last executing test programs: 10.405169909s ago: executing program 2 (id=475): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, @value}, 0x28) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x0, 0x0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) pipe(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000c40)=""/122) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='check=strict,overriderockperm,cruft\x00iocharset=cp932,check=relaxed,nojoliet,check=relaxed,nojoliet,\x00'], 0x3d, 0x549, &(0x7f0000000c40)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 9.720063579s ago: executing program 2 (id=486): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 9.650899409s ago: executing program 2 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000002020104000000000000000000000006080005400000010081594c38e9a71b702877497aa45f17b4e174a82889b6aefd498c261d9f35fbc8f11494e547a8f6e46157a1b38b2ec132d9511152"], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x20) sendfile(r7, r7, 0x0, 0x7a680000) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x1, @none, 0x8, 0x1}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 8.491448526s ago: executing program 2 (id=491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x101004, &(0x7f00000005c0)=ANY=[], 0x1, 0x27c, &(0x7f0000000c40)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r3, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) unshare(0x2040400) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r7, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="070000000000000000007e00f9360987a7c806067666885b800033", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 7.999983314s ago: executing program 2 (id=504): getdents64(0xffffffffffffffff, 0x0, 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000100000080000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000076c0bb346f6a7890cb7a75195c2a6fe0b36178769655cdd735562824db00"/53], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}}, 0x0, 0x0, 0x20, 0x0, "46bd83eabe362e0a9b3b9f8f7bf7a9917597f7e27c39beb48bcce4aef073148ab5e3db459f7a546dd8b82d00a833857c60a4acbac7c67c1315987ef20d868818f8e75ff1cbf6efd13c5c9b22b7d45c07"}, 0xd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000180), 0x0, 0x361, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {0x0, 0x9}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000000)={0xd42, 0x4, 0x7969ad68}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000001a40)={0x1, &(0x7f0000000740)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) syz_emit_ethernet(0x1162, &(0x7f0000001b00)=ANY=[], 0x0) 7.651815169s ago: executing program 2 (id=509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xffff}]]}}}]}, 0x48}}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="1441c05465f0006fc8afa8e488a8", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) clock_nanosleep(0x7, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000000)=0x401) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70500000800000085000100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") 6.029109002s ago: executing program 4 (id=516): syz_usb_connect(0x6, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x44, 0xbc, 0x2a, 0x20, 0x45e, 0x723, 0xb610, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xe, 0x1, 0x0, 0x2}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x1c, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.063877511s ago: executing program 0 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000002020104000000000000000000000006080005400000010081594c38e9a71b702877497aa45f17b4e174a82889b6aefd498c261d9f35fbc8f11494e547a8f6e46157a1b38b2ec132d9511152"], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x20) sendfile(r7, r7, 0x0, 0x7a680000) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x1, @none, 0x8, 0x1}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.929162553s ago: executing program 1 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYBLOB="029bb972df258534c3aea63b3b2a8c7512201764c56e952f940c5259a6f581124b7e8b7275194e96a2259e184ceaee91f383f63568c634930ded94e8aa9f1dbbed39cc332cbb79622d5922e34a26d1c0e794b27356e2cd327f7fe22c415e3e1194da3d2c7ea19d38c06e2698f3d32a70e1fa897bbc4edcb827552d6295b96c9bcdc38d7f9a8e44ede052128f05a9f04d356fbed7f7c87eb695e8d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="b38c79b1ea2d9b4897684764e0fab1a9843c16f992cd65cb8cade0e22a1c8902ebd0bdd79f731db3d0", @ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ftruncate(r8, 0x81) get_mempolicy(0x0, 0x0, 0x2fc, &(0x7f000027f000/0x1000)=nil, 0x3) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000040)={&(0x7f000001aa80)=""/4096, 0x1000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r10, 0x0) 3.809899045s ago: executing program 3 (id=525): r0 = syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff50d7, 0x6, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x6, 0x3, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) munlockall() sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010010000600000000000100000006000a004e22000008000800e0000002050004000200000008000600ac1414aa7c8aeee77e558c9d4b1bf249cbda332229a3b9f23e7d"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x7, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0xba, 0x79, &(0x7f0000000640)=""/121, 0x40f00, 0x51, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f0000000840)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000880)=[r1, r1, r1, r1, r2, r1, r1, r1, r1], &(0x7f00000008c0)=[{0x5, 0x2, 0x2, 0xa}, {0x1, 0x2, 0x1, 0xc}], 0x10, 0x3ff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x21ac6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) 3.132183035s ago: executing program 0 (id=526): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000340)=""/232, 0xe8}], 0x2, &(0x7f0000000c00)=""/178, 0xb2}, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000018000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='f2fs_reserve_new_blocks\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 3.033149636s ago: executing program 1 (id=527): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xb00000, &(0x7f0000000ac0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@nolazytime}, {@grpjquota}], [{@subj_user={'subj_user', 0x3d, 'rootcontext'}}, {@obj_user={'obj_user', 0x3d, '(:\'+%[.&[:'}}, {@audit}, {@measure}, {@fowner_lt={'fowner<', r0}}, {@euid_lt={'euid<', r0}}, {@audit}, {@seclabel}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r1 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000280)={0xffffffffffffffff}) pipe(0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) semop(r1, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r1, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) close_range(r4, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c4583a651644a810e3241e5547ad229e6b5c", 0x20) mq_unlink(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.639951652s ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000003000000000091fc45000c0400000000000000000000030000000003000000010000010d009cf488342f00"], &(0x7f00000003c0)=""/64, 0x40, 0x40, 0x0, 0x7e3, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000980)='./bus\x00', 0x19) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r5, 0x540a, 0x46c3fe73798fbdbc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 2.612071562s ago: executing program 4 (id=529): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket(0x1, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0xc}, {0xd, 0x2}}, ["", ""]}, 0x24}}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x2, 0x3, 0x40, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000340)=0x1) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) 2.558548053s ago: executing program 3 (id=530): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r7, r8, 0x25, 0x0, @void}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000300)=""/168, 0xa8) syz_emit_ethernet(0xd81, &(0x7f0000001400)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "64db74", 0xd4b, 0x8, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffdaf, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.203761518s ago: executing program 3 (id=531): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) r3 = syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r5, &(0x7f0000000100)=""/27, 0x1b) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) getpgid(r3) socket$kcm(0x29, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008"], 0x15) ptrace(0x10, 0x0) ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x20000000) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) msgget(0x0, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2.150817179s ago: executing program 4 (id=532): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25040000000500210001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc1e"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) 2.07712048s ago: executing program 1 (id=533): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_setup(0x68dd, &(0x7f0000000100)={0x0, 0xeaea, 0x2, 0x3, 0x1ad, 0x0, r6}, &(0x7f0000000380), &(0x7f00000003c0)) timer_settime(0x0, 0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000007000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000062200d5f0a47b32d000000000000007ee3d21cb103558e98a5b218db7d9b639e5678861da39273ff761db3a0008df26e8bc2d6d3c1a41f4ef72df68750e3f0b10338e8c590d9d855e6ce56b4090a995082a523ac2c3a885d5a7827403bd621a92200622263e2a8c5e4c5e476f45241f18f2ba5b21cb3f159ed4978e01f6806832de362eab11394c96e4f8576c55057d22d91b64e228956f3aac61dcb46b1ae49726fb037c5bf08000ec9ed995c815582d8bd7879ee28ab94c30a2eb2fb1ee7bf23cdafe2528a8398477d547ada21331d0b967855d0616f176e1b88befec3129e63795ed5de8bda7c367f82b431"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1.997188441s ago: executing program 1 (id=534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="3343552f836cccae7111af00000000008510000002000000850000000500000095000000ff0100"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r3, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r3, 0xd}, &(0x7f0000000340)=0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000000)=0x84) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x128) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x5, 0xfd, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @multicast2, {[@generic={0x88, 0x9, "7d9a5f28ff486c"}]}}}}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c00078008008500020000000800060000000000080005"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) io_setup(0x8d6, &(0x7f0000000380)=0x0) io_uring_enter(r0, 0x4939, 0x5539, 0x29, &(0x7f00000006c0)={[0x6]}, 0x8) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) io_pgetevents(r10, 0xff, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f0000000600)={r11, r12+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x9]}, 0x8}) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) 1.829785044s ago: executing program 3 (id=535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x5, 0x1, 0x0, 0x101}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xfff8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8004) brk(0x20001000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) pread64(r4, &(0x7f0000000240)=""/164, 0xa4, 0x4) r5 = syz_clone3(&(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(r5, 0x0, &(0x7f0000000500)={0x764, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000540)='./bus/file0\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f0000001780), 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) 1.557228258s ago: executing program 3 (id=536): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}, {@inode_readahead_blks}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0x3, 0x440, &(0x7f0000000a00)="$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") syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0xb22ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) chroot(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f0000000700)={0x290a20000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e3000000003785c37bca2518c6ab8c2a64a24109af00f2d6d73455e9cc9a2be13f64015ee6bf3e70ff8488b92c4a00"/58, 0x2d, 0x8000, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() 1.3805029s ago: executing program 1 (id=537): io_uring_setup(0x7883, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0x1, 0x3bd}) clock_getres(0xfffffffffffffffa, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0xdd68) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffebb) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x32600) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) getuid() r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) read$msr(0xffffffffffffffff, &(0x7f0000000940)=""/42, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) listen(r0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/208, 0xd0}], &(0x7f0000000240)=[0x2]}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 774.447789ms ago: executing program 4 (id=538): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x484b1e3341a13be1, 0x0) chmod(&(0x7f0000000100)='./bus\x00', 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002030101000000000000000003000008080003400000202f0800010001000028090002"], 0x30}, 0x1, 0x0, 0x0, 0x40400a1}, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x10b042, 0x0) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008010) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x1}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdd, 0x8}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000000)=""/32) 530.785972ms ago: executing program 4 (id=539): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000340)=""/232, 0xe8}], 0x2, &(0x7f0000000c00)=""/178, 0xb2}, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000018000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='f2fs_reserve_new_blocks\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 529.404652ms ago: executing program 1 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockopt(r2, 0x81, 0x7fff, &(0x7f00000002c0)=""/94, &(0x7f0000000340)=0x5e) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x800) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000000280)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) 199.275407ms ago: executing program 4 (id=541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8, 0x15, 