last executing test programs: 1m33.215351346s ago: executing program 4 (id=602): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1018e58, &(0x7f0000000340)={[{@commit={'commit', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@nolazytime}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.137555957s ago: executing program 4 (id=604): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 1m33.115480757s ago: executing program 4 (id=605): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1m32.264876942s ago: executing program 4 (id=619): getresgid(&(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a94d926c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) pwrite64(r2, &(0x7f0000000700)='~', 0x1, 0x8) 1m31.813786015s ago: executing program 4 (id=622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000ea47b6432357bc2bcced05e84c75e369b17631524db4636b46938a61e58a9ede86c0416c36d9ba225af97e6"], 0x50) 1m31.532555126s ago: executing program 4 (id=629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x0, 0x0) 1m31.484727017s ago: executing program 32 (id=629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x0, 0x0) 1m4.084835112s ago: executing program 5 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1m4.046829383s ago: executing program 5 (id=1200): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_io_uring_setup(0x4aa, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1m3.632098945s ago: executing program 5 (id=1213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x8}}}]}, 0x38}}, 0x20040080) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6, 0x6a}]}}]}, 0x3c}}, 0x20040054) 1m3.465296816s ago: executing program 5 (id=1217): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 1m3.395977437s ago: executing program 5 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.094888549s ago: executing program 5 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x951b000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m3.094379188s ago: executing program 33 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x951b000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 44.848337469s ago: executing program 0 (id=1659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 44.796682679s ago: executing program 0 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 44.70311404s ago: executing program 0 (id=1662): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) truncate(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) 43.875923125s ago: executing program 0 (id=1677): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") chdir(&(0x7f0000000440)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0046686, 0x0) 43.681661866s ago: executing program 0 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00e40fbed30c00"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r2], 0x0, 0x400, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 43.271093828s ago: executing program 0 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 43.260425819s ago: executing program 34 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 2.930726442s ago: executing program 7 (id=2874): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x10, 0x0, 0xa, 0x80, 0x20}, {0x0, 0x6}, {0x0, 0x80}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x1}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2.890355492s ago: executing program 7 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9bb4de75d30699c4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04001c3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2.866947083s ago: executing program 7 (id=2876): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) 2.822465763s ago: executing program 7 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 2.716421384s ago: executing program 7 (id=2882): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.550462151s ago: executing program 2 (id=2915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1.505163311s ago: executing program 2 (id=2916): ioperm(0x0, 0x1, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000680), &(0x7f0000000800)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 1.209069372s ago: executing program 1 (id=2921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.167021003s ago: executing program 1 (id=2923): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000040), 0x0}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$kcm(0x15, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 1.131669123s ago: executing program 1 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010008000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.023479504s ago: executing program 1 (id=2937): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 963.619734ms ago: executing program 2 (id=2929): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 851.050595ms ago: executing program 3 (id=2930): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0xfc9c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) 834.603895ms ago: executing program 3 (id=2932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 804.076495ms ago: executing program 3 (id=2933): r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32, @ANYBLOB="d00000000a000100000000000000000008000f0081"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) 771.538905ms ago: executing program 3 (id=2934): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10506, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x100000, 0x5dd8, 0x3, 0x0, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) r0 = io_uring_setup(0x7a11, &(0x7f0000000880)={0x0, 0xd277, 0x80, 0x1, 0x128}) sigaltstack(0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 733.894765ms ago: executing program 2 (id=2935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 704.026745ms ago: executing program 2 (id=2936): creat(&(0x7f0000000300)='./file0\x00', 0x18f) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xfffffffffffffff7}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x0) 676.719956ms ago: executing program 6 (id=2938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6299, 0x80, 0x0, 0x334}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 634.349256ms ago: executing program 6 (id=2939): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000560000000000"], 0x50) 582.200206ms ago: executing program 6 (id=2940): syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x2}}, './file0\x00'}) syz_io_uring_setup(0x1725, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 532.623307ms ago: executing program 