last executing test programs: 2.71029553s ago: executing program 0 (id=558): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") preadv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) move_mount(r0, 0x0, r1, 0x0, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x5, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000002b80)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x16096, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa7}, 0x94) mount$bind(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) ustat(0x8, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x7ffff000) 2.528491203s ago: executing program 1 (id=562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009"], 0x110}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x73, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 2.520159913s ago: executing program 3 (id=563): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 2.457858204s ago: executing program 3 (id=564): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) truncate(&(0x7f00000000c0)='./file0\x00', 0x401) 2.392530945s ago: executing program 1 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 2.362037225s ago: executing program 3 (id=568): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.070716589s ago: executing program 1 (id=570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000680)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.752719944s ago: executing program 0 (id=573): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.601947636s ago: executing program 0 (id=574): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x92, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4) 983.468366ms ago: executing program 3 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="feffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'syz0\x00'}, {0x20, 'siw\x00'}, {0x20, 'veth0_to_team\x00'}, {0x20, 'lo\x00'}], 0xa, "879c33645c07eb605dc388c49db92f30c9b6a4cc442c82bba7cb91aab03eac620f409ea5f2adde4b2cf57d8242a6d11943371e151161f7d8e6e33f1b0adbed6b1506ae866612f32fe11460fda4aff5820a8823ee91855d04c8c9d36bbd5f9b359f2a7eb14a3c17c52e58952a7edec09555345818fe444b56c8f01fb9bc197fc09fd9ff74ba6644e7355e1858f486e978a961785fb9d76e94b704990b27608aefd37042f64e098d8c86"}, 0xd2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) 825.287908ms ago: executing program 0 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 631.412201ms ago: executing program 1 (id=580): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) msgget$private(0x0, 0x0) 630.923201ms ago: executing program 0 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) 596.808141ms ago: executing program 2 (id=583): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 587.781491ms ago: executing program 0 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 565.822452ms ago: executing program 4 (id=585): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r2}, 0x10) 565.294832ms ago: executing program 2 (id=586): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x140) sendfile(r2, r5, 0x0, 0x8000fbffc001) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) 551.235382ms ago: executing program 1 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 521.572253ms ago: executing program 1 (id=588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 499.643033ms ago: executing program 4 (id=589): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x320, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xbd4, 0xffffffffffffffff, 0x4}, 0x38) 466.218513ms ago: executing program 2 (id=591): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0) 404.896594ms ago: executing program 2 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 384.113065ms ago: executing program 4 (id=593): perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7e, 0xffffffffffffffff}, 0x10000, 0x46c, 0x5, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x800, &(0x7f0000000180)) syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 360.261995ms ago: executing program 4 (id=594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 332.254485ms ago: executing program 4 (id=595): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") preadv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) move_mount(r0, 0x0, r1, 0x0, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x5, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000002b80)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x16096, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa7}, 0x94) mount$bind(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) ustat(0x8, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x7ffff000) 169.825288ms ago: executing program 2 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 169.311418ms ago: executing program 2 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf251000000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40400c0) 128.257338ms ago: executing program 3 (id=598): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8, priority 0 [ 50.436250][ T4064] tipc: Resetting bearer [ 50.480671][ T4064] tipc: Disabling bearer [ 50.569241][ T4071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.578452][ T4071] bond_slave_0: left promiscuous mode [ 50.586744][ T4071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.596758][ T4071] bond_slave_1: left promiscuous mode [ 50.603324][ T4071] bond0 (unregistering): Released all slaves [ 50.699453][ T4075] loop3: detected capacity change from 0 to 128 [ 50.736332][ T4075] bio_check_eod: 104 callbacks suppressed [ 50.736352][ T4075] syz.3.202: attempt to access beyond end of device [ 50.736352][ T4075] loop3: rw=0, sector=121, nr_sectors = 8 limit=128 [ 50.849186][ T4080] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 50.889836][ T4080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.953122][ T4080] ipvlan2: entered promiscuous mode [ 50.969932][ T4080] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 50.973171][ T4090] loop7: detected capacity change from 0 to 16384 [ 50.978499][ T4080] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 51.011590][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.034197][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.074172][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.085596][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.124215][ T4090] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 51.137385][ T4090] I/O error, dev loop7, sector 4904 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 51.155645][ T4090] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.165275][ T4090] Buffer I/O error on dev loop7, logical block 581, async page read [ 51.174480][ T4090] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.183961][ T4090] Buffer I/O error on dev loop7, logical block 581, async page read [ 51.186937][ T4107] lo speed is unknown, defaulting to 1000 [ 51.199162][ T4107] lo speed is unknown, defaulting to 1000 [ 51.201715][ T4090] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.205309][ T4107] lo speed is unknown, defaulting to 1000 [ 51.214358][ T4090] Buffer I/O error on dev loop7, logical block 581, async page read [ 51.230191][ T4107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.234801][ T4090] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.244000][ T4107] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.247039][ T4090] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 51.262600][ T4090] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 51.263824][ T4107] lo speed is unknown, defaulting to 1000 [ 51.270981][ T4090] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 51.271006][ T4090] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 51.278634][ T4107] lo speed is unknown, defaulting to 1000 [ 51.285124][ T4090] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 51.295376][ T4107] lo speed is unknown, defaulting to 1000 [ 51.299278][ T4090] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 51.299302][ T4090] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 51.310891][ T4090] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.314159][ T4107] lo speed is unknown, defaulting to 1000 [ 51.325406][ T4090] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.332654][ T4107] lo speed is unknown, defaulting to 1000 [ 51.366162][ T4090] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.378691][ T4090] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 69 prio class 0 [ 51.474763][ T4120] netlink: 'syz.0.213': attribute type 13 has an invalid length. [ 51.521801][ T4120] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 51.537724][ T3416] lo speed is unknown, defaulting to 1000 [ 51.558178][ T4120] netlink: 'syz.0.213': attribute type 13 has an invalid length. [ 51.586438][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.593695][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.602913][ T4124] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 51.638590][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.649111][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.694304][ T4120] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.702805][ T4120] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.711205][ T4120] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.719778][ T4120] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.733040][ T36] lo speed is unknown, defaulting to 1000 [ 51.738857][ T36] syz0: Port: 1 Link DOWN [ 51.755456][ T4125] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 51.787894][ T4132] loop2: detected capacity change from 0 to 128 [ 51.796890][ T4128] veth3: entered promiscuous mode [ 51.803686][ T4128] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 51.863472][ T4132] syz.2.217: attempt to access beyond end of device [ 51.863472][ T4132] loop2: rw=0, sector=121, nr_sectors = 8 limit=128 [ 52.285272][ T3416] Process accounting resumed [ 53.514993][ T4185] loop2: detected capacity change from 0 to 1024 [ 53.555309][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.567868][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 53.567884][ T29] audit: type=1400 audit(1752169029.534:560): avc: denied { watch_reads } for pid=4183 comm="syz.1.238" path="/48/control" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.667909][ T4185] pim6reg: entered allmulticast mode [ 53.690311][ T4185] pim6reg: left allmulticast mode [ 53.872088][ T29] audit: type=1400 audit(1752169029.834:561): avc: denied { connect } for pid=4193 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.020723][ T36] Process accounting resumed [ 54.048767][ T4199] netlink: 'syz.3.242': attribute type 13 has an invalid length. [ 54.110782][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.118183][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.206653][ T29] audit: type=1400 audit(1752169030.174:562): avc: denied { cpu } for pid=4202 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.297022][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.313382][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.322916][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.335588][ T29] audit: type=1400 audit(1752169030.304:563): avc: denied { ioctl } for pid=4210 comm="syz.0.247" path="socket:[6132]" dev="sockfs" ino=6132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.380277][ T4199] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.389405][ T4199] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.398396][ T4199] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.407331][ T4199] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.419059][ T4215] __nla_validate_parse: 5 callbacks suppressed [ 54.419073][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 54.440259][ T4216] loop2: detected capacity change from 0 to 1024 [ 54.447522][ T4216] EXT4-fs: Ignoring removed nobh option [ 54.462357][ T4216] EXT4-fs: Ignoring removed bh option [ 54.504011][ T4216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.542784][ T29] audit: type=1400 audit(1752169030.504:564): avc: denied { read } for pid=4213 comm="syz.2.248" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.549508][ T4216] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 54.585838][ T4216] EXT4-fs (loop2): Remounting filesystem read-only [ 54.686541][ T4194] syz.1.240 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 54.700780][ T4194] CPU: 1 UID: 0 PID: 4194 Comm: syz.1.240 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 54.700872][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.700892][ T4194] Call Trace: [ 54.700900][ T4194] [ 54.700938][ T4194] __dump_stack+0x1d/0x30 [ 54.700959][ T4194] dump_stack_lvl+0xe8/0x140 [ 54.700979][ T4194] dump_stack+0x15/0x1b [ 54.701001][ T4194] dump_header+0x81/0x220 [ 54.701061][ T4194] oom_kill_process+0x334/0x3f0 [ 54.701101][ T4194] out_of_memory+0x979/0xb80 [ 54.701136][ T4194] try_charge_memcg+0x5e6/0x9e0 [ 54.701246][ T4194] obj_cgroup_charge_pages+0xa6/0x150 [ 54.701285][ T4194] __memcg_kmem_charge_page+0x9f/0x170 [ 54.701319][ T4194] __alloc_frozen_pages_noprof+0x188/0x360 [ 54.701441][ T4194] alloc_pages_mpol+0xb3/0x250 [ 54.701482][ T4194] alloc_pages_noprof+0x90/0x130 [ 54.701521][ T4194] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 54.701637][ T4194] __kvmalloc_node_noprof+0x30f/0x4e0 [ 54.701674][ T4194] ? ip_set_alloc+0x1f/0x30 [ 54.701709][ T4194] ? ip_set_alloc+0x1f/0x30 [ 54.701744][ T4194] ? hash_netiface_create+0x21b/0x740 [ 54.701793][ T4194] ? __kmalloc_cache_noprof+0x189/0x320 [ 54.701863][ T4194] ip_set_alloc+0x1f/0x30 [ 54.701899][ T4194] hash_netiface_create+0x282/0x740 [ 54.702064][ T4194] ? __pfx_hash_netiface_create+0x10/0x10 [ 54.702105][ T4194] ip_set_create+0x3c9/0x960 [ 54.702159][ T4194] ? __nla_parse+0x40/0x60 [ 54.702207][ T4194] nfnetlink_rcv_msg+0x4c3/0x590 [ 54.702367][ T4194] ? selinux_capable+0x1f9/0x270 [ 54.702407][ T4194] netlink_rcv_skb+0x120/0x220 [ 54.702447][ T4194] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 54.702488][ T4194] nfnetlink_rcv+0x16b/0x1690 [ 54.702651][ T4194] ? __kfree_skb+0x109/0x150 [ 54.702689][ T4194] ? nlmon_xmit+0x4f/0x60 [ 54.702715][ T4194] ? consume_skb+0x49/0x150 [ 54.702824][ T4194] ? nlmon_xmit+0x4f/0x60 [ 54.702879][ T4194] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 54.702928][ T4194] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 54.702970][ T4194] ? __dev_queue_xmit+0x182/0x1fb0 [ 54.703015][ T4194] ? ref_tracker_free+0x37d/0x3e0 [ 54.703102][ T4194] ? __netlink_deliver_tap+0x4dc/0x500 [ 54.703182][ T4194] netlink_unicast+0x59e/0x670 [ 54.703223][ T4194] netlink_sendmsg+0x58b/0x6b0 [ 54.703269][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.703314][ T4194] __sock_sendmsg+0x142/0x180 [ 54.703415][ T4194] ____sys_sendmsg+0x31e/0x4e0 [ 54.703537][ T4194] ___sys_sendmsg+0x17b/0x1d0 [ 54.703595][ T4194] __x64_sys_sendmsg+0xd4/0x160 [ 54.703700][ T4194] x64_sys_call+0x2999/0x2fb0 [ 54.703735][ T4194] do_syscall_64+0xd2/0x200 [ 54.703766][ T4194] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.703800][ T4194] ? clear_bhb_loop+0x40/0x90 [ 54.703825][ T4194] ? clear_bhb_loop+0x40/0x90 [ 54.703962][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.703983][ T4194] RIP: 0033:0x7f2baadee929 [ 54.704009][ T4194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.704031][ T4194] RSP: 002b:00007f2ba9457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.704053][ T4194] RAX: ffffffffffffffda RBX: 00007f2bab015fa0 RCX: 00007f2baadee929 [ 54.704065][ T4194] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 54.704086][ T4194] RBP: 00007f2baae70b39 R08: 0000000000000000 R09: 0000000000000000 [ 54.704098][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.704192][ T4194] R13: 0000000000000000 R14: 00007f2bab015fa0 R15: 00007fff89fa7c88 [ 54.704217][ T4194] [ 55.054902][ T4194] memory: usage 307200kB, limit 307200kB, failcnt 204 [ 55.061689][ T4194] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 55.069720][ T4194] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 55.077088][ T4194] Memory cgroup stats for /syz1: [ 55.097577][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 55.097742][ T4194] cache 0 [ 55.114622][ T4194] rss 0 [ 55.117558][ T4194] shmem 0 [ 55.120888][ T4194] mapped_file 0 [ 55.124444][ T4194] dirty 0 [ 55.127404][ T4194] writeback 0 [ 55.130699][ T4194] workingset_refault_anon 114 [ 55.133375][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 55.135452][ T4194] workingset_refault_file 47 [ 55.149028][ T4194] swap 200704 [ 55.152390][ T4194] swapcached 0 [ 55.154573][ T4226] netlink: 'syz.0.251': attribute type 13 has an invalid length. [ 55.155811][ T4194] pgpgin 19644 [ 55.155822][ T4194] pgpgout 19644 [ 55.155836][ T4194] pgfault 24072 [ 55.167025][ T29] audit: type=1400 audit(1752169031.114:565): avc: denied { create } for pid=4223 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.167059][ T29] audit: type=1400 audit(1752169031.114:566): avc: denied { write } for pid=4223 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.170722][ T4194] pgmajfault 22 [ 55.174051][ T29] audit: type=1400 audit(1752169031.114:567): avc: denied { nlmsg_write } for pid=4223 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.238301][ T4194] inactive_anon 0 [ 55.242086][ T4194] active_anon 0 [ 55.245621][ T4194] inactive_file 0 [ 55.249277][ T4194] active_file 0 [ 55.252829][ T4194] unevictable 0 [ 55.256303][ T4194] hierarchical_memory_limit 314572800 [ 55.261776][ T4194] hierarchical_memsw_limit 9223372036854771712 [ 55.268014][ T4194] total_cache 0 [ 55.272431][ T4194] total_rss 0 [ 55.275796][ T4194] total_shmem 0 [ 55.279341][ T4194] total_mapped_file 0 [ 55.283378][ T4194] total_dirty 0 [ 55.286874][ T4194] total_writeback 0 [ 55.290695][ T4194] total_workingset_refault_anon 114 [ 55.296236][ T4194] total_workingset_refault_file 47 [ 55.301442][ T4194] total_swap 200704 [ 55.305304][ T4194] total_swapcached 0 [ 55.309227][ T4194] total_pgpgin 19644 [ 55.313258][ T4194] total_pgpgout 19644 [ 55.317255][ T4194] total_pgfault 24072 [ 55.321250][ T4194] total_pgmajfault 22 [ 55.325277][ T4194] total_inactive_anon 0 [ 55.329497][ T4194] total_active_anon 0 [ 55.333517][ T4194] total_inactive_file 0 [ 55.337681][ T4194] total_active_file 0 [ 55.341681][ T4194] total_unevictable 0 [ 55.345778][ T4194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.240,pid=4193,uid=0 [ 55.360402][ T4194] Memory cgroup out of memory: Killed process 4193 (syz.1.240) total-vm:95804kB, anon-rss:940kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 55.402777][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.466236][ T4235] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 55.482443][ T4235] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 55.539794][ T29] audit: type=1326 audit(1752169031.504:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 55.563093][ T29] audit: type=1326 audit(1752169031.504:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 55.601079][ T4195] syz.1.240 (4195) used greatest stack depth: 9720 bytes left [ 56.021439][ T4194] syz.1.240 (4194) used greatest stack depth: 7160 bytes left [ 56.079852][ T4273] loop3: detected capacity change from 0 to 1024 [ 56.086960][ T4273] EXT4-fs: Ignoring removed nobh option [ 56.113752][ T4275] loop4: detected capacity change from 0 to 1024 [ 56.122414][ T4273] EXT4-fs: Ignoring removed bh option [ 56.145264][ T4275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.161455][ T4275] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.172510][ T4275] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.202991][ T4275] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 56.209744][ T4275] EXT4-fs (loop4): mount failed [ 56.218642][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.255540][ T4273] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 56.287204][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 56.407341][ T4287] loop2: detected capacity change from 0 to 128 [ 56.424783][ T4287] FAT-fs (loop2): bogus number of reserved sectors [ 56.431446][ T4287] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 56.440809][ T4287] FAT-fs (loop2): Can't find a valid FAT filesystem [ 56.534861][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.600810][ T4290] Driver unsupported XDP return value 0 on prog (id 210) dev N/A, expect packet loss! [ 56.649903][ T4287] netlink: 72 bytes leftover after parsing attributes in process `syz.2.273'. [ 56.774400][ T4297] pim6reg1: entered promiscuous mode [ 56.779805][ T4297] pim6reg1: entered allmulticast mode [ 56.804409][ T4299] loop2: detected capacity change from 0 to 128 [ 56.849404][ T4299] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 56.914119][ T4302] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 56.959705][ T4302] bond0: (slave dummy0): Releasing backup interface [ 56.977962][ T4313] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 56.986942][ T4312] loop2: detected capacity change from 0 to 128 [ 56.988266][ T4302] team0: Failed to send options change via netlink (err -105) [ 57.000839][ T4302] team0: Port device dummy0 added [ 57.011274][ T4310] vlan2: entered allmulticast mode [ 57.016657][ T4310] dummy0: entered allmulticast mode [ 57.025860][ T4313] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.048426][ T4313] team0: Failed to send options change via netlink (err -105) [ 57.058844][ T4312] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.071833][ T4313] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.073260][ T4312] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.081216][ T4313] team0: Port device dummy0 removed [ 57.097911][ T4313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.184709][ T4323] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 57.205803][ T4323] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 57.342308][ T4332] loop4: detected capacity change