0x1}}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x4d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc600d007c1eebd2}, 0x4008041) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000004200)='t', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) sendto$packet(r4, 0x0, 0x0, 0x4c011, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 139.345198ms ago: executing program 0 (id=542): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xa, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x1}}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x7, 0x1, 0x80}]}]}, {0x0, [0x5f, 0x10, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000000300)=""/107, 0x62, 0x6b, 0x0, 0x2ad9, 0x0, @void, @value}, 0x28) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r4, 0x0, r5, 0x0, 0x2, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x19159, r0, 0x7, '\x00', r2, r3, 0x0, 0x4, 0x5, 0xc, @value=r4, @void, @value=r1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r7}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setsig(r8, 0xa, 0x17) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x107042, 0x0) bind$bt_hci(r9, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x8008551d, &(0x7f0000000140)={0x5178, 0x1, [{0x1, 0x1}]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 115.563789ms ago: executing program 0 (id=543): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000540), &(0x7f0000000300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) setgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x90100, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x10000, 0x602202) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 84.373299ms ago: executing program 0 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000006c0)=0x4, 0x12) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0280, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x3) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x61500, 0x0) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000000040)=0x3) close(r8) read$qrtrtun(r9, 0x0, 0x0) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000640)=0x1e) close(r6) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000200000020d90472a040000102030109022400010108b0070904007c0203010101092108000301223f0f0905810300020e0408273cacb0f8a6f509b7486900b9ef9e93adbb000315618a1daf50ff0a9cf894532bc00e9a64ee8308d318ccb8149ec1e68423db22b75a58ad5941"], &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x80, 0x2, 0x0, 0xff, 0x3}, 0xbf, &(0x7f0000000440)={0x5, 0xf, 0xbf, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0xe, 0x1000}, @generic={0xa9, 0x10, 0x3, "2cabb78a340cd8e7b21087cad2b72ae6fb58f013d6505bc41c0840ea5e3d96dfd3890c3645f4008ab0f39d80d4cb1ce9ebfdf6841223fd44430e4ad4935665bc9a32d94fd6639fcfa9254bf8074dd5ec66625da260268040d0e3f0feeaffa101f169c2951064eda519a88c2d070d567611b22de6a08754dd1a7ead8706748af2a162631a70ed13e51ef12d2358abdbcbcffd1bca95702265ba31bc2462246471c55c4dec2ce2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x4, 0x5}]}, 0x1, [{0x7, &(0x7f0000000500)=@string={0x7, 0x3, "ef09255def"}}]}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/locks\x00', 0x0, 0x0) pread64(r10, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 0s ago: executing program 3 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x403) dup3(r4, r3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x80) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0x1}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x8001, 0x4000000, 0x8, 0x8, r1, 0x7, '\x00', 0x0, r0, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="aaaf2af8765ceb75b221f3723fcd26", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) kernel console output (not intermixed with test programs): = 1 limit=128 [ 62.698525][ T4133] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 62.708254][ T4133] syz.3.169: attempt to access beyond end of device [ 62.708254][ T4133] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 62.722020][ T4133] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 62.731904][ T4133] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 62.759211][ T4133] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 62.810782][ T3317] cgroup: fork rejected by pids controller in /syz4 [ 62.849854][ T4149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 62.909209][ T4151] loop3: detected capacity change from 0 to 1024 [ 62.929586][ T4151] EXT4-fs: Ignoring removed nobh option [ 62.947888][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.995744][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 63.028612][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.134152][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.145226][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 63.239911][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.251724][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 63.405899][ T4166] vcan0: entered allmulticast mode [ 63.413354][ T4166] vcan0: left allmulticast mode [ 63.450839][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.461670][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 63.474415][ T1044] usb 5-1: enqueue for inactive port 0 [ 63.480840][ T1044] usb 5-1: enqueue for inactive port 0 [ 63.556487][ T1044] vhci_hcd: vhci_device speed not set [ 63.611393][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.622575][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 64.645823][ T4178] xt_hashlimit: max too large, truncated to 1048576 [ 64.654957][ T31] bridge_slave_1: left allmulticast mode [ 64.661179][ T31] bridge_slave_1: left promiscuous mode [ 64.667244][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.809350][ T31] bridge_slave_0: left allmulticast mode [ 64.815260][ T31] bridge_slave_0: left promiscuous mode [ 64.821272][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.928551][ T31] bond2 (unregistering): (slave geneve2): Releasing active interface [ 64.942886][ T4182] netlink: 'syz.2.185': attribute type 10 has an invalid length. [ 64.951137][ T4182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.185'. [ 65.039796][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.051488][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.063984][ T31] bond0 (unregistering): Released all slaves [ 65.075723][ T31] bond1 (unregistering): Released all slaves [ 65.085921][ T31] bond2 (unregistering): Released all slaves [ 65.162470][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.171473][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.180259][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230380][ T4182] team0: Port device geneve1 added [ 65.268323][ T4175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.319703][ T3392] syz2: Port: 1 Link DOWN [ 65.357488][ T4175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.403176][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 65.403195][ T29] audit: type=1326 audit(1748850366.368:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.445542][ T31] hsr_slave_0: left promiscuous mode [ 65.463012][ T31] hsr_slave_1: left promiscuous mode [ 65.473203][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.480821][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.520233][ T29] audit: type=1326 audit(1748850366.408:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.544517][ T29] audit: type=1326 audit(1748850366.408:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.568169][ T29] audit: type=1326 audit(1748850366.408:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.591732][ T29] audit: type=1326 audit(1748850366.408:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.615445][ T29] audit: type=1326 audit(1748850366.408:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.638885][ T29] audit: type=1326 audit(1748850366.408:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.662670][ T29] audit: type=1326 audit(1748850366.408:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.687328][ T29] audit: type=1326 audit(1748850366.408:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.711969][ T29] audit: type=1326 audit(1748850366.408:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 65.750950][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.758658][ T4230] loop3: detected capacity change from 0 to 512 [ 65.759119][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.775788][ T4230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.792398][ T31] veth1_vlan: left promiscuous mode [ 65.798818][ T31] veth0_vlan: left promiscuous mode [ 65.819169][ T4230] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.189: bg 0: block 254: padding at end of block bitmap is not set [ 65.834119][ T4230] EXT4-fs (loop3): Remounting filesystem read-only [ 65.852730][ T4230] EXT4-fs (loop3): 1 truncate cleaned up [ 65.859177][ T4230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.909432][ T31] team0 (unregistering): Port device team_slave_1 removed [ 65.925939][ T31] team0 (unregistering): Port device team_slave_0 removed [ 65.949986][ T4266] smc: removing ib device syz2 [ 65.989617][ T4175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.059459][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.094217][ T4175] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111074][ T4175] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153265][ T4175] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176991][ T4271] loop3: detected capacity change from 0 to 2048 [ 66.230240][ T4175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.294454][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.316197][ T4204] lo speed is unknown, defaulting to 1000 [ 66.348088][ T4271] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.438779][ T4161] lo speed is unknown, defaulting to 1000 [ 66.621914][ T4161] chnl_net:caif_netlink_parms(): no params data found [ 66.777189][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.784669][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.802362][ T4161] bridge_slave_0: entered allmulticast mode [ 66.812964][ T4161] bridge_slave_0: entered promiscuous mode [ 66.828039][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.835913][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.843850][ T4161] bridge_slave_1: entered allmulticast mode [ 66.844084][ T4222] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:31: bg 0: block 345: padding at end of block bitmap is not set [ 66.852981][ T4161] bridge_slave_1: entered promiscuous mode [ 66.874025][ T4222] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 66.887209][ T4222] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.887209][ T4222] [ 66.928020][ T4300] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 66.938469][ T4161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.950432][ T4161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.988215][ T4161] team0: Port device team_slave_0 added [ 67.006669][ T4161] team0: Port device team_slave_1 added [ 67.039208][ T4240] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 63 with error 28 [ 67.052544][ T4240] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.052544][ T4240] [ 67.063016][ T4240] EXT4-fs (loop3): Total free blocks count 0 [ 67.069439][ T4240] EXT4-fs (loop3): Free/Dirty block details [ 67.076150][ T4240] EXT4-fs (loop3): free_blocks=0 [ 67.081456][ T4240] EXT4-fs (loop3): dirty_blocks=64 [ 67.086926][ T4240] EXT4-fs (loop3): Block reservation details [ 67.099215][ T4161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.106818][ T4161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.134522][ T4161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.198341][ T4161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.205635][ T4161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.233569][ T4161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.275059][ T4305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.281981][ T4305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.290187][ T4305] vhci_hcd vhci_hcd.0: Device attached [ 67.305948][ T4309] futex_wake_op: syz.0.199 tries to shift op by -1; fix this program [ 67.344204][ T4161] hsr_slave_0: entered promiscuous mode [ 67.362802][ T4161] hsr_slave_1: entered promiscuous mode [ 67.399194][ T4306] vhci_hcd: connection closed [ 67.406962][ T4202] vhci_hcd: stop threads [ 67.417815][ T4202] vhci_hcd: release socket [ 67.422995][ T4202] vhci_hcd: disconnect device [ 67.425080][ T4161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.449644][ T4271] syz.3.190 (4271) used greatest stack depth: 6064 bytes left [ 67.458265][ T4161] Cannot create hsr debugfs directory [ 67.475601][ T4311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 67.476660][ T3393] vhci_hcd: vhci_device speed not set [ 67.788209][ T4161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.810049][ T4161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.829978][ T4161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.855418][ T4161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.910697][ T4161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.927688][ T4161] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.939779][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.947302][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.973972][ T4161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.985313][ T4161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.000171][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.007792][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.109054][ T4161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.154148][ T4337] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 68.160926][ T4337] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.168728][ T4337] vhci_hcd vhci_hcd.0: Device attached [ 68.179765][ T4337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 68.192643][ T4339] vhci_hcd: connection closed [ 68.192921][ T4226] vhci_hcd: stop threads [ 68.202117][ T4226] vhci_hcd: release socket [ 68.206827][ T4226] vhci_hcd: disconnect device [ 68.364001][ T4161] veth0_vlan: entered promiscuous mode [ 68.386956][ T4161] veth1_vlan: entered promiscuous mode [ 68.406745][ T3393] vhci_hcd: vhci_device speed not set [ 68.409621][ T4161] veth0_macvtap: entered promiscuous mode [ 68.431564][ T4161] veth1_macvtap: entered promiscuous mode [ 68.459966][ T4161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.470243][ T4161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.490325][ T4161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.499870][ T4161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.509507][ T4161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.518848][ T4161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.664698][ T4354] process 'syz.2.206' launched '/dev/fd/7' with NULL argv: empty string added [ 68.766513][ T4366] netlink: 76 bytes leftover after parsing attributes in process `syz.4.208'. [ 68.826568][ T4366] loop4: detected capacity change from 0 to 1024 [ 69.059476][ T4385] loop3: detected capacity change from 0 to 2048 [ 69.072946][ T4389] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 69.080915][ T4389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.210'. [ 69.100232][ T4385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.134477][ T4385] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.214: iget: bogus i_mode (4355) [ 69.174429][ T4388] lo speed is unknown, defaulting to 1000 [ 69.186469][ T4388] lo speed is unknown, defaulting to 1000 [ 69.196810][ T4388] lo speed is unknown, defaulting to 1000 [ 69.204851][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.234532][ T4388] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.319400][ T4388] lo speed is unknown, defaulting to 1000 [ 69.413519][ T4388] lo speed is unknown, defaulting to 1000 [ 69.432824][ T4388] lo speed is unknown, defaulting to 1000 [ 69.448960][ T4388] lo speed is unknown, defaulting to 1000 [ 69.465127][ T4388] lo speed is unknown, defaulting to 1000 [ 69.657426][ T4402] lo speed is unknown, defaulting to 1000 [ 69.664569][ T4402] lo speed is unknown, defaulting to 1000 [ 70.085614][ T4405] netlink: 52 bytes leftover after parsing attributes in process `syz.4.218'. [ 70.237993][ T4400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 70.412501][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 70.412521][ T29] audit: type=1326 audit(1748850371.378:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 70.445117][ T29] audit: type=1326 audit(1748850371.378:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 70.469746][ T29] audit: type=1326 audit(1748850371.378:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 70.493958][ T29] audit: type=1326 audit(1748850371.378:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 70.519363][ T29] audit: type=1326 audit(1748850371.378:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 70.555775][ T4420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'. [ 70.572970][ T4410] netlink: 108 bytes leftover after parsing attributes in process `syz.1.221'. [ 70.602899][ T4420] netlink: 340 bytes leftover after parsing attributes in process `syz.4.223'. [ 70.626848][ T29] audit: type=1400 audit(1748850371.588:4269): avc: denied { bind } for pid=4417 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.646629][ T29] audit: type=1400 audit(1748850371.588:4270): avc: denied { connect } for pid=4417 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.668914][ T4424] loop4: detected capacity change from 0 to 164 [ 70.817216][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 70.829920][ T29] audit: type=1400 audit(1748850371.748:4271): avc: denied { bind } for pid=4427 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.850215][ T29] audit: type=1400 audit(1748850371.748:4272): avc: denied { getopt } for pid=4427 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.871156][ T29] audit: type=1326 audit(1748850371.748:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 71.321143][ T4435] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.480542][ T4435] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.579027][ T4435] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.593659][ T4431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.651330][ T4435] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.739740][ T4435] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.753131][ T4435] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.775494][ T4435] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.788583][ T4435] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.275241][ T4461] lo speed is unknown, defaulting to 1000 [ 72.383879][ T4461] lo speed is unknown, defaulting to 1000 [ 72.834677][ T4482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 72.855289][ T4482] netlink: 340 bytes leftover after parsing attributes in process `syz.1.239'. [ 72.941892][ T4491] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 72.941973][ T4491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.240'. [ 72.942150][ T4491] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.942262][ T4491] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.943575][ T4491] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 72.943819][ T4491] team0: Failed to send options change via netlink (err -105) [ 72.943840][ T4491] team0: Port device geneve1 added [ 72.988374][ T4485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.992928][ T4480] netlink: 108 bytes leftover after parsing attributes in process `syz.2.237'. [ 73.031389][ T4493] siw: device registration error -23 [ 73.033894][ T4485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.137107][ T4485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.151206][ T4485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163856][ T4485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.186772][ T4485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.447203][ T4500] lo speed is unknown, defaulting to 1000 [ 73.453662][ T4500] lo speed is unknown, defaulting to 1000 [ 73.795010][ T4504] pim6reg: entered allmulticast mode [ 74.339594][ T4515] loop2: detected capacity change from 0 to 164 [ 74.346467][ T4515] iso9660: Unknown parameter 'ú"v»û½ŽÝ®Øõ HŠžü É­]+M¿#ѱxxø?´rþ94' [ 74.483459][ T4521] hub 9-0:1.0: USB hub found [ 74.488486][ T4521] hub 9-0:1.0: 8 ports detected [ 74.506016][ T4521] loop2: detected capacity change from 0 to 512 [ 74.555879][ T4521] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.251: casefold flag without casefold feature [ 74.571038][ T4521] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.251: couldn't read orphan inode 15 (err -117) [ 74.587992][ T4521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.710657][ T4521] siw: device registration error -23 [ 75.338733][ T4521] lo: entered promiscuous mode [ 75.343672][ T4521] lo: entered allmulticast mode [ 75.444515][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.495609][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 75.495626][ T29] audit: type=1326 audit(1748850376.457:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 75.527214][ T29] audit: type=1326 audit(1748850376.457:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 75.551328][ T29] audit: type=1326 audit(1748850376.457:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 75.578302][ T29] audit: type=1326 audit(1748850376.547:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75a72e969 code=0x7ffc0000 [ 75.621626][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 75.623284][ T4536] lo speed is unknown, defaulting to 1000 [ 75.633465][ T4545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.636673][ T29] audit: type=1400 audit(1748850376.607:4390): avc: denied { write } for pid=4534 comm="syz.3.253" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.663404][ T4545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.668843][ T29] audit: type=1400 audit(1748850376.607:4391): avc: denied { ioctl } for pid=4534 comm="syz.3.253" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.677301][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 75.709447][ T4536] lo speed is unknown, defaulting to 1000 [ 75.716499][ T4544] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.726468][ T4544] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.734871][ T4544] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.742523][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 75.743234][ T4544] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.767065][ T4544] vxlan0: entered promiscuous mode [ 75.886362][ T4552] xt_TCPMSS: Only works on TCP SYN packets [ 75.896994][ T29] audit: type=1400 audit(1748850376.847:4392): avc: denied { setopt } for pid=4535 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.340592][ T29] audit: type=1400 audit(1748850377.307:4393): avc: denied { read write } for pid=4565 comm="syz.4.259" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.365282][ T29] audit: type=1400 audit(1748850377.307:4394): avc: denied { open } for pid=4565 comm="syz.4.259" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.380717][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.397307][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.405139][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.413010][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.420942][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.429105][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.434313][ T4570] loop2: detected capacity change from 0 to 2048 [ 76.436890][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.447157][ T4571] pim6reg: entered allmulticast mode [ 76.451033][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.464311][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.472120][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.480185][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.480955][ T29] audit: type=1326 audit(1748850377.447:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 76.488191][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.519859][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.520631][ T4570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.527985][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.528018][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.541892][ T4570] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.548134][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.575193][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.583227][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.591309][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.599203][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.607077][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.614959][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.622868][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.630852][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.638772][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.646714][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.655417][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.663330][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.671253][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.679143][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.686950][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.694771][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.702711][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.710839][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.718705][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.727335][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.735424][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.744016][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.752443][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.760481][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.768597][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.776779][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.784595][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 76.793945][ T3393] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.822524][ T4580] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 76.829660][ T4251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:57: bg 0: block 345: padding at end of block bitmap is not set [ 76.866368][ T4251] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 160 with error 117 [ 76.880038][ T4251] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.880038][ T4251] [ 77.102534][ T4595] lo: entered promiscuous mode [ 77.107560][ T4595] lo: entered allmulticast mode [ 77.115848][ T3603] lo speed is unknown, defaulting to 1000 [ 77.122200][ T3603] syz2: Port: 1 Link DOWN [ 77.137333][ T3603] lo speed is unknown, defaulting to 1000 [ 77.524278][ T4570] syz.2.262 (4570) used greatest stack depth: 6040 bytes left [ 77.537125][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.096164][ T4620] cgroup: Need name or subsystem set [ 78.187690][ T4631] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.200937][ T4628] loop2: detected capacity change from 0 to 512 [ 78.215547][ T4621] siw: device registration error -23 [ 78.220938][ T4628] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.286: iget: bad i_size value: 38620345925642 [ 78.239616][ T4636] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 78.247928][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.276'. [ 78.249228][ T4628] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.286: couldn't read orphan inode 15 (err -117) [ 78.275684][ T4631] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.286546][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.295572][ T4638] loop4: detected capacity change from 0 to 128 [ 78.306873][ T4636] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.311161][ T4638] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 78.315785][ T4636] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334875][ T4636] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 78.344633][ T4636] team0: Failed to send options change via netlink (err -105) [ 78.352275][ T4636] team0: Port device geneve1 added [ 78.359676][ T4631] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.369953][ T4631] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.394126][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.421915][ T4638] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 78.430379][ T4638] FAT-fs (loop4): Filesystem has been set read-only [ 78.439497][ T4638] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 78.460521][ T4631] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.471004][ T4631] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.493515][ T4641] loop2: detected capacity change from 0 to 512 [ 78.511150][ T4641] EXT4-fs: Ignoring removed i_version option [ 78.524077][ T4641] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.534251][ T4641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.541399][ T4631] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.548641][ T4641] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 78.553330][ T4631] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557849][ T4631] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.581364][ T4631] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.594631][ T4631] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.604000][ T4631] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.618485][ T4631] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.627771][ T4631] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.638856][ T4161] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 78.694973][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 78.701891][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.710803][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 78.747230][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 78.754071][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.761577][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 78.770942][ T4641] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.786621][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 78.786651][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.786694][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 78.795410][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 78.808190][ T4641] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.814619][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.814770][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 78.827174][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 78.834279][ T4641] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.839520][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.839688][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 78.863616][ T4653] vhci_hcd: connection closed [ 78.869896][ T4641] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.875244][ T4644] vhci_hcd: connection closed [ 78.875361][ T4655] vhci_hcd: connection closed [ 78.876104][ T4651] vhci_hcd: connection closed [ 78.881601][ T4647] vhci_hcd: connection closed [ 78.899353][ T4199] vhci_hcd: stop threads [ 78.906317][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 78.909213][ T4199] vhci_hcd: release socket [ 78.909225][ T4199] vhci_hcd: disconnect device [ 78.932521][ T4199] vhci_hcd: stop threads [ 78.932533][ T4199] vhci_hcd: release socket [ 78.932556][ T4199] vhci_hcd: disconnect device [ 78.933528][ T4199] vhci_hcd: stop threads [ 78.933535][ T4199] vhci_hcd: release socket [ 78.933546][ T4199] vhci_hcd: disconnect device [ 78.934704][ T4199] vhci_hcd: stop threads [ 78.934714][ T4199] vhci_hcd: release socket [ 78.934729][ T4199] vhci_hcd: disconnect device [ 78.947737][ T4199] vhci_hcd: stop threads [ 78.977151][ T4650] loop3: detected capacity change from 0 to 128 [ 78.981307][ T4199] vhci_hcd: release socket [ 78.981328][ T4199] vhci_hcd: disconnect device [ 78.997339][ T3533] vhci_hcd: vhci_device speed not set [ 79.005859][ T4641] team0 (unregistering): Port device geneve1 removed [ 79.016581][ T4650] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.038502][ T4650] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.105279][ T4662] block device autoloading is deprecated and will be removed. [ 79.113483][ T4662] bio_check_eod: 4 callbacks suppressed [ 79.113497][ T4662] syz.1.283: attempt to access beyond end of device [ 79.113497][ T4662] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.255928][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.264090][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.272387][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.281238][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.289884][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.297961][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.305657][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.313221][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.321009][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.328845][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.336664][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.344341][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.351990][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.360040][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.368190][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.377083][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.385255][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.393863][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.402684][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.410608][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.418543][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.426828][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.435066][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.444005][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.451758][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.459491][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.467395][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.475412][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.480163][ T4670] lo speed is unknown, defaulting to 1000 [ 79.525069][ T4670] lo speed is unknown, defaulting to 1000 [ 79.538338][ T4675] sd 0:0:1:0: device reset [ 79.569135][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.608502][ T3392] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 79.816232][ T4685] netlink: 'syz.4.289': attribute type 13 has an invalid length. [ 79.824557][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 79.919153][ T4693] loop3: detected capacity change from 0 to 512 [ 79.927616][ T4693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.950385][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.958027][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.996060][ T4694] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 80.015822][ T4693] EXT4-fs (loop3): 1 truncate cleaned up [ 80.022721][ T4693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.246660][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.269010][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.341786][ T4683] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.341836][ T4683] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.341914][ T4683] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.341953][ T4683] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.968323][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 80.968337][ T29] audit: type=1400 audit(1748850381.927:4561): avc: denied { bind } for pid=4702 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.996269][ T29] audit: type=1400 audit(1748850381.927:4562): avc: denied { read } for pid=4702 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.065577][ T4704] loop2: detected capacity change from 0 to 512 [ 81.099942][ T4704] EXT4-fs: Ignoring removed oldalloc option [ 81.128177][ T29] audit: type=1326 audit(1748850382.017:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e249ce969 code=0x0 [ 81.152087][ T29] audit: type=1326 audit(1748850382.067:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.176662][ T29] audit: type=1326 audit(1748850382.067:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.201020][ T29] audit: type=1326 audit(1748850382.077:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.226067][ T29] audit: type=1326 audit(1748850382.077:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.253137][ T29] audit: type=1326 audit(1748850382.077:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.279159][ T29] audit: type=1326 audit(1748850382.077:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.305626][ T29] audit: type=1326 audit(1748850382.077:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9e249ce969 code=0x7ffc0000 [ 81.345946][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 81.357525][ T4710] net_ratelimit: 21 callbacks suppressed [ 81.357552][ T4710] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.372885][ T4704] ext4: Unknown parameter 'smackfsfloor' [ 81.435426][ T4704] loop2: detected capacity change from 0 to 512 [ 81.449308][ T4704] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.466806][ T3533] IPVS: starting estimator thread 0... [ 81.484341][ T4704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.563306][ T4704] EXT4-fs (loop2): 1 truncate cleaned up [ 81.571779][ T4704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.585262][ T4713] IPVS: using max 1728 ests per chain, 86400 per kthread [ 81.620346][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.687120][ T4723] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 81.693874][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.702244][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 81.720264][ T4723] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 81.727113][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.734937][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 81.756790][ T4723] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 81.763822][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.772069][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 81.790751][ T4723] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 81.798107][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.806334][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 81.835513][ T4722] batman_adv: batadv0: Adding interface: dummy0 [ 81.842505][ T4723] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 81.842549][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.849261][ T4722] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.857132][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 81.888993][ T3393] vhci_hcd: vhci_device speed not set [ 81.893046][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.908512][ T4722] batman_adv: batadv0: Interface activated: dummy0 [ 81.932511][ T4728] batadv0: mtu less than device minimum [ 81.939316][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.950932][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.953821][ T4733] vhci_hcd: connection closed [ 81.962084][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.972453][ T4738] sd 0:0:1:0: device reset [ 81.978830][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.983474][ T4726] vhci_hcd: connection closed [ 81.994728][ T4724] vhci_hcd: connection closed [ 81.994798][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.002573][ T4251] vhci_hcd: stop threads [ 82.005967][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.016451][ T4251] vhci_hcd: release socket [ 82.021401][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.031835][ T4251] vhci_hcd: disconnect device [ 82.036915][ T4728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.067796][ T4731] vhci_hcd: connection closed [ 82.067880][ T4729] vhci_hcd: connection closed [ 82.073729][ T3393] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 82.109693][ T4736] loop2: detected capacity change from 0 to 512 [ 82.117162][ T4725] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 82.124481][ T4251] vhci_hcd: stop threads [ 82.129450][ T4251] vhci_hcd: release socket [ 82.134238][ T4251] vhci_hcd: disconnect device [ 82.139525][ T4251] vhci_hcd: stop threads [ 82.144565][ T4251] vhci_hcd: release socket [ 82.149529][ T4251] vhci_hcd: disconnect device [ 82.154826][ T4251] vhci_hcd: stop threads [ 82.156353][ T4736] EXT4-fs (loop2): 1 orphan inode deleted [ 82.159138][ T4251] vhci_hcd: release socket [ 82.159155][ T4251] vhci_hcd: disconnect device [ 82.160579][ T4251] vhci_hcd: stop threads [ 82.165630][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.169683][ T4251] vhci_hcd: release socket [ 82.169701][ T4251] vhci_hcd: disconnect device [ 82.170019][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 82.180437][ T4736] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.234820][ T4736] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.379468][ T4750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 82.394351][ T4750] tipc: Enabling of bearer rejected, failed to enable media [ 82.427660][ T4750] loop4: detected capacity change from 0 to 2050 [ 82.434996][ T4751] netlink: 'syz.1.304': attribute type 13 has an invalid length. [ 82.446352][ T4750] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 82.473747][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.482946][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.546252][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 82.555820][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.563948][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.621488][ T4756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.630845][ T4756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.781730][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.906148][ T4763] loop2: detected capacity change from 0 to 1024 [ 82.918551][ T4763] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.931543][ T4763] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 82.953316][ T4763] JBD2: no valid journal superblock found [ 82.959845][ T4763] EXT4-fs (loop2): Could not load journal inode [ 82.976381][ T4763] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 83.022443][ T4770] loop3: detected capacity change from 0 to 128 [ 83.147970][ T4775] loop3: detected capacity change from 0 to 128 [ 83.168076][ T4775] syz.3.311: attempt to access beyond end of device [ 83.168076][ T4775] loop3: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 83.182023][ T4775] syz.3.311: attempt to access beyond end of device [ 83.182023][ T4775] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 83.195572][ T4775] buffer_io_error: 2 callbacks suppressed [ 83.195585][ T4775] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 83.210355][ T4775] syz.3.311: attempt to access beyond end of device [ 83.210355][ T4775] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 83.223932][ T4775] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 83.232642][ T4775] syz.3.311: attempt to access beyond end of device [ 83.232642][ T4775] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 83.246128][ T4775] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 83.256383][ T4775] syz.3.311: attempt to access beyond end of device [ 83.256383][ T4775] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 83.269890][ T4775] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 83.286517][ T4778] loop4: detected capacity change from 0 to 512 [ 83.293780][ T4778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.307808][ T4778] EXT4-fs (loop4): 1 truncate cleaned up [ 83.315085][ T4778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.337899][ T4775] syz.3.311: attempt to access beyond end of device [ 83.337899][ T4775] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 83.351403][ T4775] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 83.361557][ T4775] syz.3.311: attempt to access beyond end of device [ 83.361557][ T4775] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 83.375014][ T4775] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 83.385479][ T4775] syz.3.311: attempt to access beyond end of device [ 83.385479][ T4775] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 83.399026][ T4775] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 83.587406][ T4775] syz.3.311: attempt to access beyond end of device [ 83.587406][ T4775] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 83.601114][ T4775] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 83.743633][ T4775] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 83.778885][ T4775] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 84.302672][ T4788] siw: device registration error -23 [ 84.423295][ T4799] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.452746][ T4799] tipc: Enabling of bearer rejected, failed to enable media [ 84.484060][ T4799] loop2: detected capacity change from 0 to 2050 [ 84.549939][ T4799] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 84.965238][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.073842][ T4807] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 85.081786][ T4807] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.319'. [ 85.217055][ T4816] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 85.236162][ T4818] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 85.260066][ T4818] loop2: detected capacity change from 0 to 512 [ 85.292588][ T4818] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 85.308606][ T4818] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.329994][ T4818] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.335: corrupted inode contents [ 85.368586][ T4818] EXT4-fs (loop2): Remounting filesystem read-only [ 85.385754][ T4818] EXT4-fs (loop2): 1 truncate cleaned up [ 85.394342][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.405122][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.451262][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.467351][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.535007][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.737769][ T4824] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 85.878734][ T4840] lo speed is unknown, defaulting to 1000 [ 85.885743][ T4840] lo speed is unknown, defaulting to 1000 [ 85.896215][ T4843] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.906867][ T4844] Illegal XDP return value 4294967294 on prog (id 349) dev N/A, expect packet loss! [ 85.950704][ T4843] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.980257][ T4841] batman_adv: batadv0: Adding interface: dummy0 [ 85.986676][ T4841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.029414][ T4841] batman_adv: batadv0: Interface activated: dummy0 [ 86.098744][ T4843] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.119218][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 86.119236][ T29] audit: type=1326 audit(1748850388.087:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.151434][ T4853] sd 0:0:1:0: device reset [ 86.169366][ T29] audit: type=1326 audit(1748850388.087:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.195783][ T29] audit: type=1326 audit(1748850388.117:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.220781][ T29] audit: type=1326 audit(1748850388.117:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.244583][ T29] audit: type=1326 audit(1748850388.117:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.268006][ T29] audit: type=1326 audit(1748850388.117:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddbcd2d2d0 code=0x7ffc0000 [ 86.291636][ T29] audit: type=1326 audit(1748850388.117:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.310760][ T4840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.341'. [ 86.315454][ T29] audit: type=1326 audit(1748850388.117:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.348434][ T29] audit: type=1326 audit(1748850388.117:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.372321][ T29] audit: type=1326 audit(1748850388.117:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 86.432428][ T4856] bio_check_eod: 10 callbacks suppressed [ 86.432462][ T4856] syz.3.334: attempt to access beyond end of device [ 86.432462][ T4856] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.466787][ T4860] loop4: detected capacity change from 0 to 1024 [ 86.475160][ T4860] EXT4-fs: Ignoring removed orlov option [ 86.481695][ T4860] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.513834][ T4843] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.536309][ T4860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.596004][ T4843] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.619130][ T4843] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.650499][ T4843] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.700463][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.714342][ T4843] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.099612][ T4880] loop2: detected capacity change from 0 to 128 [ 87.138923][ T3393] usb 7-1: enqueue for inactive port 0 [ 87.144650][ T3393] usb 7-1: enqueue for inactive port 0 [ 87.178276][ T4880] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.192496][ T4880] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.291722][ T4874] loop3: detected capacity change from 0 to 512 [ 87.731536][ T4891] random: crng reseeded on system resumption [ 87.755210][ T3393] vhci_hcd: vhci_device speed not set [ 87.812016][ T4874] EXT4-fs (loop3): 1 orphan inode deleted [ 87.830162][ T4251] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 1 [ 87.846044][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.952524][ T4874] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.979061][ T4899] sd 0:0:1:0: device reset [ 87.992581][ T4898] loop4: detected capacity change from 0 to 1024 [ 88.007417][ T4874] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.017485][ T4898] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.019259][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.029287][ T4898] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.050394][ T4898] JBD2: no valid journal superblock found [ 88.057476][ T4898] EXT4-fs (loop4): Could not load journal inode [ 88.090935][ T4903] sd 0:0:1:0: device reset [ 88.103422][ T4889] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.204159][ T4912] syzkaller1: entered promiscuous mode [ 88.210098][ T4912] syzkaller1: entered allmulticast mode [ 88.252234][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.256402][ T4912] macsec1: entered promiscuous mode [ 88.267317][ T4912] hsr0: entered promiscuous mode [ 88.272638][ T4912] macsec1: entered allmulticast mode [ 88.277963][ T4912] hsr0: entered allmulticast mode [ 88.283114][ T4912] hsr_slave_0: entered allmulticast mode [ 88.288854][ T4912] hsr_slave_1: entered allmulticast mode [ 88.300713][ T4912] hsr0: left allmulticast mode [ 88.305564][ T4912] hsr_slave_0: left allmulticast mode [ 88.311126][ T4912] hsr_slave_1: left allmulticast mode [ 88.317203][ T4912] hsr0: left promiscuous mode [ 88.460016][ T4926] syz.4.352: attempt to access beyond end of device [ 88.460016][ T4926] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.530520][ T4928] loop3: detected capacity change from 0 to 1764 [ 88.702039][ T4922] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.951072][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 88.958936][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 88.966884][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 88.971273][ T4949] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 88.974827][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 88.991591][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 88.999591][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.007402][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.015478][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.023562][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.031662][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.039843][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.047659][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.055636][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.063731][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.071582][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.079692][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.081874][ T4956] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 89.087667][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.087700][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.095382][ T4956] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.363'. [ 89.103225][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.124377][ T4947] loop4: detected capacity change from 0 to 512 [ 89.127922][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.128024][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.135734][ T4947] EXT4-fs: Ignoring removed orlov option [ 89.142052][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.142083][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.171260][ T4947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.171540][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.188452][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.196656][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.204774][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.212705][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.220887][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.229468][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.237680][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.245712][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.253583][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.259822][ T4947] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.261368][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.268727][ T4947] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.360: bg 0: block 248: padding at end of block bitmap is not set [ 89.275777][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.297193][ T4947] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.360: Failed to acquire dquot type 1 [ 89.297695][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.316952][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.322675][ T4947] EXT4-fs (loop4): 1 truncate cleaned up [ 89.325131][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.333162][ T4947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.338481][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.352693][ T4947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.359477][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.377202][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.385457][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.393326][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.405291][ T36] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.460153][ T4962] syzkaller1: entered promiscuous mode [ 89.465784][ T4962] syzkaller1: entered allmulticast mode [ 89.525652][ T4962] macsec1: entered promiscuous mode [ 89.531318][ T4962] hsr0: entered promiscuous mode [ 89.536605][ T4962] macsec1: entered allmulticast mode [ 89.541999][ T4962] hsr0: entered allmulticast mode [ 89.547256][ T4962] hsr_slave_1: entered allmulticast mode [ 89.562713][ T4962] hsr0: left allmulticast mode [ 89.567782][ T4962] hsr_slave_1: left allmulticast mode [ 89.573230][ T4962] hsr0: left promiscuous mode [ 89.612153][ T4974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4974 comm=syz.1.365 [ 89.652977][ T4973] loop4: detected capacity change from 0 to 128 [ 89.673536][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 89.700550][ T4978] loop3: detected capacity change from 0 to 1024 [ 89.704293][ T4973] syz.4.367: attempt to access beyond end of device [ 89.704293][ T4973] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 89.729428][ T4973] syz.4.367: attempt to access beyond end of device [ 89.729428][ T4973] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 89.743735][ T4973] buffer_io_error: 8 callbacks suppressed [ 89.743751][ T4973] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 89.760093][ T4973] syz.4.367: attempt to access beyond end of device [ 89.760093][ T4973] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 89.774093][ T4973] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 89.783874][ T4973] syz.4.367: attempt to access beyond end of device [ 89.783874][ T4973] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 89.785657][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.798543][ T4973] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 89.805683][ T4984] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 89.813185][ T4978] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.834595][ T4973] syz.4.367: attempt to access beyond end of device [ 89.834595][ T4973] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 89.859278][ T4973] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 89.910758][ T4973] syz.4.367: attempt to access beyond end of device [ 89.910758][ T4973] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 89.925650][ T4973] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 89.938660][ T4973] syz.4.367: attempt to access beyond end of device [ 89.938660][ T4973] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 89.952534][ T4973] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 89.961178][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 89.961473][ T4973] syz.4.367: attempt to access beyond end of device [ 89.961473][ T4973] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 89.983976][ T4973] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 90.000797][ T4990] loop2: detected capacity change from 0 to 1024 [ 90.002163][ T4989] block device autoloading is deprecated and will be removed. [ 90.008896][ T4990] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 90.027493][ T4973] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 90.037969][ T4973] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 90.050254][ T4990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.064701][ T4973] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 90.106486][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.193766][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.345545][ T5004] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.356860][ T5007] loop2: detected capacity change from 0 to 512 [ 90.364569][ T5004] loop4: detected capacity change from 0 to 512 [ 90.365448][ T5007] /dev/loop2: Can't open blockdev [ 90.381295][ T5004] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.381887][ T5007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5007 comm=syz.2.376 [ 90.390442][ T5004] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.411248][ T5004] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.374: corrupted inode contents [ 90.423766][ T5004] EXT4-fs (loop4): Remounting filesystem read-only [ 90.431856][ T5004] EXT4-fs (loop4): 1 truncate cleaned up [ 90.437774][ T4251] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.448713][ T4251] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.460289][ T4251] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.479529][ T5004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.525232][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.528047][ T5014] loop2: detected capacity change from 0 to 1024 [ 90.541488][ T5014] EXT4-fs: Ignoring removed orlov option [ 90.547761][ T5014] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.562623][ T5017] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.377'. [ 90.574313][ T5014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.591718][ T5012] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.377'. [ 90.633865][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.717858][ T5016] loop4: detected capacity change from 0 to 1024 [ 90.724616][ T5027] loop1: detected capacity change from 0 to 512 [ 90.731413][ T5027] EXT4-fs: Ignoring removed orlov option [ 90.737610][ T5027] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 90.742038][ T5016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.751136][ T5027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 90.770503][ T5027] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.381: corrupted in-inode xattr: e_value size too large [ 90.806350][ T5027] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.381: couldn't read orphan inode 15 (err -117) [ 90.819596][ T5027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.989196][ T5016] smc: net device bond0 applied user defined pnetid SYZ2 [ 91.064732][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.209857][ T5041] random: crng reseeded on system resumption [ 91.218528][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 91.218546][ T29] audit: type=1326 audit(1748850393.177:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1bbe969 code=0x0 [ 91.287213][ T5047] loop3: detected capacity change from 0 to 1024 [ 91.295428][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.306681][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.318038][ T5047] JBD2: no valid journal superblock found [ 91.324399][ T5047] EXT4-fs (loop3): Could not load journal inode [ 91.330950][ T29] audit: type=1400 audit(1748850393.287:5324): avc: denied { getopt } for pid=5044 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.364395][ T5043] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 91.378169][ T29] audit: type=1326 audit(1748850393.337:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.429763][ T29] audit: type=1326 audit(1748850393.337:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.453415][ T29] audit: type=1326 audit(1748850393.337:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.478325][ T29] audit: type=1326 audit(1748850393.337:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.503907][ T29] audit: type=1326 audit(1748850393.337:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.511924][ T5054] loop3: detected capacity change from 0 to 128 [ 91.527960][ T29] audit: type=1326 audit(1748850393.337:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.559123][ T29] audit: type=1326 audit(1748850393.337:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.582881][ T29] audit: type=1326 audit(1748850393.337:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba9a5e969 code=0x7ffc0000 [ 91.608071][ T5054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.623927][ T5054] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.657529][ T5057] loop2: detected capacity change from 0 to 164 [ 91.665845][ T5057] isofs_fill_super: root inode is not a directory. Corrupted media? [ 91.692149][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.709065][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 91.721049][ T5057] loop2: detected capacity change from 0 to 512 [ 91.728077][ T5057] EXT4-fs: Ignoring removed oldalloc option [ 91.745447][ T5057] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.389: Parent and EA inode have the same ino 15 [ 91.759790][ T5057] EXT4-fs (loop2): Remounting filesystem read-only [ 91.767257][ T5057] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 91.779837][ T5057] EXT4-fs (loop2): 1 orphan inode deleted [ 91.788428][ T5057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.817365][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.842498][ T5065] loop3: detected capacity change from 0 to 1024 [ 91.845331][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.850240][ T5065] EXT4-fs: Ignoring removed orlov option [ 91.866704][ T5065] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.881201][ T5065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.938181][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.028425][ T5069] bio_check_eod: 11 callbacks suppressed [ 92.028479][ T5069] syz.2.392: attempt to access beyond end of device [ 92.028479][ T5069] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.163159][ T5063] loop1: detected capacity change from 0 to 512 [ 92.175117][ T5083] loop2: detected capacity change from 0 to 512 [ 92.232912][ T5092] bond0: entered promiscuous mode [ 92.238275][ T5092] bond_slave_0: entered promiscuous mode [ 92.244483][ T5092] bond_slave_1: entered promiscuous mode [ 92.271445][ T5063] EXT4-fs (loop1): 1 orphan inode deleted [ 92.278042][ T5063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.280168][ T5083] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.398: corrupted in-inode xattr: invalid ea_ino [ 92.305726][ T4199] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 92.320412][ T1044] srz1: Port: 1 Link DOWN [ 92.325695][ T5083] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 92.328986][ T5063] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.340044][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.392604][ T5063] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.500599][ T5103] net_ratelimit: 32 callbacks suppressed [ 92.500697][ T5103] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 92.526082][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.714368][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.943972][ T5112] netlink: 64 bytes leftover after parsing attributes in process `+}[@'. [ 93.192043][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 93.225327][ T5120] lo: left promiscuous mode [ 93.245454][ T5120] batman_adv: batadv0: Interface deactivated: dummy0 [ 93.256096][ T5118] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 93.267301][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 93.292399][ T5114] netlink: 'syz.4.408': attribute type 10 has an invalid length. [ 93.300518][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.408'. [ 93.314630][ T5114] dummy0: entered promiscuous mode [ 93.359739][ T5114] bridge0: port 3(dummy0) entered blocking state [ 93.366158][ T5114] bridge0: port 3(dummy0) entered disabled state [ 93.389126][ T5114] dummy0: entered allmulticast mode [ 93.394941][ T5124] capability: warning: `GPL' uses deprecated v2 capabilities in a way that may be insecure [ 93.568617][ T5124] lo speed is unknown, defaulting to 1000 [ 93.575204][ T5132] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 93.640879][ T5124] lo speed is unknown, defaulting to 1000 [ 93.990042][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 94.017394][ T5138] bond1: entered promiscuous mode [ 94.022586][ T5138] bond1: entered allmulticast mode [ 94.028167][ T5138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.121678][ T5141] loop3: detected capacity change from 0 to 128 [ 94.176534][ T5144] lo speed is unknown, defaulting to 1000 [ 94.183063][ T5144] lo speed is unknown, defaulting to 1000 [ 94.200112][ T5147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5147 comm=syz.3.416 [ 94.238879][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 94.270780][ T5147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.279260][ T5147] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.287808][ T5147] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.296615][ T5147] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.325379][ T5147] vxlan0: entered promiscuous mode [ 94.343347][ T5145] dummy0: left allmulticast mode [ 94.348824][ T5145] bridge0: port 3(dummy0) entered disabled state [ 94.370716][ T5153] netlink: 3 bytes leftover after parsing attributes in process `syz.2.417'. [ 94.380650][ T5153] 0ªX¹¦À: renamed from caif0 [ 94.387624][ T5153] 0ªX¹¦À: entered allmulticast mode [ 94.393037][ T5153] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 94.465556][ T5153] lo speed is unknown, defaulting to 1000 [ 94.483623][ T5153] lo speed is unknown, defaulting to 1000 [ 94.682319][ T5160] siw: device registration error -23 [ 94.714232][ T5162] loop2: detected capacity change from 0 to 128 [ 94.746306][ T5162] syz.2.420: attempt to access beyond end of device [ 94.746306][ T5162] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 94.760643][ T5162] syz.2.420: attempt to access beyond end of device [ 94.760643][ T5162] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 94.774126][ T5162] buffer_io_error: 8 callbacks suppressed [ 94.774141][ T5162] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 94.788603][ T5162] syz.2.420: attempt to access beyond end of device [ 94.788603][ T5162] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 94.790548][ T5165] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.802131][ T5162] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 94.820620][ T5162] syz.2.420: attempt to access beyond end of device [ 94.820620][ T5162] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 94.834556][ T5162] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 94.845458][ T5162] syz.2.420: attempt to access beyond end of device [ 94.845458][ T5162] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 94.859580][ T5162] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 94.871342][ T5162] syz.2.420: attempt to access beyond end of device [ 94.871342][ T5162] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 94.886539][ T5162] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 94.895859][ T5162] syz.2.420: attempt to access beyond end of device [ 94.895859][ T5162] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 94.912895][ T5162] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 94.928818][ T5162] syz.2.420: attempt to access beyond end of device [ 94.928818][ T5162] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 94.932585][ T5167] loop1: detected capacity change from 0 to 1024 [ 94.942461][ T5162] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 94.943501][ T5162] syz.2.420: attempt to access beyond end of device [ 94.943501][ T5162] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 94.951959][ T5167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.957893][ T5162] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 94.973230][ T5167] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.981563][ T5162] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 95.008868][ T5162] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 95.027409][ T5167] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 95.051203][ T5167] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.422: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.078563][ T5167] EXT4-fs (loop1): Remounting filesystem read-only [ 95.088049][ T5167] EXT4-fs (loop1): 1 orphan inode deleted [ 95.098677][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.111171][ T5169] lo speed is unknown, defaulting to 1000 [ 95.130394][ T5167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.139475][ T5169] lo speed is unknown, defaulting to 1000 [ 95.180537][ T5176] sd 0:0:1:0: device reset [ 95.203574][ T5179] vti0: entered allmulticast mode [ 95.231266][ T5183] batman_adv: batadv0: Removing interface: dummy0 [ 95.259941][ T5189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 95.266509][ T5189] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.274891][ T5189] vhci_hcd vhci_hcd.0: Device attached [ 95.287393][ T5186] futex_wake_op: syz.0.430 tries to shift op by -1; fix this program [ 95.304857][ T5189] vhci_hcd vhci_hcd.0: port 0 already used [ 95.367958][ T5190] vhci_hcd: connection closed [ 95.368145][ T4251] vhci_hcd: stop threads [ 95.377475][ T4251] vhci_hcd: release socket [ 95.382168][ T4251] vhci_hcd: disconnect device [ 95.424478][ T5194] netlink: 'syz.4.428': attribute type 21 has an invalid length. [ 95.443636][ T5194] loop4: detected capacity change from 0 to 512 [ 95.467586][ T5194] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 95.487230][ T5194] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.428: bad orphan inode 15 [ 95.614671][ T5201] lo speed is unknown, defaulting to 1000 [ 95.622184][ T5201] lo speed is unknown, defaulting to 1000 [ 96.043358][ T5194] ext4_test_bit(bit=14, block=18) = 1 [ 96.049024][ T5194] is_bad_inode(inode)=0 [ 96.053544][ T5194] NEXT_ORPHAN(inode)=1023 [ 96.058160][ T5194] max_ino=32 [ 96.061624][ T5194] i_nlink=0 [ 96.090294][ T5194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 96.124116][ T5194] ext2 filesystem being mounted at /40/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 96.352247][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 96.377841][ T5217] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.403589][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 96.403607][ T29] audit: type=1326 audit(1748850398.367:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.456354][ T5215] lo speed is unknown, defaulting to 1000 [ 96.470419][ T5222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5222 comm=syz.0.436 [ 96.478815][ T29] audit: type=1326 audit(1748850398.417:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.490447][ T5217] loop3: detected capacity change from 0 to 1024 [ 96.508800][ T29] audit: type=1326 audit(1748850398.417:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.518327][ T5215] lo speed is unknown, defaulting to 1000 [ 96.540746][ T29] audit: type=1326 audit(1748850398.417:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.540780][ T29] audit: type=1326 audit(1748850398.417:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 96.579988][ T5217] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 96.600994][ T29] audit: type=1326 audit(1748850398.417:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 96.611133][ T5217] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 96.648929][ T29] audit: type=1326 audit(1748850398.417:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fddbcd2e9a3 code=0x7ffc0000 [ 96.648892][ T5217] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.649850][ T5217] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.435: unexpected bad inode w/o EXT4_IGET_BAD [ 96.673878][ T29] audit: type=1326 audit(1748850398.417:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddbcd2d41f code=0x7ffc0000 [ 96.673917][ T29] audit: type=1326 audit(1748850398.427:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.673950][ T29] audit: type=1326 audit(1748850398.427:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1bbe969 code=0x7ffc0000 [ 96.772139][ T5224] siw: device registration error -23 [ 96.792137][ T5217] EXT4-fs (loop3): no journal found [ 96.797485][ T5217] EXT4-fs (loop3): can't get journal size [ 96.824751][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.894144][ T5227] loop1: detected capacity change from 0 to 128 [ 96.923348][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.989051][ T5236] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 96.996179][ T5236] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.004627][ T5236] vhci_hcd vhci_hcd.0: Device attached [ 97.066158][ T5243] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 97.115388][ T5240] batman_adv: batadv0: Adding interface: dummy0 [ 97.121793][ T5240] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.149142][ T5240] batman_adv: batadv0: Interface activated: dummy0 [ 97.156947][ T5238] vhci_hcd: connection closed [ 97.157207][ T4239] vhci_hcd: stop threads [ 97.166343][ T4239] vhci_hcd: release socket [ 97.171169][ T4239] vhci_hcd: disconnect device [ 97.188947][ T3533] vhci_hcd: vhci_device speed not set [ 97.197631][ T5240] batadv0: mtu less than device minimum [ 97.204033][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.215466][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.226515][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.237565][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.248659][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.259752][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.270492][ T5240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.790479][ T5267] __nla_validate_parse: 3 callbacks suppressed [ 97.790500][ T5267] netlink: 596 bytes leftover after parsing attributes in process `syz.4.449'. [ 97.901064][ T5270] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 97.915002][ T5271] net_ratelimit: 12 callbacks suppressed [ 97.915027][ T5271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.927673][ T5271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.969443][ T5271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.976500][ T5271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.999550][ T5271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.006320][ T5271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.026678][ T5271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.034732][ T5271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.059547][ T5271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.066430][ T5271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.437740][ T5287] loop2: detected capacity change from 0 to 512 [ 98.490568][ T5287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.519814][ T5287] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.663950][ T5292] loop4: detected capacity change from 0 to 512 [ 98.688595][ T5292] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.457: corrupted in-inode xattr: invalid ea_ino [ 98.716010][ T5295] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.454: iget: bad i_size value: 2533274857506816 [ 98.730461][ T5292] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.457: couldn't read orphan inode 15 (err -117) [ 98.744306][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.757195][ T5298] loop3: detected capacity change from 0 to 1024 [ 98.767733][ T5298] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.778818][ T5298] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.796936][ T5298] JBD2: no valid journal superblock found [ 98.803299][ T5298] EXT4-fs (loop3): Could not load journal inode [ 98.827950][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 98.861265][ T5298] loop3: detected capacity change from 0 to 128 [ 98.870573][ T5298] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.889062][ T5298] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.939348][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.959888][ T5305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5305 comm=syz.0.459 [ 98.972928][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 98.983570][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.991830][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 99.005019][ T5307] loop1: detected capacity change from 0 to 512 [ 99.013898][ T5307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.037375][ T5307] EXT4-fs (loop1): 1 truncate cleaned up [ 99.043516][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.070695][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.085636][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 99.096292][ T5314] batman_adv: batadv0: Interface deactivated: dummy0 [ 99.103385][ T5314] batman_adv: batadv0: Removing interface: dummy0 [ 99.111523][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.119659][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.127746][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.135332][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.272187][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.315978][ T5325] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 99.412479][ T5327] loop3: detected capacity change from 0 to 1024 [ 99.452908][ T5327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.456470][ T5333] dvmrp1: entered allmulticast mode [ 99.490973][ T5329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 99.511610][ T5329] loop2: detected capacity change from 0 to 2048 [ 99.542051][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.559848][ T5335] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 99.566565][ T5335] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.574195][ T5335] vhci_hcd vhci_hcd.0: Device attached [ 99.582800][ T5335] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 99.589928][ T5335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.597614][ T5335] vhci_hcd vhci_hcd.0: Device attached [ 99.611850][ T5335] proc: Bad value for 'gid' [ 99.621760][ T5335] netlink: 64 bytes leftover after parsing attributes in process `+}[@'. [ 99.631839][ T5335] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 99.638518][ T5335] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.646492][ T5335] vhci_hcd vhci_hcd.0: Device attached [ 99.653488][ T5342] vhci_hcd: connection closed [ 99.653727][ T12] vhci_hcd: stop threads [ 99.653962][ T5339] vhci_hcd: connection closed [ 99.658449][ T12] vhci_hcd: release socket [ 99.669086][ T5336] vhci_hcd: connection closed [ 99.672120][ T12] vhci_hcd: disconnect device [ 99.682505][ T12] vhci_hcd: stop threads [ 99.687136][ T12] vhci_hcd: release socket [ 99.691718][ T12] vhci_hcd: disconnect device [ 99.696931][ T12] vhci_hcd: stop threads [ 99.701385][ T12] vhci_hcd: release socket [ 99.705852][ T12] vhci_hcd: disconnect device [ 99.758835][ T1044] vhci_hcd: vhci_device speed not set [ 99.882932][ T5351] loop4: detected capacity change from 0 to 164 [ 99.890446][ T5351] isofs_fill_super: root inode is not a directory. Corrupted media? [ 99.903609][ T5353] loop2: detected capacity change from 0 to 2048 [ 99.904723][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 99.958151][ T5356] loop4: detected capacity change from 0 to 512 [ 99.965472][ T5356] EXT4-fs: Ignoring removed oldalloc option [ 99.973969][ T5356] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.474: Parent and EA inode have the same ino 15 [ 99.977469][ T5353] loop2: unable to read partition table [ 99.987300][ T5356] EXT4-fs (loop4): Remounting filesystem read-only [ 99.992920][ T5353] loop2: partition table beyond EOD, truncated [ 99.999933][ T5356] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 100.006634][ T5353] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 100.018805][ T5356] EXT4-fs (loop4): 1 orphan inode deleted [ 100.084253][ T5361] loop4: detected capacity change from 0 to 1024 [ 100.091876][ T5361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.092053][ T5359] loop2: detected capacity change from 0 to 164 [ 100.101227][ T5361] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.119607][ T5361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 100.129276][ T5361] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.476: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.143498][ T5361] EXT4-fs (loop4): Remounting filesystem read-only [ 100.150645][ T5361] EXT4-fs (loop4): 1 orphan inode deleted [ 100.226668][ T5365] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 100.235136][ T5365] netlink: 16 bytes leftover after parsing attributes in process `gtp'. [ 100.252574][ T5365] loop3: detected capacity change from 0 to 2048 [ 100.311486][ T5370] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.314762][ T5372] loop4: detected capacity change from 0 to 764 [ 100.318355][ T5370] batman_adv: batadv0: Removing interface: dummy0 [ 100.332150][ T5372] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 100.336715][ T5370] bridge_slave_0: left allmulticast mode [ 100.346174][ T5370] bridge_slave_0: left promiscuous mode [ 100.352268][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.388519][ T5370] bridge_slave_1: left allmulticast mode [ 100.394670][ T5370] bridge_slave_1: left promiscuous mode [ 100.400561][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.414441][ T5377] netlink: 'syz.0.482': attribute type 18 has an invalid length. [ 100.436289][ T5370] bond0: (slave bond_slave_0): Releasing backup interface [ 100.445581][ T5370] bond0: (slave bond_slave_1): Releasing backup interface [ 100.459750][ T5370] team0: Port device team_slave_0 removed [ 100.467412][ T5381] loop3: detected capacity change from 0 to 128 [ 100.467655][ T5370] team0: Port device team_slave_1 removed [ 100.481233][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.489620][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.500003][ T5370] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.508520][ T5370] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.517328][ T5370] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.525877][ T5370] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.547503][ T5370] team0: Port device geneve1 removed [ 100.596490][ T5380] cgroup2: Unknown parameter 'cpu' [ 100.636800][ T5373] lo speed is unknown, defaulting to 1000 [ 100.643926][ T5373] lo speed is unknown, defaulting to 1000 [ 101.658274][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 101.658292][ T29] audit: type=1326 audit(1748850403.617:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.698925][ T29] audit: type=1326 audit(1748850403.657:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.707533][ T5408] sd 0:0:1:0: device reset [ 101.722792][ T29] audit: type=1326 audit(1748850403.657:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.751090][ T29] audit: type=1326 audit(1748850403.657:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.794295][ T29] audit: type=1326 audit(1748850403.657:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.820258][ T29] audit: type=1326 audit(1748850403.667:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddbcd2d2d0 code=0x7ffc0000 [ 101.845466][ T29] audit: type=1326 audit(1748850403.667:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.870039][ T29] audit: type=1326 audit(1748850403.667:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.893657][ T29] audit: type=1326 audit(1748850403.667:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 101.916985][ T29] audit: type=1326 audit(1748850403.747:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 102.016044][ T5414] loop2: detected capacity change from 0 to 256 [ 102.112722][ T5406] loop4: detected capacity change from 0 to 1024 [ 102.133986][ T5406] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.148552][ T5406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.175172][ T5406] JBD2: no valid journal