audit: type=1400 audit(1753245032.144:14611): avc: denied { ioctl } for pid=7487 comm="syz.7.1205" path="socket:[20732]" dev="sockfs" ino=20732 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.592708][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.703926][ T7460] hsr_slave_0: entered promiscuous mode [ 113.720969][ T7460] hsr_slave_1: entered promiscuous mode [ 113.732416][ T29] audit: type=1400 audit(1753245032.294:14612): avc: denied { read } for pid=7505 comm="syz.7.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.855129][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1216'. [ 113.897033][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1216'. [ 113.911138][ T7460] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.921080][ T7460] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 113.947092][ T7460] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 113.958556][ T7460] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 114.040973][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.060487][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.071645][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.078906][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.108396][ T7460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.118898][ T7460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.133342][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.140520][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.153396][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1225'. [ 114.230103][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.391147][ T7460] veth0_vlan: entered promiscuous mode [ 114.399118][ T7460] veth1_vlan: entered promiscuous mode [ 114.411902][ T7569] loop7: detected capacity change from 0 to 1024 [ 114.490696][ T7569] EXT4-fs: Ignoring removed i_version option [ 114.511357][ T7569] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.567149][ T7569] EXT4-fs (loop7): orphan cleanup on readonly fs [ 114.585398][ T7460] veth0_macvtap: entered promiscuous mode [ 114.593234][ T7460] veth1_macvtap: entered promiscuous mode [ 114.604054][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.613492][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.621856][ T7460] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.630714][ T7460] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.639504][ T7460] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.648327][ T7460] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.780169][ T7569] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1228: Invalid block bitmap block 0 in block_group 0 [ 114.798285][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1230'. [ 114.826094][ T7569] Quota error (device loop7): write_blk: dquota write failed [ 114.833612][ T7569] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 114.864451][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 114.872519][ T7569] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1228: Failed to acquire dquot type 0 [ 114.919282][ T7569] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.1228: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.937086][ T29] audit: type=1326 audit(1753245033.514:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 114.961143][ T29] audit: type=1326 audit(1753245033.514:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 114.993194][ T7582] loop4: detected capacity change from 0 to 256 [ 115.005942][ T7569] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1228: Invalid inode bitmap blk 0 in block_group 0 [ 115.019428][ T7582] vfat: Unknown parameter 'shor†name' [ 115.034320][ T7569] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 115.043192][ T4902] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 115.052369][ T4902] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 115.065861][ T7569] EXT4-fs (loop7): 1 orphan inode deleted [ 115.072047][ T7569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.090310][ T29] audit: type=1326 audit(1753245033.564:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 115.114110][ T29] audit: type=1326 audit(1753245033.564:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e660e9a9 code=0x7ffc0000 [ 115.513946][ T7613] loop4: detected capacity change from 0 to 2048 [ 115.529942][ T7611] syzkaller0: entered promiscuous mode [ 115.535685][ T7611] syzkaller0: entered allmulticast mode [ 115.582195][ T7613] Alternate GPT is invalid, using primary GPT. [ 115.588673][ T7613] loop4: p1 p2 p3 [ 116.141632][ T7638] lo speed is unknown, defaulting to 1000 [ 116.451839][ T7644] tipc: Started in network mode [ 116.456782][ T7644] tipc: Node identity 8, cluster identity 4711 [ 116.463172][ T7644] tipc: Node number set to 8 [ 116.468479][ T7644] tipc: Cannot configure node identity twice [ 116.538455][ T7646] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 116.552971][ T7646] bond0: entered promiscuous mode [ 116.558272][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.566923][ T6251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.573672][ T7646] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1259'. [ 116.588615][ T7646] batadv0: entered promiscuous mode [ 116.593963][ T7646] batadv0: entered allmulticast mode [ 116.600815][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.609263][ T7646] bond0: (slave batadv0): making interface the new active one [ 116.619353][ T7646] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.813014][ T7682] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.873247][ T7682] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.932268][ T7682] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.022897][ T7682] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.118396][ T7706] loop8: detected capacity change from 0 to 512 [ 117.127829][ T7706] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 117.135173][ T7682] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.144483][ T7706] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1277: invalid indirect mapped block 2683928664 (level 1) [ 117.148911][ T7682] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.172412][ T7682] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.182591][ T7706] EXT4-fs (loop8): 1 truncate cleaned up [ 117.188864][ T7706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.193415][ T7682] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.212421][ T7706] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 13: comm syz.8.1277: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 117.258955][ T7706] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.1277: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 