from 0 to 164 [ 57.349530][ T4332] ISOFS: unable to read i-node block [ 57.354945][ T4332] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 57.470988][ T4336] lo speed is unknown, defaulting to 1000 [ 57.876305][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.887181][ T4343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(0) [ 57.893743][ T4343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.901351][ T4343] vhci_hcd vhci_hcd.0: Device attached [ 57.932830][ T4343] ,&#^% uses obsolete (PF_INET,SOCK_PACKET) [ 58.129795][ T36] vhci_hcd: vhci_device speed not set [ 58.174628][ T4357] xt_CT: No such helper "snmp_trap" [ 58.192193][ T36] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 58.545615][ T4344] vhci_hcd: connection reset by peer [ 58.551197][ T3823] vhci_hcd: stop threads [ 58.555620][ T3823] vhci_hcd: release socket [ 58.560067][ T3823] vhci_hcd: disconnect device [ 58.710729][ T4373] netlink: 'syz.3.305': attribute type 298 has an invalid length. [ 58.733764][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 58.733781][ T29] audit: type=1326 audit(1752169034.704:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.766320][ T29] audit: type=1326 audit(1752169034.704:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.789745][ T29] audit: type=1326 audit(1752169034.704:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.813127][ T29] audit: type=1326 audit(1752169034.704:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.836499][ T29] audit: type=1326 audit(1752169034.704:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.860038][ T29] audit: type=1326 audit(1752169034.704:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.883365][ T29] audit: type=1326 audit(1752169034.704:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.906759][ T29] audit: type=1326 audit(1752169034.704:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.930102][ T29] audit: type=1326 audit(1752169034.704:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 58.953443][ T29] audit: type=1326 audit(1752169034.704:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f848918e929 code=0x7ffc0000 [ 59.464567][ T4388] lo speed is unknown, defaulting to 1000 [ 59.698816][ T4404] veth0: entered promiscuous mode [ 59.705972][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 60.046591][ T4423] 9pnet_fd: Insufficient options for proto=fd [ 60.706704][ T4426] netlink: 'syz.3.324': attribute type 13 has an invalid length. [ 60.917907][ T4447] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.043798][ T4459] lo speed is unknown, defaulting to 1000 [ 61.395544][ T4497] loop2: detected capacity change from 0 to 1024 [ 61.412520][ T4497] EXT4-fs: Ignoring removed orlov option [ 61.450720][ T4497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.566658][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.658675][ T4513] mmap: syz.2.342 (4513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.767218][ T4527] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 61.825412][ T4535] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 62.195520][ T4592] loop2: detected capacity change from 0 to 1024 [ 62.236182][ T4592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.276934][ T4592] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.287894][ T4592] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.319099][ T4592] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 62.326802][ T4592] EXT4-fs (loop2): mount failed [ 62.471575][ T4611] vlan2: entered allmulticast mode [ 62.491350][ T4611] dummy0: entered allmulticast mode [ 62.654933][ T4624] loop2: detected capacity change from 0 to 8192 [ 62.749168][ T4624] loop2: p1 p2 [ 62.754451][ T4624] loop2: p2 start 3506442254 is beyond EOD, truncated [ 62.797694][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.252416][ T36] usb 3-1: enqueue for inactive port 0 [ 63.287434][ T36] usb 3-1: enqueue for inactive port 0 [ 63.362208][ T36] vhci_hcd: vhci_device speed not set [ 63.532605][ T4680] vlan2: entered allmulticast mode [ 63.548055][ T4680] dummy0: entered allmulticast mode [ 63.768238][ T4693] loop2: detected capacity change from 0 to 512 [ 63.797992][ T4693] EXT4-fs: dax option not supported [ 63.855084][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 63.892801][ T4701] ªªªªªª: renamed from vlan0 [ 63.900372][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 63.923557][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.947979][ T4698] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 63.961276][ T4703] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 63.983053][ T4703] bond1 (unregistering): Released all slaves [ 63.994772][ T4704] wg2: left promiscuous mode [ 63.999405][ T4704] wg2: left allmulticast mode [ 64.025637][ T4704] wg2: entered promiscuous mode [ 64.030628][ T4704] wg2: entered allmulticast mode [ 64.128019][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 64.137010][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 64.408343][ T4721] loop2: detected capacity change from 0 to 128 [ 64.416878][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 64.416891][ T29] audit: type=1326 audit(1752169040.374:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 64.446391][ T29] audit: type=1326 audit(1752169040.374:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 64.470112][ T29] audit: type=1326 audit(1752169040.374:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 64.493904][ T29] audit: type=1326 audit(1752169040.374:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 64.517450][ T29] audit: type=1326 audit(1752169040.374:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 64.540924][ T29] audit: type=1326 audit(1752169040.374:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dca44e963 code=0x7ffc0000 [ 64.564229][ T29] audit: type=1326 audit(1752169040.374:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dca44d3df code=0x7ffc0000 [ 64.587411][ T29] audit: type=1326 audit(1752169040.374:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5dca44e9b7 code=0x7ffc0000 [ 64.611212][ T29] audit: type=1326 audit(1752169040.374:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dca44d290 code=0x7ffc0000 [ 64.634515][ T29] audit: type=1326 audit(1752169040.374:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dca44e52b code=0x7ffc0000 [ 65.338959][ T4733] netlink: 'syz.1.390': attribute type 13 has an invalid length. [ 65.351052][ T4731] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 65.373464][ T4733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.391345][ T4731] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 65.411917][ T4736] vlan2: entered allmulticast mode [ 65.425667][ T4738] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 65.441938][ T4736] dummy0: entered allmulticast mode [ 65.460198][ T4738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.489839][ T4742] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 65.549175][ T4738] vlan2: entered allmulticast mode [ 65.554416][ T4738] veth1: entered allmulticast mode [ 65.600337][ T4738] bond1: (slave vlan2): Opening slave failed [ 67.243010][ T4785] vlan0: entered allmulticast mode [ 67.248207][ T4785] dummy0: entered allmulticast mode [ 67.289682][ T4789] tipc: Started in network mode [ 67.294721][ T4789] tipc: Node identity ac14140f, cluster identity 4711 [ 67.301801][ T4789] tipc: New replicast peer: 255.255.255.255 [ 67.308107][ T4789] tipc: Enabled bearer , priority 10 [ 67.337698][ T4792] loop2: detected capacity change from 0 to 512 [ 67.356466][ T4793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.388263][ T4795] loop4: detected capacity change from 0 to 128 [ 67.407704][ T4792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.422309][ T4792] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.458288][ T4793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.473453][ T4792] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.412: corrupted inode contents [ 67.485739][ T4792] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.412: mark_inode_dirty error [ 67.497804][ T4792] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.412: corrupted inode contents [ 67.509823][ T4792] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.412: mark_inode_dirty error [ 67.536612][ T4793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.578702][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 67.621584][ T4793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.643621][ T4805] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 67.651711][ T4805] FAT-fs (loop4): Filesystem has been set read-only [ 67.662131][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.674341][ T4805] syz.4.413: attempt to access beyond end of device [ 67.674341][ T4805] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.688359][ T4805] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 67.696285][ T4805] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 67.705606][ T4805] syz.4.413: attempt to access beyond end of device [ 67.705606][ T4805] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.736689][ T4793] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.753983][ T4805] syz.4.413: attempt to access beyond end of device [ 67.753983][ T4805] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.767285][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.774954][ T4793] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.791069][ T4805] syz.4.413: attempt to access beyond end of device [ 67.791069][ T4805] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.808373][ T4795] syz.4.413: attempt to access beyond end of device [ 67.808373][ T4795] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 67.821872][ T4795] buffer_io_error: 574 callbacks suppressed [ 67.821884][ T4795] Buffer I/O error on dev loop4, logical block 2065, async page read [ 67.839295][ T4793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.847751][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.851898][ T4793] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.865440][ T4795] syz.4.413: attempt to access beyond end of device [ 67.865440][ T4795] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 67.878640][ T4795] Buffer I/O error on dev loop4, logical block 2066, async page read [ 67.893481][ T4809] loop3: detected capacity change from 0 to 1024 [ 67.931821][ T4795] syz.4.413: attempt to access beyond end of device [ 67.931821][ T4795] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 67.931983][ T4809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.945073][ T4795] Buffer I/O error on dev loop4, logical block 2067, async page read [ 67.965597][ T4795] syz.4.413: attempt to access beyond end of device [ 67.965597][ T4795] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 67.978879][ T4795] Buffer I/O error on dev loop4, logical block 2068, async page read [ 67.987569][ T4795] syz.4.413: attempt to access beyond end of device [ 67.987569][ T4795] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 67.999193][ T4809] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.000877][ T4795] Buffer I/O error on dev loop4, logical block 2069, async page read [ 68.019747][ T4795] syz.4.413: attempt to access beyond end of device [ 68.019747][ T4795] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 68.033017][ T4795] Buffer I/O error on dev loop4, logical block 2070, async page read [ 68.042777][ T4795] Buffer I/O error on dev loop4, logical block 2071, async page read [ 68.050998][ T4795] Buffer I/O error on dev loop4, logical block 2072, async page read [ 68.059516][ T4805] Buffer I/O error on dev loop4, logical block 2065, async page read [ 68.067793][ T4805] Buffer I/O error on dev loop4, logical block 2066, async page read [ 68.116733][ T4820] netlink: 'syz.1.422': attribute type 13 has an invalid length. [ 68.147279][ T4809] kernel read not supported for file /policy (pid: 4809 comm: syz.3.417) [ 68.481442][ T4820] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.489958][ T4820] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.498630][ T4820] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.507388][ T4820] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.516227][ T4836] tipc: Node number set to 2886997007 [ 68.736728][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.877627][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 69.506624][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 69.506648][ T29] audit: type=1326 audit(1752169045.474:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.537891][ T29] audit: type=1326 audit(1752169045.474:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.561513][ T29] audit: type=1326 audit(1752169045.474:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.584764][ T29] audit: type=1326 audit(1752169045.474:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.608245][ T29] audit: type=1326 audit(1752169045.474:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.631757][ T29] audit: type=1326 audit(1752169045.474:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.655370][ T29] audit: type=1326 audit(1752169045.474:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.678805][ T29] audit: type=1326 audit(1752169045.474:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe8322fe929 code=0x7ffc0000 [ 69.702109][ T29] audit: type=1326 audit(1752169045.474:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8322fe963 code=0x7ffc0000 [ 69.725245][ T29] audit: type=1326 audit(1752169045.474:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8322fd3df code=0x7ffc0000 [ 69.770082][ T4912] ipip0: entered promiscuous mode [ 69.803236][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 70.020761][ T4929] 9pnet: p9_errstr2errno: server reported unknown error [ 70.344972][ T4935] lo speed is unknown, defaulting to 1000 [ 70.650098][ T4939] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 70.695288][ T4939] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 70.765577][ T4943] wg2: entered promiscuous mode [ 70.770716][ T4943] wg2: entered allmulticast mode [ 70.904904][ T4951] netlink: 'syz.0.461': attribute type 16 has an invalid length. [ 70.912792][ T4951] netlink: 'syz.0.461': attribute type 17 has an invalid length. [ 72.642862][ T4964] bond0: entered promiscuous mode [ 72.647964][ T4964] bond_slave_0: entered promiscuous mode [ 72.654085][ T4964] bond_slave_1: entered promiscuous mode [ 72.659948][ T4964] dummy0: entered promiscuous mode [ 72.666339][ T4964] batadv0: entered promiscuous mode [ 72.672770][ T4964] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 72.682714][ T4964] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 72.693763][ T4964] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 72.698015][ T4967] loop3: detected capacity change from 0 to 1024 [ 72.706906][ T4964] bond0: left promiscuous mode [ 72.711727][ T4964] bond_slave_0: left promiscuous mode [ 72.717354][ T4964] bond_slave_1: left promiscuous mode [ 72.739537][ T4964] dummy0: left promiscuous mode [ 72.751590][ T4970] loop4: detected capacity change from 0 to 1024 [ 72.760460][ T4964] batadv0: left promiscuous mode [ 72.770951][ T4970] EXT4-fs: Ignoring removed orlov option [ 72.780203][ T4967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.781930][ T4970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.850758][ T4967] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.465: Allocating blocks 385-513 which overlap fs metadata [ 72.874561][ T4967] EXT4-fs (loop3): pa ffff888106a82620: logic 16, phys. 129, len 24 [ 72.882673][ T4967] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 73.024166][ T4989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.055143][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.139261][ T4994] loop3: detected capacity change from 0 to 1024 [ 73.139450][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.163517][ T4994] EXT4-fs: Ignoring removed orlov option [ 73.171485][ T4994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.188937][ T4985] lo speed is unknown, defaulting to 1000 [ 73.220354][ T4999] ipip0: entered promiscuous mode [ 73.252970][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 73.390096][ T5012] bond0: entered promiscuous mode [ 73.396269][ T5012] batadv0: entered promiscuous mode [ 73.402416][ T5012] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 73.412385][ T5012] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 73.423313][ T5012] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 73.434406][ T5012] bond0: left promiscuous mode [ 73.440471][ T5012] batadv0: left promiscuous mode [ 73.477364][ T5018] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 73.493089][ T5018] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 73.527162][ T5019] loop4: detected capacity change from 0 to 512 [ 73.562602][ T5019] EXT4-fs: dax option not supported [ 73.641815][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.745120][ T5031] loop3: detected capacity change from 0 to 1024 [ 73.775327][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.882596][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.984291][ T5051] loop3: detected capacity change from 0 to 128 [ 74.058220][ T5049] lo speed is unknown, defaulting to 1000 [ 74.234985][ T5061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 74.457367][ T5074] loop2: detected capacity change from 0 to 1024 [ 74.464618][ T5074] EXT4-fs: Ignoring removed orlov option [ 74.477503][ T5075] loop3: detected capacity change from 0 to 512 [ 74.487711][ T5075] EXT4-fs: dax option not supported [ 74.497623][ T5074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.703526][ T5074] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.754043][ T5074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 74.795741][ T5074] System zones: 0-1, 3-12 [ 74.808651][ T5074] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.513: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.832640][ T5074] __quota_error: 385 callbacks suppressed [ 74.832658][ T5074] Quota error (device loop2): write_blk: dquota write failed [ 74.845950][ T5074] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 74.915271][ T5074] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.513: Failed to acquire dquot type 0 [ 74.959692][ T5074] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.513: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.997798][ T5074] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.513: Invalid inode bitmap blk 0 in block_group 0 [ 75.010805][ T5074] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 75.019561][ T3807] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.042677][ T3807] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 75.051192][ T3807] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 0 [ 75.064465][ T5074] EXT4-fs (loop2): 1 orphan inode deleted [ 75.070766][ T5074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.085242][ T29] audit: type=1326 audit(1752169051.054:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dca44d290 code=0x7ffc0000 [ 75.150483][ T29] audit: type=1326 audit(1752169051.104:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5dca44d677 code=0x7ffc0000 [ 75.173821][ T29] audit: type=1326 audit(1752169051.104:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dca44d290 code=0x7ffc0000 [ 75.197193][ T29] audit: type=1326 audit(1752169051.104:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 75.220617][ T29] audit: type=1326 audit(1752169051.104:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 75.244201][ T29] audit: type=1326 audit(1752169051.114:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 75.267646][ T29] audit: type=1326 audit(1752169051.114:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dca44e929 code=0x7ffc0000 [ 75.292694][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.303344][ T5083] Falling back ldisc for ttyS3. [ 75.374159][ T5086] lo speed is unknown, defaulting to 1000 [ 75.453274][ T5089] capability: warning: `syz.3.507' uses deprecated v2 capabilities in a way that may be insecure [ 75.649241][ T5101] ipip0: entered promiscuous mode [ 75.683336][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 75.685714][ T5103] loop3: detected capacity change from 0 to 128 [ 75.754070][ T5105] syz.1.512 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.043503][ T5103] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 76.051397][ T5103] FAT-fs (loop3): Filesystem has been set read-only [ 76.059036][ T5103] bio_check_eod: 5594 callbacks suppressed [ 76.059054][ T5103] syz.3.515: attempt to access beyond end of device [ 76.059054][ T5103] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 76.078998][ T5103] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 76.086884][ T5103] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 76.095338][ T5103] syz.3.515: attempt to access beyond end of device [ 76.095338][ T5103] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.108800][ T5103] syz.3.515: attempt to access beyond end of device [ 76.108800][ T5103] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.125486][ T5120] syz.3.515: attempt to access beyond end of device [ 76.125486][ T5120] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 76.138744][ T5120] buffer_io_error: 5590 callbacks suppressed [ 76.138759][ T5120] Buffer I/O error on dev loop3, logical block 2065, async page read [ 76.169756][ T5120] syz.3.515: attempt to access beyond end of device [ 76.169756][ T5120] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 76.183117][ T5120] Buffer I/O error on dev loop3, logical block 2066, async page read [ 76.192646][ T5120] syz.3.515: attempt to access beyond end of device [ 76.192646][ T5120] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 76.205939][ T5120] Buffer I/O error on dev loop3, logical block 