superblock found [ 102.183580][ T5406] EXT4-fs (loop4): Could not load journal inode [ 102.215154][ T5406] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 102.611884][ T5435] loop3: detected capacity change from 0 to 1024 [ 102.618904][ T5435] EXT4-fs: Ignoring removed bh option [ 102.624372][ T5435] EXT4-fs: inline encryption not supported [ 102.630541][ T5435] EXT4-fs: Ignoring removed i_version option [ 102.637182][ T5435] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.650417][ T5435] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.497: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.666421][ T5435] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.497: Failed to acquire dquot type 0 [ 102.678096][ T5435] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.497: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.691783][ T5435] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.497: Invalid inode bitmap blk 0 in block_group 0 [ 102.705744][ T5435] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 102.715138][ T5435] EXT4-fs (loop3): 1 orphan inode deleted [ 102.721372][ T4259] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.736972][ T4259] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 102.753692][ T5435] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.497: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 102.800349][ T5442] __nla_validate_parse: 6 callbacks suppressed [ 102.800370][ T5442] netlink: 3 bytes leftover after parsing attributes in process `syz.4.498'. [ 102.816730][ T5442] 0ªX¹¦À: renamed from caif0 [ 102.824098][ T5442] 0ªX¹¦À: entered allmulticast mode [ 102.845586][ T5444] vti0: entered allmulticast mode [ 102.884605][ T5442] lo speed is unknown, defaulting to 1000 [ 102.891404][ T5442] lo speed is unknown, defaulting to 1000 [ 102.917952][ T5445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.498'. [ 103.139712][ T5446] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 103.161814][ T5446] loop2: detected capacity change from 0 to 512 [ 103.169104][ T5456] loop4: detected capacity change from 0 to 8192 [ 103.176489][ T5446] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.254535][ T5446] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.509: bad orphan inode 15 [ 103.302321][ T5446] ext4_test_bit(bit=14, block=18) = 1 [ 103.308170][ T5446] is_bad_inode(inode)=0 [ 103.312526][ T5446] NEXT_ORPHAN(inode)=1023 [ 103.317055][ T5446] max_ino=32 [ 103.320408][ T5446] i_nlink=0 [ 103.330534][ T5446] ext2 filesystem being mounted at /105/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 103.534474][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 103.541404][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.549311][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.557993][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 103.564777][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.572695][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.580037][ T5468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.590622][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 103.597507][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.606121][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.615138][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 103.621885][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.629890][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.651191][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 103.658140][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.666645][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.684953][ T5468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.696059][ T5468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(25) [ 103.703107][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 103.711080][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 103.723421][ T5468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.735097][ T5468] vhci_hcd vhci_hcd.0: port 0 already used [ 103.754481][ T5479] vhci_hcd: connection closed [ 103.754637][ T4259] vhci_hcd: stop threads [ 103.764972][ T4259] vhci_hcd: release socket [ 103.770050][ T4259] vhci_hcd: disconnect device [ 103.777169][ T5477] vhci_hcd: connection closed [ 103.777654][ T4259] vhci_hcd: stop threads [ 103.787186][ T4259] vhci_hcd: release socket [ 103.791878][ T4259] vhci_hcd: disconnect device [ 103.797676][ T1044] vhci_hcd: vhci_device speed not set [ 103.804330][ T5475] vhci_hcd: connection closed [ 103.804631][ T5473] vhci_hcd: connection closed [ 103.810537][ T5471] vhci_hcd: connection closed [ 103.815637][ T5469] vhci_hcd: connection closed [ 103.822840][ T4259] vhci_hcd: stop threads [ 103.832615][ T4259] vhci_hcd: release socket [ 103.837071][ T4259] vhci_hcd: disconnect device [ 103.843825][ T4259] vhci_hcd: stop threads [ 103.848380][ T4259] vhci_hcd: release socket [ 103.853034][ T4259] vhci_hcd: disconnect device [ 103.859255][ T4259] vhci_hcd: stop threads [ 103.863615][ T4259] vhci_hcd: release socket [ 103.868290][ T4259] vhci_hcd: disconnect device [ 103.876824][ T1044] usb 9-1: new high-speed USB device number 4 using vhci_hcd [ 103.885595][ T4259] vhci_hcd: stop threads [ 103.889930][ T4259] vhci_hcd: release socket [ 103.894447][ T4259] vhci_hcd: disconnect device [ 103.923851][ T5486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.507'. [ 103.932866][ T5486] netlink: 200 bytes leftover after parsing attributes in process `syz.3.507'. [ 103.946606][ T5486] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 103.993093][ T5490] loop3: detected capacity change from 0 to 512 [ 103.999950][ T5490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.010422][ T5490] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.035883][ T5494] xt_hashlimit: max too large, truncated to 1048576 [ 104.111772][ T5494] loop1: detected capacity change from 0 to 164 [ 104.118565][ T5494] iso9660: Unknown parameter '' [ 104.190338][ T5502] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 104.199014][ T5502] netlink: 16 bytes leftover after parsing attributes in process `gtp'. [ 104.208329][ T5502] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 104.217485][ T5502] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 104.328355][ T5505] loop1: detected capacity change from 0 to 256 [ 105.225258][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'. [ 105.242612][ T5513] loop3: detected capacity change from 0 to 2048 [ 105.419697][ T5513] loop3: unable to read partition table [ 105.438633][ T5513] loop3: partition table beyond EOD, truncated [ 105.444902][ T5513] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 105.495134][ T5519] lo speed is unknown, defaulting to 1000 [ 105.507876][ T5519] lo speed is unknown, defaulting to 1000 [ 105.685076][ T5522] loop1: detected capacity change from 0 to 164 [ 105.755615][ T5522] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.884664][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.933541][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.028101][ T5527] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 106.185488][ T5529] ip6tnl1: entered promiscuous mode [ 106.190937][ T5529] ip6tnl1: entered allmulticast mode [ 106.197654][ T5529] team0: Device ip6tnl1 is of different type [ 107.329960][ T5440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 107.375304][ T5549] loop3: detected capacity change from 0 to 256 [ 107.455673][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 107.455688][ T29] audit: type=1326 audit(1748850409.417:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.512949][ T5553] loop1: detected capacity change from 0 to 512 [ 107.567674][ T29] audit: type=1326 audit(1748850409.457:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.591401][ T29] audit: type=1326 audit(1748850409.457:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.615490][ T29] audit: type=1326 audit(1748850409.457:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.639582][ T29] audit: type=1326 audit(1748850409.457:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.663475][ T29] audit: type=1326 audit(1748850409.457:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.687277][ T29] audit: type=1326 audit(1748850409.457:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.711051][ T29] audit: type=1326 audit(1748850409.467:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.734223][ T29] audit: type=1326 audit(1748850409.467:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.757628][ T29] audit: type=1326 audit(1748850409.467:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fddbcd2e969 code=0x7ffc0000 [ 107.878176][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 107.961193][ T5563] loop3: detected capacity change from 0 to 512 [ 107.979725][ T5563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 108.004936][ T5563] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 108.028889][ T5563] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 108.050436][ T5563] EXT4-fs (loop3): 2 truncates cleaned up [ 108.073726][ T5563] EXT4-fs mount: 9 callbacks suppressed [ 108.073747][ T5563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.185246][ T5563] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 108.195446][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 108.204534][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 108.251445][ T5560] 9pnet_virtio: no channels available for device [ 108.282161][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.398825][ T5578] sd 0:0:1:0: device reset [ 108.413654][ T5573] lo speed is unknown, defaulting to 1000 [ 108.422106][ T5584] netlink: 9 bytes leftover after parsing attributes in process `syz.4.532'. [ 108.432023][ T5573] lo speed is unknown, defaulting to 1000 [ 108.438325][ T5584] gretap0: entered promiscuous mode [ 108.509614][ T5592] netlink: 5 bytes leftover after parsing attributes in process `syz.4.532'. [ 108.549552][ T5592] 0ªX¹¦D: renamed from gretap0 [ 108.558706][ T5592] 0ªX¹¦D: left promiscuous mode [ 108.563695][ T5592] 0ªX¹¦D: entered allmulticast mode [ 108.624150][ T5592] net_ratelimit: 68 callbacks suppressed [ 108.624169][ T5592] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 108.662083][ T5600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 108.819738][ T5591] netlink: 128 bytes leftover after parsing attributes in process `syz.1.534'. [ 108.864925][ T5600] loop3: detected capacity change from 0 to 2048 [ 108.935942][ T5609] loop3: detected capacity change from 0 to 512 [ 108.952594][ T5609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.989320][ T1044] vhci_hcd: vhci_device speed not set [ 108.995972][ T5609] EXT4-fs (loop3): 1 truncate cleaned up [ 109.016017][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.150433][ T5612] loop1: detected capacity change from 0 to 512 [ 109.188851][ T5612] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.537: corrupted in-inode xattr: invalid ea_ino [ 109.214622][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 109.224780][ T5612] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.537: couldn't read orphan inode 15 (err -117) [ 109.239913][ T5612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.961515][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.021712][ T5623] loop4: detected capacity change from 0 to 512 [ 110.053102][ T5623] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.094818][ T5623] EXT4-fs (loop4): mount failed [ 110.331893][ T5632] loop4: detected capacity change from 0 to 1024 [ 110.338529][ T5632] EXT4-fs: Ignoring removed bh option [ 110.344015][ T5632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.354441][ T5632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.406541][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 110.473279][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.505656][ T5642] ================================================================== [ 110.513802][ T5642] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 110.523084][ T5642] [ 110.525461][ T5642] write to 0xffff88810722f5c0 of 4 bytes by task 5632 on cpu 1: [ 110.533122][ T5642] writeback_single_inode+0x14a/0x3e0 [ 110.538544][ T5642] sync_inode_metadata+0x5b/0x90 [ 110.543542][ T5642] generic_buffers_fsync_noflush+0xd9/0x120 [ 110.549515][ T5642] ext4_sync_file+0x1ab/0x690 [ 110.554239][ T5642] vfs_fsync_range+0x10d/0x130 [ 110.559039][ T5642] ext4_buffered_write_iter+0x34f/0x3c0 [ 110.564623][ T5642] ext4_file_write_iter+0x383/0xf00 [ 110.569859][ T5642] iter_file_splice_write+0x5f2/0x970 [ 110.575319][ T5642] direct_splice_actor+0x156/0x2a0 [ 110.580490][ T5642] splice_direct_to_actor+0x312/0x680 [ 110.585909][ T5642] do_splice_direct+0xda/0x150 [ 110.590707][ T5642] do_sendfile+0x380/0x650 [ 110.595167][ T5642] __x64_sys_sendfile64+0x105/0x150 [ 110.600417][ T5642] x64_sys_call+0xb39/0x2fb0 [ 110.605037][ T5642] do_syscall_64+0xd2/0x200 [ 110.609578][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.615503][ T5642] [ 110.617854][ T5642] read to 0xffff88810722f5c0 of 4 bytes by task 5642 on cpu 0: [ 110.625506][ T5642] generic_buffers_fsync_noflush+0x80/0x120 [ 110.631433][ T5642] ext4_sync_file+0x1ab/0x690 [ 110.636155][ T5642] vfs_fsync_range+0x10d/0x130 [ 110.640964][ T5642] ext4_buffered_write_iter+0x34f/0x3c0 [ 110.646540][ T5642] ext4_file_write_iter+0x383/0xf00 [ 110.651780][ T5642] iter_file_splice_write+0x5f2/0x970 [ 110.657236][ T5642] direct_splice_actor+0x156/0x2a0 [ 110.662469][ T5642] splice_direct_to_actor+0x312/0x680 [ 110.667866][ T5642] do_splice_direct+0xda/0x150 [ 110.672650][ T5642] do_sendfile+0x380/0x650 [ 110.677105][ T5642] __x64_sys_sendfile64+0x105/0x150 [ 110.682341][ T5642] x64_sys_call+0xb39/0x2fb0 [ 110.686977][ T5642] do_syscall_64+0xd2/0x200 [ 110.691534][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.697470][ T5642] [ 110.699904][ T5642] value changed: 0x00000038 -> 0x00000002 [ 110.705656][ T5642] [ 110.708005][ T5642] Reported by Kernel Concurrency Sanitizer on: [ 110.714194][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz.4.541 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 110.726209][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.736296][ T5642] ================================================================== [ 111.211136][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.415456][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.