6 (id=2941): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team_slave_0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x240, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 520.427337ms ago: executing program 2 (id=2942): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) link(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) 493.253127ms ago: executing program 3 (id=2943): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 430.965497ms ago: executing program 6 (id=2944): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 430.276917ms ago: executing program 3 (id=2954): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) 412.116118ms ago: executing program 6 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 183.915989ms ago: executing program 7 (id=2946): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2031, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x6, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1fffffff, 0x0, 0x0, 0x3d, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 46.94037ms ago: executing program 1 (id=2947): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2948): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) kernel console output (not intermixed with test programs): 43][ T7249] Quota error (device loop1): write_blk: dquota write failed [ 99.342551][ T7249] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 99.355778][ T41] veth1_vlan: left promiscuous mode [ 99.359162][ T7249] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1245: Failed to acquire dquot type 0 [ 99.374741][ T41] veth0_vlan: left promiscuous mode [ 99.381617][ T7249] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.1245: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.405702][ T7249] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1245: Invalid inode bitmap blk 0 in block_group 0 [ 99.433130][ T7249] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 99.444233][ T51] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.463332][ T7249] EXT4-fs (loop1): 1 orphan inode deleted [ 99.470121][ T51] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 99.480298][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 99.493828][ T7249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.521940][ T30] audit: type=1400 audit(1741962329.785:1524): avc: denied { remount } for pid=7247 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.522394][ T7249] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.556126][ T41] team0 (unregistering): Port device team_slave_1 removed [ 99.568435][ T41] team0 (unregistering): Port device team_slave_0 removed [ 99.619761][ T7259] loop3: detected capacity change from 0 to 4096 [ 99.625209][ T7254] bridge0: entered promiscuous mode [ 99.632304][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.633815][ T7259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.658060][ T7254] bridge0: port 1(macsec1) entered blocking state [ 99.665272][ T7254] bridge0: port 1(macsec1) entered disabled state [ 99.676163][ T7254] macsec1: entered allmulticast mode [ 99.682555][ T7254] bridge0: entered allmulticast mode [ 99.689342][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.699690][ T7254] macsec1: left allmulticast mode [ 99.705272][ T7254] bridge0: left allmulticast mode [ 99.715020][ T7254] bridge0: left promiscuous mode [ 99.726327][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 99.784939][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.793065][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.816096][ T7165] bridge_slave_0: entered allmulticast mode [ 99.828274][ T7165] bridge_slave_0: entered promiscuous mode [ 99.836519][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.844373][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.853503][ T7165] bridge_slave_1: entered allmulticast mode [ 99.860749][ T7165] bridge_slave_1: entered promiscuous mode [ 99.888263][ T7278] loop2: detected capacity change from 0 to 1024 [ 99.899452][ T7278] EXT4-fs: Ignoring removed bh option [ 99.908577][ T7278] EXT4-fs: inline encryption not supported [ 99.916853][ T7278] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.916869][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.934106][ T7278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 99.958502][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.971722][ T7278] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.1246: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.993361][ T7278] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.1246: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.014247][ T7287] SET target dimension over the limit! [ 100.022302][ T7278] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1246: Failed to acquire dquot type 0 [ 100.040086][ T7165] team0: Port device team_slave_0 added [ 100.048336][ T7165] team0: Port device team_slave_1 added [ 100.056353][ T7278] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 100.076659][ T7278] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #11: comm syz.2.1246: mark_inode_dirty error [ 100.090055][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.097886][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.126175][ T7278] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 100.126217][ T7278] EXT4-fs (loop2): 1 orphan inode deleted [ 100.138001][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.165165][ T7278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.174429][ T29] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.221485][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.229806][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.244434][ T29] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 100.260994][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.312016][ T7278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.344118][ T7165] hsr_slave_0: entered promiscuous mode [ 100.352619][ T7278] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.1246: Invalid inode table block 1 in block_group 0 [ 100.369159][ T7165] hsr_slave_1: entered promiscuous mode [ 100.375449][ T7165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.387356][ T7278] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 100.397749][ T7165] Cannot create hsr debugfs directory [ 100.399411][ T7278] EXT4-fs error (device loop2): ext4_quota_off:7194: inode #3: comm syz.2.1246: mark_inode_dirty error [ 100.472125][ T7304] serio: Serial port ptm0 [ 100.501827][ T7306] loop9: detected capacity change from 0 to 7 [ 100.509295][ T7306] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.520065][ T7306] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.529073][ T7306] loop9: unable to read partition table [ 100.537602][ T7306] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 100.537602][ T7306] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 100.605306][ T7165] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.650004][ T7309] syzkaller0: entered promiscuous mode [ 100.656472][ T7309] syzkaller0: entered allmulticast mode [ 100.665661][ T7165] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.697067][ T7165] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.707547][ T7165] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.921007][ T7328] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 101.220229][ T7340] netlink: 'syz.1.1271': attribute type 10 has an invalid length. [ 101.228549][ T7340] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1271'. [ 101.241622][ T7340] team0: entered promiscuous mode [ 101.247572][ T7340] team_slave_0: entered promiscuous mode [ 101.253467][ T7340] team_slave_1: entered promiscuous mode [ 101.259610][ T7340] geneve1: entered promiscuous mode [ 101.266139][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.273758][ T7340] bridge0: port 3(team0) entered blocking state [ 101.281183][ T7340] bridge0: port 3(team0) entered disabled state [ 101.288008][ T7340] team0: entered allmulticast mode [ 101.294529][ T7340] team_slave_0: entered allmulticast mode [ 101.301619][ T7340] team_slave_1: entered allmulticast mode [ 101.308490][ T7340] geneve1: entered allmulticast mode [ 101.430166][ T7350] Cannot find del_set index 0 as target [ 101.516387][ T7353] serio: Serial port ptm0 [ 101.538415][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.566321][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.578148][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.587796][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.598859][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.606695][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.712448][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.722725][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 101.837205][ T7388] loop0: detected capacity change from 0 to 512 [ 101.844279][ T7388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.870252][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.871688][ T7165] veth0_vlan: entered promiscuous mode [ 101.892910][ T7388] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.899752][ T7165] veth1_vlan: entered promiscuous mode [ 101.921970][ T7165] veth0_macvtap: entered promiscuous mode [ 101.930233][ T7165] veth1_macvtap: entered promiscuous mode [ 101.938222][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.942361][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.959028][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.970096][ T7165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.980488][ T7165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.989872][ T7165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.999467][ T7165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.055590][ T7400] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 102.210837][ T7415] loop0: detected capacity change from 0 to 128 [ 102.261990][ T7418] serio: Serial port ptm0 [ 102.334127][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 102.398509][ T7438] loop6: detected capacity change from 0 to 1024 [ 102.407354][ T7438] EXT4-fs: Ignoring removed bh option [ 102.414006][ T7438] EXT4-fs: inline encryption not supported [ 102.420654][ T7438] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.433305][ T7438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 102.444391][ T7438] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1304: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.459956][ T7438] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.1304: lblock 0 mapped to illegal pblock 48 (length 1) [ 102.475868][ T7438] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1304: Failed to acquire dquot type 0 [ 102.488767][ T7438] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 102.501384][ T7438] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #11: comm syz.6.1304: mark_inode_dirty error [ 102.515006][ T7438] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 102.526660][ T7438] EXT4-fs (loop6): 1 orphan inode deleted [ 102.533817][ T7438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.548589][ T51] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.571120][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 102.584720][ T7438] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.595714][ T7438] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.1304: Invalid inode table block 1 in block_group 0 [ 102.611813][ T7438] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 102.632863][ T7438] EXT4-fs error (device loop6): ext4_quota_off:7194: inode #3: comm syz.6.1304: mark_inode_dirty error [ 102.682740][ T7451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1310'. [ 102.922905][ T7465] loop1: detected capacity change from 0 to 512 [ 102.936133][ T7465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.958430][ T7465] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.038071][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1317'. [ 103.106514][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.114820][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.122826][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.132918][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.140896][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.149054][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.157068][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.165175][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.173101][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.181148][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.190261][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.198411][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.206220][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.214017][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.223568][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.231979][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.240569][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.248467][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.257024][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.265107][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.273100][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.280915][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.288548][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.296932][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.305371][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.312952][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.321030][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.328952][ T5114] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 103.341407][ T5114] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.548990][ T7483] Illegal XDP return value 31 on prog (id 1163) dev syz_tun, expect packet loss! [ 103.695903][ T7493] loop0: detected capacity change from 0 to 512 [ 103.746564][ T7493] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 103.814699][ T7493] System zones: 0-2, 18-18, 34-34 [ 103.827103][ T7493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1327: bg 0: block 248: padding at end of block bitmap is not set [ 103.861027][ T7493] __quota_error: 83 callbacks suppressed [ 103.861067][ T7493] Quota error (device loop0): write_blk: dquota write failed [ 103.875030][ T7493] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.898532][ T7493] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1327: Failed to acquire dquot type 1 [ 103.920787][ T7493] EXT4-fs (loop0): 1 truncate cleaned up [ 103.934940][ T7493] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.957023][ T7493] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.127067][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 104.140301][ T7514] ipvlan2: entered promiscuous mode [ 104.146125][ T7514] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.158470][ T7512] ref_ctr_offset mismatch. inode: 0x47 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 104.162618][ T7514] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.262919][ T7518] syzkaller0: entered promiscuous mode [ 104.268971][ T7518] syzkaller0: entered allmulticast mode [ 104.314654][ T30] audit: type=1400 audit(1741962334.565:1602): avc: denied { ioctl } for pid=7519 comm="syz.1.1339" path="pid:[4026532378]" dev="nsfs" ino=4026532378 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.341313][ T30] audit: type=1326 audit(1741962334.565:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.367597][ T30] audit: type=1326 audit(1741962334.565:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.396932][ T30] audit: type=1326 audit(1741962334.565:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.422083][ T30] audit: type=1326 audit(1741962334.565:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.448923][ T30] audit: type=1326 audit(1741962334.565:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.475610][ T30] audit: type=1326 audit(1741962334.565:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.500455][ T30] audit: type=1326 audit(1741962334.565:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 104.569477][ T7535] loop2: detected capacity change from 0 to 512 [ 104.585949][ T7535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.607614][ T7535] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.626952][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1346'. [ 104.858742][ T7568] loop6: detected capacity change from 0 to 128 [ 104.897730][ T7567] bio_check_eod: 36981 callbacks suppressed [ 104.897752][ T7567] syz.6.1360: attempt to access beyond end of device [ 104.897752][ T7567] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 104.935267][ T7567] syz.6.1360: attempt to access beyond end of device [ 104.935267][ T7567] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 104.957400][ T7567] syz.6.1360: attempt to access beyond end of device [ 104.957400][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.977969][ T7567] syz.6.1360: attempt to access beyond end of device [ 104.977969][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.992830][ T7567] syz.6.1360: attempt to access beyond end of device [ 104.992830][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.007912][ T7567] syz.6.1360: attempt to access beyond end of device [ 105.007912][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.023535][ T7567] syz.6.1360: attempt to access beyond end of device [ 105.023535][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.038738][ T7567] syz.6.1360: attempt to access beyond end of device [ 105.038738][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.054312][ T7567] syz.6.1360: attempt to access beyond end of device [ 105.054312][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.069210][ T7567] syz.6.1360: attempt to access beyond end of device [ 105.069210][ T7567] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 105.303463][ T7588] loop2: detected capacity change from 0 to 128 [ 105.565867][ T7610] loop2: detected capacity change from 0 to 128 [ 105.682325][ T7620] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1383'. [ 105.776549][ T7628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1386'. [ 105.822700][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 105.894246][ T7640] loop1: detected capacity change from 0 to 512 [ 105.926878][ T7640] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1392: bg 0: block 248: padding at end of block bitmap is not set [ 105.943113][ T7640] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1392: Failed to acquire dquot type 1 [ 105.956532][ T7640] EXT4-fs (loop1): 1 truncate cleaned up [ 105.962816][ T7640] EXT4-fs mount: 6 callbacks suppressed [ 105.962835][ T7640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.984538][ T7640] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.010661][ T7658] loop0: detected capacity change from 0 to 1024 [ 106.019065][ T7658] EXT4-fs: Ignoring removed bh option [ 106.025365][ T7658] EXT4-fs: inline encryption not supported [ 106.036962][ T7662] loop3: detected capacity change from 0 to 128 [ 106.044930][ T7658] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.059316][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.073740][ T7658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 106.083932][ T7658] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.1397: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.114880][ T7665] pim6reg1: entered promiscuous mode [ 106.120850][ T7665] pim6reg1: entered allmulticast mode [ 106.126302][ T7658] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.1397: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.163565][ T7658] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1397: Failed to acquire dquot type 0 [ 106.184573][ T7658] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 106.204655][ T7658] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.1397: mark_inode_dirty error [ 106.220413][ T7658] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 106.231805][ T7658] EXT4-fs (loop0): 1 orphan inode deleted [ 106.249518][ T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.273447][ T7658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.290293][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 106.307236][ T7658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.317387][ T7658] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.1397: Invalid inode table block 1 in block_group 0 [ 106.334723][ T7658] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 106.345783][ T7658] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz.0.1397: mark_inode_dirty error [ 106.909825][ T7698] SELinux: failed to load policy [ 106.982270][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1421'. [ 106.992829][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1421'. [ 107.278653][ T7723] xt_CT: No such helper "pptp" [ 107.412860][ T7741] capability: warning: `syz.1.1436' uses 32-bit capabilities (legacy support in use) [ 107.637424][ T7758] pim6reg1: entered promiscuous mode [ 107.643620][ T7758] pim6reg1: entered allmulticast mode [ 107.742631][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881186ece00: rx timeout, send abort [ 107.878202][ T7773] loop2: detected capacity change from 0 to 2048 [ 107.886840][ T7773] EXT4-fs: inline encryption not supported [ 107.964828][ T7773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.251448][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881186ece00: abort rx timeout. Force session deactivation [ 108.306097][ T7783] loop1: detected capacity change from 0 to 128 [ 108.382122][ T7781] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.429017][ T7789] loop0: detected capacity change from 0 to 764 [ 108.451751][ T7781] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.465697][ T7781] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.465697][ T7781] [ 108.480537][ T7781] EXT4-fs (loop2): Total free blocks count 0 [ 108.487195][ T7781] EXT4-fs (loop2): Free/Dirty block details [ 108.494257][ T7781] EXT4-fs (loop2): free_blocks=2415919104 [ 108.500745][ T7781] EXT4-fs (loop2): dirty_blocks=8192 [ 108.506333][ T7781] EXT4-fs (loop2): Block reservation details [ 108.514216][ T7781] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 108.639288][ T7795] loop3: detected capacity change from 0 to 4096 [ 108.652143][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 108.668040][ T7797] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 108.688985][ T7795] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.803859][ T7799] Invalid ELF header magic: != ELF [ 108.919027][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 109.110754][ T7823] loop2: detected capacity change from 0 to 128 [ 109.342126][ T7834] tipc: Started in network mode [ 109.347572][ T7834] tipc: Node identity 7, cluster identity 1 [ 109.354484][ T7834] tipc: Node number set to 7 [ 109.648685][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 109.658649][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 109.676073][ T7865] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.684877][ T7865] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.694093][ T7865] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.702935][ T7865] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.719690][ T7862] loop3: detected capacity change from 0 to 256 [ 109.751679][ T7869] loop6: detected capacity change from 0 to 2048 [ 109.776629][ T7875] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 109.834729][ T7869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.913294][ T7869] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.944175][ T7869] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 109.957267][ T7869] EXT4-fs (loop6): This should not happen!! Data will be lost [ 109.957267][ T7869] [ 109.968137][ T7869] EXT4-fs (loop6): Total free blocks count 0 [ 109.975143][ T7869] EXT4-fs (loop6): Free/Dirty block details [ 109.982038][ T7869] EXT4-fs (loop6): free_blocks=2415919104 [ 109.988252][ T7869] EXT4-fs (loop6): dirty_blocks=48 [ 109.993600][ T7869] EXT4-fs (loop6): Block reservation details [ 110.000559][ T7869] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 110.007447][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 110.007464][ T30] audit: type=1400 audit(1741962340.275:1755): avc: denied { execute } for pid=7864 comm="syz.6.1490" path="/38/file2/cpuacct.usage_sys" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.070387][ T7892] 9pnet_fd: Insufficient options for proto=fd [ 110.094907][ T7894] vlan2: entered allmulticast mode [ 110.107158][ T7894] bond0: entered allmulticast mode [ 110.112746][ T7894] bond_slave_0: entered allmulticast mode [ 110.119669][ T7894] bond_slave_1: entered allmulticast mode [ 110.132718][ T7894] bond0: left allmulticast mode [ 110.137754][ T7894] bond_slave_0: left allmulticast mode [ 110.143391][ T7894] bond_slave_1: left allmulticast mode [ 110.156048][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.176197][ T7896] vlan2: entered allmulticast mode [ 110.182940][ T7896] bond0: entered allmulticast mode [ 110.189831][ T7896] bond0: left allmulticast mode [ 110.213189][ T30] audit: type=1326 audit(1741962340.475:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.240241][ T30] audit: type=1326 audit(1741962340.475:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.266874][ T30] audit: type=1326 audit(1741962340.475:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.294090][ T30] audit: type=1326 audit(1741962340.475:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.319618][ T30] audit: type=1326 audit(1741962340.475:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.346879][ T30] audit: type=1326 audit(1741962340.475:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.373073][ T30] audit: type=1326 audit(1741962340.475:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.400236][ T30] audit: type=1326 audit(1741962340.475:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.426160][ T30] audit: type=1326 audit(1741962340.475:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 110.519565][ T7913] vlan2: entered allmulticast mode [ 110.532661][ T7917] loop1: detected capacity change from 0 to 764 [ 110.551502][ T7919] loop3: detected capacity change from 0 to 1024 [ 110.567429][ T7919] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 110.579848][ T7919] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 110.590302][ T7919] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.602790][ T7919] EXT4-fs (loop3): invalid journal inode [ 110.610301][ T7919] EXT4-fs (loop3): can't get journal size [ 110.617580][ T7919] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.1512: blocks 2-2 from inode overlap system zone [ 110.637125][ T7919] EXT4-fs (loop3): failed to initialize system zone (-117) [ 110.664410][ T7919] EXT4-fs (loop3): mount failed [ 111.762924][ T7972] loop0: detected capacity change from 0 to 512 [ 111.804474][ T7972] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1536: bg 0: block 35: padding at end of block bitmap is not set [ 111.853621][ T7972] EXT4-fs (loop0): Remounting filesystem read-only [ 111.879605][ T7972] EXT4-fs (loop0): 1 truncate cleaned up [ 111.906643][ T7972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.927465][ T7972] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 111.935243][ T7972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.115761][ T8006] ref_ctr increment failed for inode: 0x6f1 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881044e2100 [ 112.129329][ T8003] uprobe: syz.2.1551:8003 failed to unregister, leaking uprobe [ 112.177728][ T8012] loop3: detected capacity change from 0 to 2048 [ 112.206916][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.223734][ T8012] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.322473][ T8022] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1552: bg 0: block 288: padding at end of block bitmap is not set [ 112.405834][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.446651][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 112.496521][ T8029] 8021q: adding VLAN 0 to HW filter on device team1 [ 113.120067][ T8058] loop1: detected capacity change from 0 to 128 [ 113.123293][ T8057] netlink: 'syz.0.1579': attribute type 39 has an invalid length. [ 113.182325][ T8058] bio_check_eod: 52074 callbacks suppressed [ 113.182347][ T8058] syz.1.1570: attempt to access beyond end of device [ 113.182347][ T8058] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 113.512580][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 113.659445][ T8100] syz.2.1591: attempt to access beyond end of device [ 113.659445][ T8100] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 113.813773][ T8118] loop3: detected capacity change from 0 to 764 [ 113.892632][ T8122] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 113.902121][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 114.211348][ T8137] IPv4: Oversized IP packet from 127.202.26.0 [ 114.395934][ T8145] loop0: detected capacity change from 0 to 128 [ 114.451625][ T8145] syz.0.1608: attempt to access beyond end of device [ 114.451625][ T8145] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 114.493958][ T8149] loop6: detected capacity change from 0 to 2048 [ 114.534754][ T8149] loop6: p1 < > p4 [ 114.542679][ T8149] loop6: p4 size 8388608 extends beyond EOD, truncated [ 114.729661][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1614'. [ 114.980681][ T8187] Y­4`Ò˜: renamed from lo (while UP) [ 115.058061][ T8193] bridge0: entered promiscuous mode [ 115.065043][ T8193] bridge0: port 3(macsec1) entered blocking state [ 115.071957][ T8193] bridge0: port 3(macsec1) entered disabled state [ 115.079147][ T8193] macsec1: entered allmulticast mode [ 115.085593][ T8193] bridge0: entered allmulticast mode [ 115.092277][ T8193] macsec1: left allmulticast mode [ 115.098221][ T8193] bridge0: left allmulticast mode [ 115.105437][ T8193] bridge0: left promiscuous mode [ 115.256110][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 115.256129][ T30] audit: type=1326 audit(1741962345.525:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.289839][ T30] audit: type=1326 audit(1741962345.525:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.315099][ T30] audit: type=1326 audit(1741962345.525:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.341606][ T30] audit: type=1326 audit(1741962345.525:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.367371][ T30] audit: type=1326 audit(1741962345.525:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.392976][ T30] audit: type=1326 audit(1741962345.525:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4e01d169 code=0x7ffc0000 [ 115.437650][ T8202] loop0: detected capacity change from 0 to 128 [ 115.471421][ T8204] loop6: detected capacity change from 0 to 512 [ 115.493015][ T8204] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.518508][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.518508][ T8202] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 115.536044][ T8204] EXT4-fs (loop6): 1 truncate cleaned up [ 115.542322][ T8204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.587688][ T8204] raw_sendmsg: syz.6.1633 forgot to set AF_INET. Fix it! [ 115.604012][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.604012][ T8202] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 115.643416][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.643416][ T8202] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.663134][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.663134][ T8202] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.664637][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 115.679912][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.679912][ T8202] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.703529][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.703529][ T8202] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.721066][ T8202] syz.0.1630: attempt to access beyond end of device [ 115.721066][ T8202] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.741008][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.756081][ T8215] pim6reg1: entered promiscuous mode [ 115.762173][ T8215] pim6reg1: entered allmulticast mode [ 115.771849][ T30] audit: type=1326 audit(1741962346.035:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 115.797340][ T30] audit: type=1326 audit(1741962346.035:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 115.823647][ T30] audit: type=1326 audit(1741962346.035:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 115.887654][ T30] audit: type=1326 audit(1741962346.035:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 