117.298625][ T7460] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.317486][ T7714] veth1_macvtap: left promiscuous mode [ 117.323400][ T7714] macsec0: entered promiscuous mode [ 117.427386][ T7721] net_ratelimit: 2 callbacks suppressed [ 117.427402][ T7721] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.442360][ T23] IPVS: starting estimator thread 0... [ 117.488893][ T7729] netlink: 'syz.4.1286': attribute type 1 has an invalid length. [ 117.520551][ T7729] bond0: entered promiscuous mode [ 117.525779][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.532538][ T7724] IPVS: using max 2016 ests per chain, 100800 per kthread [ 117.548733][ T7729] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1286'. [ 117.557858][ T7738] wireguard0: entered promiscuous mode [ 117.563462][ T7738] wireguard0: entered allmulticast mode [ 117.575212][ T7729] batadv0: entered promiscuous mode [ 117.580797][ T7729] batadv0: entered allmulticast mode [ 117.587605][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.595925][ T7729] bond0: (slave batadv0): making interface the new active one [ 117.604474][ T7729] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.649685][ T7742] loop4: detected capacity change from 0 to 512 [ 117.661663][ T7742] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 117.670009][ T7742] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1291: invalid indirect mapped block 2683928664 (level 1) [ 117.685442][ T7742] EXT4-fs (loop4): 1 truncate cleaned up [ 117.691922][ T7742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.714131][ T7742] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.1291: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 117.741317][ T7742] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.1291: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 117.772417][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.822274][ T7758] sch_tbf: burst 88 is lower than device bond_slave_1 mtu (1514) ! [ 117.835117][ T7756] lo speed is unknown, defaulting to 1000 [ 117.886637][ T7764] vlan2: entered allmulticast mode [ 117.891966][ T7764] team_slave_1: entered allmulticast mode [ 118.188670][ T7776] x_tables: duplicate underflow at hook 4 [ 118.199623][ T7774] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 118.206738][ T9] IPVS: starting estimator thread 0... [ 118.310461][ T7778] IPVS: using max 2112 ests per chain, 105600 per kthread [ 118.536438][ T7782] wireguard0: entered promiscuous mode [ 118.542054][ T7782] wireguard0: entered allmulticast mode [ 118.550497][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 118.550524][ T29] audit: type=1326 audit(1753245037.124:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 118.580566][ T29] audit: type=1326 audit(1753245037.124:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 118.604145][ T29] audit: type=1326 audit(1753245037.124:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 118.627823][ T29] audit: type=1326 audit(1753245037.124:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f635491e9e3 code=0x7ffc0000 [ 118.651321][ T29] audit: type=1326 audit(1753245037.124:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f635491d45f code=0x7ffc0000 [ 118.674790][ T29] audit: type=1326 audit(1753245037.124:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f635491ea37 code=0x7ffc0000 [ 118.698504][ T29] audit: type=1326 audit(1753245037.124:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f635491d310 code=0x7ffc0000 [ 118.722108][ T29] audit: type=1326 audit(1753245037.124:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f635491d60a code=0x7ffc0000 [ 118.745544][ T29] audit: type=1326 audit(1753245037.124:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 118.769146][ T29] audit: type=1326 audit(1753245037.124:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635491e9a9 code=0x7ffc0000 [ 118.899885][ T7793] netlink: 'syz.2.1310': attribute type 7 has an invalid length. [ 118.907982][ T7793] __nla_validate_parse: 3 callbacks suppressed [ 118.908022][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 118.948565][ T7795] lo speed is unknown, defaulting to 1000 [ 119.128880][ T7805] loop4: detected capacity change from 0 to 8192 [ 119.136670][ T7805] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.247633][ T7810] loop7: detected capacity change from 0 to 8192 [ 119.316125][ T4903] ================================================================== [ 119.324283][ T4903] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 119.332588][ T4903] [ 119.334936][ T4903] write to 0xffff8881266b020e of 2 bytes by task 7816 on cpu 0: [ 119.342603][ T4903] fat16_ent_put+0x28/0x60 [ 119.347058][ T4903] fat_ent_write+0x69/0xe0 [ 119.351497][ T4903] fat_chain_add+0x15b/0x3f0 [ 119.356236][ T4903] fat_get_block+0x46c/0x5e0 [ 119.360863][ T4903] __block_write_begin_int+0x3fd/0xf90 [ 119.366356][ T4903] cont_write_begin+0x5fc/0x970 [ 119.371250][ T4903] fat_write_begin+0x4f/0xe0 [ 119.375884][ T4903] cont_write_begin+0x66e/0x970 [ 119.380777][ T4903] fat_write_begin+0x4f/0xe0 [ 119.385421][ T4903] generic_perform_write+0x181/0x490 [ 119.390778][ T4903] __generic_file_write_iter+0x9e/0x120 [ 119.396386][ T4903] generic_file_write_iter+0x8d/0x2f0 [ 119.401824][ T4903] do_iter_readv_writev+0x41e/0x4c0 [ 119.407080][ T4903] vfs_writev+0x2df/0x8b0 [ 119.411440][ T4903] __se_sys_pwritev2+0xfc/0x1c0 [ 119.416318][ T4903] __x64_sys_pwritev2+0x67/0x80 [ 119.421213][ T4903] x64_sys_call+0x1cea/0x2fb0 [ 119.425923][ T4903] do_syscall_64+0xd2/0x200 [ 119.430541][ T4903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.436456][ T4903] [ 119.438795][ T4903] read to 0xffff8881266b0200 of 512 bytes by task 4903 on cpu 1: [ 119.446772][ T4903] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 119.452698][ T4903] generic_perform_write+0x2c2/0x490 [ 119.458004][ T4903] shmem_file_write_iter+0xc5/0xf0 [ 119.463230][ T4903] lo_rw_aio+0x6a0/0x760 [ 119.467525][ T4903] loop_process_work+0x52d/0xa60 [ 119.472490][ T4903] loop_workfn+0x31/0x40 [ 119.476757][ T4903] process_scheduled_works+0x4cb/0x9d0 [ 119.482241][ T4903] worker_thread+0x582/0x770 [ 119.487834][ T4903] kthread+0x489/0x510 [ 119.492020][ T4903] ret_from_fork+0xda/0x150 [ 119.496558][ T4903] ret_from_fork_asm+0x1a/0x30 [ 119.501350][ T4903] [ 119.503689][ T4903] Reported by Kernel Concurrency Sanitizer on: [ 119.509948][ T4903] CPU: 1 UID: 0 PID: 4903 Comm: kworker/u8:64 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 119.520915][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.531016][ T4903] Workqueue: loop7 loop_workfn [ 119.535819][ T4903] ==================================================================