2067, async page read [ 76.214645][ T5120] syz.3.515: attempt to access beyond end of device [ 76.214645][ T5120] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 76.227981][ T5120] Buffer I/O error on dev loop3, logical block 2068, async page read [ 76.236593][ T5120] syz.3.515: attempt to access beyond end of device [ 76.236593][ T5120] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 76.249880][ T5120] Buffer I/O error on dev loop3, logical block 2069, async page read [ 76.258525][ T5120] syz.3.515: attempt to access beyond end of device [ 76.258525][ T5120] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 76.271738][ T5120] Buffer I/O error on dev loop3, logical block 2070, async page read [ 76.280200][ T5120] syz.3.515: attempt to access beyond end of device [ 76.280200][ T5120] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 76.293399][ T5120] Buffer I/O error on dev loop3, logical block 2071, async page read [ 76.302030][ T5120] Buffer I/O error on dev loop3, logical block 2072, async page read [ 76.310491][ T5103] Buffer I/O error on dev loop3, logical block 2065, async page read [ 76.319421][ T5103] Buffer I/O error on dev loop3, logical block 2066, async page read [ 76.813378][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 76.820857][ T5134] loop3: detected capacity change from 0 to 2048 [ 76.865803][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.834586][ T5134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.525: bg 0: block 234: padding at end of block bitmap is not set [ 78.117334][ T5235] lo: entered allmulticast mode [ 78.134568][ T5235] tunl0: entered allmulticast mode [ 78.139820][ T5235] gre0: entered allmulticast mode [ 78.145130][ T5235] gretap0: entered allmulticast mode [ 78.150671][ T5235] erspan0: entered allmulticast mode [ 78.156151][ T5235] ip_vti0: entered allmulticast mode [ 78.161627][ T5235] ip6_vti0: entered allmulticast mode [ 78.167198][ T5235] sit0: entered allmulticast mode [ 78.172429][ T5235] ip6tnl0: entered allmulticast mode [ 78.177933][ T5235] ip6gre0: entered allmulticast mode [ 78.183438][ T5235] syz_tun: entered allmulticast mode [ 78.189036][ T5235] ip6gretap0: entered allmulticast mode [ 78.194762][ T5235] vcan0: entered allmulticast mode [ 78.199961][ T5235] bond0: entered allmulticast mode [ 78.215477][ T5235] team0: entered allmulticast mode [ 78.216115][ T5134] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 78.220801][ T5235] nlmon0: entered allmulticast mode [ 78.233158][ T5134] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.233158][ T5134] [ 78.233177][ T5134] EXT4-fs (loop3): Total free blocks count 0 [ 78.233189][ T5134] EXT4-fs (loop3): Free/Dirty block details [ 78.233202][ T5134] EXT4-fs (loop3): free_blocks=0 [ 78.233220][ T5134] EXT4-fs (loop3): dirty_blocks=6864 [ 78.238534][ T5235] caif0: entered allmulticast mode [ 78.248062][ T5134] EXT4-fs (loop3): Block reservation details [ 78.254120][ T5235] batadv0: entered allmulticast mode [ 78.259970][ T5134] EXT4-fs (loop3): i_reserved_data_blocks=429 [ 78.264984][ T5235] vxcan0: entered allmulticast mode [ 78.298274][ T5235] vxcan1: entered allmulticast mode [ 78.303577][ T5235] wg0: entered allmulticast mode [ 78.308614][ T5235] wg1: entered allmulticast mode [ 78.352294][ T5235] wg2: left promiscuous mode [ 78.362624][ T5235] veth0_to_bridge: entered allmulticast mode [ 78.368744][ T5235] bridge_slave_0: entered allmulticast mode [ 78.374811][ T5235] veth1_to_bridge: entered allmulticast mode [ 78.381027][ T5235] bridge_slave_1: entered allmulticast mode [ 78.387314][ T5235] veth0_to_bond: entered allmulticast mode [ 78.393360][ T5235] bond_slave_0: entered allmulticast mode [ 78.399328][ T5235] veth1_to_bond: entered allmulticast mode [ 78.405475][ T5235] bond_slave_1: entered allmulticast mode [ 78.407675][ T5238] loop2: detected capacity change from 0 to 128 [ 78.411275][ T5235] veth0_to_team: entered allmulticast mode [ 78.423530][ T5235] team_slave_0: entered allmulticast mode [ 78.429419][ T5235] veth1_to_team: entered allmulticast mode [ 78.435384][ T5235] team_slave_1: entered allmulticast mode [ 78.441236][ T5235] veth0_to_batadv: entered allmulticast mode [ 78.447412][ T5235] batadv_slave_0: entered allmulticast mode [ 78.453565][ T5235] veth1_to_batadv: entered allmulticast mode [ 78.459733][ T5235] batadv_slave_1: entered allmulticast mode [ 78.465799][ T5235] xfrm0: entered allmulticast mode [ 78.471178][ T5235] veth0_to_hsr: entered allmulticast mode [ 78.477023][ T5235] hsr_slave_0: entered allmulticast mode [ 78.482903][ T5235] veth1_to_hsr: entered allmulticast mode [ 78.488777][ T5235] hsr_slave_1: entered allmulticast mode [ 78.494788][ T5235] hsr0: entered allmulticast mode [ 78.500170][ T5235] veth1_virt_wifi: entered allmulticast mode [ 78.506285][ T5235] veth0_virt_wifi: entered allmulticast mode [ 78.512520][ T5235] veth1_vlan: entered allmulticast mode [ 78.518129][ T5235] veth0_vlan: entered allmulticast mode [ 78.523796][ T5235] vlan0: entered allmulticast mode [ 78.529064][ T5235] vlan1: entered allmulticast mode [ 78.534614][ T5235] macvlan0: entered allmulticast mode [ 78.540140][ T5235] macvlan1: entered allmulticast mode [ 78.545727][ T5235] ipvlan0: entered allmulticast mode [ 78.551170][ T5235] ipvlan1: entered allmulticast mode [ 78.556598][ T5235] veth1_macvtap: entered allmulticast mode [ 78.562505][ T5235] veth0_macvtap: entered allmulticast mode [ 78.568576][ T5235] macvtap0: entered allmulticast mode [ 78.574161][ T5235] macsec0: entered allmulticast mode [ 78.579589][ T5235] geneve0: entered allmulticast mode [ 78.585081][ T5235] geneve1: entered allmulticast mode [ 78.590509][ T5235] bridge1: entered allmulticast mode [ 78.596011][ T5235] bridge2: entered allmulticast mode [ 78.601414][ T5235] batadv1: entered allmulticast mode [ 78.608406][ T5235] netdevsim netdevsim1 eth0: entered allmulticast mode [ 78.616416][ T5235] netdevsim netdevsim1 eth1: entered allmulticast mode [ 78.623455][ T5235] netdevsim netdevsim1 eth2: entered allmulticast mode [ 78.630447][ T5235] netdevsim netdevsim1 eth3: entered allmulticast mode [ 78.632528][ T3783] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 78.642162][ T5235] ipip0: left promiscuous mode [ 78.654904][ T5235] ipip0: entered allmulticast mode [ 78.843384][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.851324][ T5238] FAT-fs (loop2): Filesystem has been set read-only [ 78.858504][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.866406][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.897358][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.905541][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.913486][ T5238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.117793][ T5256] loop4: detected capacity change from 0 to 1024 [ 79.131355][ T5256] EXT4-fs: Ignoring removed orlov option [ 79.139298][ T5256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.153456][ T5258] wg2: left promiscuous mode [ 79.158185][ T5258] wg2: left allmulticast mode [ 79.163261][ T5256] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.176618][ T5256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 79.187356][ T5256] System zones: 0-1, 3-12 [ 79.191957][ T5258] wg2: entered promiscuous mode [ 79.196892][ T5258] wg2: entered allmulticast mode [ 79.203824][ T5256] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.543: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.232215][ T5256] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.543: Failed to acquire dquot type 0 [ 79.255903][ T5256] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.543: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.276504][ T5256] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.543: Invalid inode bitmap blk 0 in block_group 0 [ 79.289384][ T5256] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 79.298196][ T3806] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.312679][ T5256] EXT4-fs (loop4): 1 orphan inode deleted [ 79.312729][ T3806] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 79.333340][ T5256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.400807][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 79.409688][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 79.418974][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 79.439487][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 79.448450][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 79.458880][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.478610][ T5265] netlink: 'syz.3.548': attribute type 4 has an invalid length. [ 79.504816][ T5265] netlink: 'syz.3.548': attribute type 4 has an invalid length. [ 79.511965][ T5261] lo speed is unknown, defaulting to 1000 [ 79.868660][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 79.868676][ T29] audit: type=1326 audit(1752169055.834:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5279 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74abe6e929 code=0x7ffc0000 [ 79.941134][ T29] audit: type=1326 audit(1752169055.874:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5279 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74abe6e929 code=0x7ffc0000 [ 79.980553][ T29] audit: type=1326 audit(1752169055.904:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.004002][ T29] audit: type=1326 audit(1752169055.904:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.027564][ T29] audit: type=1326 audit(1752169055.904:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.050926][ T29] audit: type=1326 audit(1752169055.904:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.074289][ T29] audit: type=1326 audit(1752169055.904:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.097792][ T29] audit: type=1326 audit(1752169055.904:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.121281][ T29] audit: type=1326 audit(1752169055.904:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.144644][ T29] audit: type=1326 audit(1752169055.904:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2baadee929 code=0x7ffc0000 [ 80.215421][ T5297] tipc: Started in network mode [ 80.220451][ T5297] tipc: Node identity 069bb7f74f87, cluster identity 4711 [ 80.227715][ T5297] tipc: Enabled bearer , priority 0 [ 80.251442][ T5297] tipc: Disabling bearer [ 80.277898][ T5299] lo speed is unknown, defaulting to 1000 [ 80.404823][ T5306] pim6reg: entered allmulticast mode [ 80.424055][ T5306] pim6reg: left allmulticast mode [ 80.570352][ T5317] syzkaller0: entered promiscuous mode [ 80.575978][ T5317] syzkaller0: entered allmulticast mode [ 80.776853][ T5321] Falling back ldisc for ttyS3. [ 81.193296][ T5327] lo speed is unknown, defaulting to 1000 [ 81.271490][ T5331] lo speed is unknown, defaulting to 1000 [ 81.310985][ T5342] macvlan1: entered promiscuous mode [ 81.317539][ T5342] ipvlan0: entered promiscuous mode [ 81.323966][ T5342] ipvlan0: left promiscuous mode [ 81.329581][ T5342] macvlan1: left promiscuous mode [ 81.928140][ T5346] netlink: 'syz.2.575': attribute type 21 has an invalid length. [ 81.936020][ T5346] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.954521][ T5348] rdma_rxe: rxe_newlink: failed to add lo [ 81.973769][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 81.982561][ T5346] rdma_op ffff88814560f180 conn xmit_rdma 0000000000000000 [ 82.055182][ T5352] loop2: detected capacity change from 0 to 128 [ 82.389222][ T5379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.412728][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 82.421608][ T5383] netlink: 'syz.4.589': attribute type 30 has an invalid length. [ 82.438185][ T5383] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.447081][ T5383] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.455847][ T5383] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.464629][ T5383] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.474977][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 82.483995][ T5383] netlink: 'syz.4.589': attribute type 30 has an invalid length. [ 82.579733][ T5391] tipc: Enabled bearer , priority 0 [ 82.586640][ T5395] loop4: detected capacity change from 0 to 1024 [ 82.593839][ T5390] tipc: Resetting bearer [ 82.596221][ T5395] EXT4-fs: Ignoring removed orlov option [ 82.609850][ T5395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.621319][ T5390] tipc: Disabling bearer [ 82.851532][ T5408] loop3: detected capacity change from 0 to 1024 [ 82.858346][ T5408] EXT4-fs: Ignoring removed orlov option [ 82.867875][ T5408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.897809][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.049503][ T5408] ================================================================== [ 83.057683][ T5408] BUG: KCSAN: data-race in filemap_read / filemap_read [ 83.064594][ T5408] [ 83.067039][ T5408] read to 0xffff88811dacb828 of 8 bytes by task 5413 on cpu 0: [ 83.074619][ T5408] filemap_read+0x6f/0xa00 [ 83.079083][ T5408] generic_file_read_iter+0x79/0x330 [ 83.084423][ T5408] ext4_file_read_iter+0x1cc/0x290 [ 83.089569][ T5408] copy_splice_read+0x3c1/0x5f0 [ 83.094456][ T5408] splice_direct_to_actor+0x290/0x680 [ 83.099861][ T5408] do_splice_direct+0xda/0x150 [ 83.104687][ T5408] do_sendfile+0x380/0x650 [ 83.109112][ T5408] __x64_sys_sendfile64+0x105/0x150 [ 83.114321][ T5408] x64_sys_call+0xb39/0x2fb0 [ 83.118921][ T5408] do_syscall_64+0xd2/0x200 [ 83.123442][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.129345][ T5408] [ 83.131673][ T5408] write to 0xffff88811dacb828 of 8 bytes by task 5408 on cpu 1: [ 83.139310][ T5408] filemap_read+0x974/0xa00 [ 83.143828][ T5408] generic_file_read_iter+0x79/0x330 [ 83.149127][ T5408] ext4_file_read_iter+0x1cc/0x290 [ 83.154241][ T5408] copy_splice_read+0x3c1/0x5f0 [ 83.159112][ T5408] splice_direct_to_actor+0x290/0x680 [ 83.164519][ T5408] do_splice_direct+0xda/0x150 [ 83.169293][ T5408] do_sendfile+0x380/0x650 [ 83.173724][ T5408] __x64_sys_sendfile64+0x105/0x150 [ 83.178946][ T5408] x64_sys_call+0xb39/0x2fb0 [ 83.183547][ T5408] do_syscall_64+0xd2/0x200 [ 83.188088][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.193985][ T5408] [ 83.196307][ T5408] value changed: 0x00000000000002ab -> 0x00000000000002ac [ 83.203414][ T5408] [ 83.205748][ T5408] Reported by Kernel Concurrency Sanitizer on: [ 83.211916][ T5408] CPU: 1 UID: 0 PID: 5408 Comm: syz.3.599 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 83.224249][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.234309][ T5408] ================================================================== [ 83.312818][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.