115.893057][ T8219] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 115.925153][ T8221] sit0: entered allmulticast mode [ 115.936431][ T8221] sit0: entered promiscuous mode [ 116.020891][ T8229] loop6: detected capacity change from 0 to 764 [ 116.056012][ T8233] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 116.200589][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 116.211084][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 116.432452][ T8263] loop0: detected capacity change from 0 to 764 [ 117.134900][ T8292] loop2: detected capacity change from 0 to 128 [ 117.457003][ T8307] loop0: detected capacity change from 0 to 2048 [ 117.492198][ T8307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.535978][ T8307] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.620754][ T3300] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /358/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 117.667588][ T3300] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 117.719194][ T3300] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 117.816118][ T7532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.272776][ T41] team0: Port device geneve1 removed [ 118.347886][ T41] bond0 (unregistering): Released all slaves [ 118.354775][ T29] smc: removing ib device syz0 [ 118.468147][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 118.560942][ T8370] 9pnet: Could not find request transport: f [ 118.595690][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 118.666329][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 118.711138][ T8387] loop6: detected capacity change from 0 to 128 [ 118.760290][ T41] tipc: Disabling bearer [ 118.766422][ T41] tipc: Left network mode [ 118.772797][ T41] IPVS: stopping backup sync thread 4950 ... [ 118.830121][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 118.845925][ T41] hsr_slave_0: left promiscuous mode [ 118.856079][ T8400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1714'. [ 118.866862][ T41] hsr_slave_1: left promiscuous mode [ 118.877382][ T41] veth1_macvtap: left promiscuous mode [ 118.883302][ T41] veth0_macvtap: left promiscuous mode [ 118.894364][ T41] veth1_vlan: left promiscuous mode [ 118.901553][ T41] veth0_vlan: left promiscuous mode [ 118.992059][ T29] smc: removing ib device syz! [ 119.171903][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.179834][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.214586][ T8333] bridge_slave_0: entered allmulticast mode [ 119.237448][ T8333] bridge_slave_0: entered promiscuous mode [ 119.273488][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.281339][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.289393][ T8333] bridge_slave_1: entered allmulticast mode [ 119.296671][ T8333] bridge_slave_1: entered promiscuous mode [ 119.330424][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.349730][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.389528][ T8333] team0: Port device team_slave_0 added [ 119.410065][ T8333] team0: Port device team_slave_1 added [ 119.457508][ T8451] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.470495][ T8451] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.480640][ T8451] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.490139][ T8451] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.508192][ T8451] geneve0: entered allmulticast mode [ 119.526699][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.534561][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.564560][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.583127][ T8454] pim6reg1: entered promiscuous mode [ 119.589616][ T8454] pim6reg1: entered allmulticast mode [ 119.626410][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.633837][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.663520][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.722699][ T8333] hsr_slave_0: entered promiscuous mode [ 119.729465][ T8333] hsr_slave_1: entered promiscuous mode [ 119.736382][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.745271][ T8333] Cannot create hsr debugfs directory [ 119.841744][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 119.867874][ T8469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.935560][ T8475] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 119.960202][ T8333] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 119.984684][ T8475] team0 (unregistering): left allmulticast mode [ 119.992045][ T8475] team_slave_0: left allmulticast mode [ 119.998913][ T8475] team_slave_1: left allmulticast mode [ 120.004747][ T8475] geneve1: left allmulticast mode [ 120.010709][ T8475] bridge0: port 3(team0) entered disabled state [ 120.019552][ T8475] team_slave_0: left promiscuous mode [ 120.026327][ T8475] team0 (unregistering): Port device team_slave_0 removed [ 120.034730][ T8475] team_slave_1: left promiscuous mode [ 120.041513][ T8475] team0 (unregistering): Port device team_slave_1 removed [ 120.053838][ T8475] geneve1: left promiscuous mode [ 120.060421][ T8475] team0 (unregistering): Port device geneve1 removed [ 120.070609][ T8333] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.093627][ T8333] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.105249][ T8333] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.209443][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.230711][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.240006][ T8492] syzkaller0: entered promiscuous mode [ 120.247011][ T8492] syzkaller0: entered allmulticast mode [ 120.259696][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.261059][ T8492] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 120.267104][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.287627][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 120.317985][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.326727][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.408313][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 120.408333][ T30] audit: type=1326 audit(1741962606.672:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.416828][ T8509] loop3: detected capacity change from 0 to 1024 [ 120.485126][ T8509] EXT4-fs: Ignoring removed nobh option [ 120.491501][ T8509] EXT4-fs: Ignoring removed bh option [ 120.497877][ T30] audit: type=1326 audit(1741962606.672:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.502212][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.523663][ T30] audit: type=1326 audit(1741962606.712:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.556846][ T30] audit: type=1326 audit(1741962606.712:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.583961][ T30] audit: type=1326 audit(1741962606.712:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.609831][ T30] audit: type=1326 audit(1741962606.712:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.637060][ T30] audit: type=1326 audit(1741962606.712:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.663088][ T30] audit: type=1326 audit(1741962606.712:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.688796][ T30] audit: type=1326 audit(1741962606.712:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.714473][ T30] audit: type=1326 audit(1741962606.722:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99f47d169 code=0x7ffc0000 [ 120.717470][ T8509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.996311][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.116278][ T8333] veth0_vlan: entered promiscuous mode [ 121.136774][ T8333] veth1_vlan: entered promiscuous mode [ 121.159194][ T8333] veth0_macvtap: entered promiscuous mode [ 121.169895][ T8555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8555 comm=syz.3.1774 [ 121.184355][ T8555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8555 comm=syz.3.1774 [ 121.203504][ T8333] veth1_macvtap: entered promiscuous mode [ 121.227274][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.238642][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.250781][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.263360][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.276632][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.295330][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.304949][ T8333] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.314528][ T8333] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.323987][ T8333] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.333424][ T8333] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.493185][ T8566] loop7: detected capacity change from 0 to 2048 [ 121.501875][ T8566] EXT4-fs: Ignoring removed bh option [ 121.526592][ T8566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.548475][ T8566] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.567647][ T8566] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 121.580759][ T8566] EXT4-fs (loop7): This should not happen!! Data will be lost [ 121.580759][ T8566] [ 121.590496][ T8566] EXT4-fs (loop7): Total free blocks count 0 [ 121.597589][ T8566] EXT4-fs (loop7): Free/Dirty block details [ 121.604496][ T8566] EXT4-fs (loop7): free_blocks=2415919104 [ 121.610454][ T8566] EXT4-fs (loop7): dirty_blocks=32 [ 121.615866][ T8566] EXT4-fs (loop7): Block reservation details [ 121.623151][ T8566] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 121.663924][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.999057][ T8579] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.015493][ T8579] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 122.223453][ T8592] 9pnet_rdma: rdma_create_trans (8592): problem binding to privport: 13 [ 122.249668][ T8593] xt_CT: No such helper "pptp" [ 122.443554][ T8620] loop2: detected capacity change from 0 to 2048 [ 122.488550][ T8620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.488885][ T8629] IPv4: Oversized IP packet from 127.202.26.0 [ 122.505085][ T8620] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.598164][ T8620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1798: bg 0: block 288: padding at end of block bitmap is not set [ 122.636704][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.685004][ T8646] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1809'. [ 122.759511][ T8656] loop2: detected capacity change from 0 to 164 [ 122.776000][ T8656] Unable to read rock-ridge attributes [ 122.793576][ T8656] Unable to read rock-ridge attributes [ 122.800817][ T8656] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 123.086808][ T8688] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.096864][ T8688] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 123.105607][ T8686] xt_CT: No such helper "pptp" [ 123.243574][ T8700] tipc: Started in network mode [ 123.249954][ T8700] tipc: Node identity ac14140f, cluster identity 4711 [ 123.266440][ T8700] tipc: New replicast peer: 255.255.255.255 [ 123.274402][ T8700] tipc: Enabled bearer , priority 10 [ 123.662180][ T8742] netlink: 'syz.7.1852': attribute type 1 has an invalid length. [ 123.794027][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1853'. [ 123.804343][ T8745] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 123.815630][ T8745] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 123.850700][ T8747] netem: change failed [ 124.313183][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1866'. [ 124.324062][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1866'. [ 124.350307][ T8780] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1867'. [ 124.384478][ T5112] tipc: Node number set to 2886997007 [ 124.444040][ T8788] loop6: detected capacity change from 0 to 2048 [ 124.476887][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.487737][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.498135][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.510559][ T8793] loop3: detected capacity change from 0 to 8192 [ 124.518385][ T8788] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.575018][ T8788] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1868: bg 0: block 288: padding at end of block bitmap is not set [ 124.607007][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.697038][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1883'. [ 124.833772][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1888'. [ 124.850632][ T8823] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 124.920362][ T8827] IPVS: set_ctl: invalid protocol: 50 172.20.20.37:20000 [ 124.984559][ T8835] Falling back ldisc for ttyS3. [ 125.233380][ T8858] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1903'. [ 125.437593][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 125.437611][ T30] audit: type=1326 audit(1741962611.702:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.469690][ T30] audit: type=1326 audit(1741962611.702:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.527934][ T30] audit: type=1326 audit(1741962611.762:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.553272][ T30] audit: type=1326 audit(1741962611.762:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.579140][ T30] audit: type=1326 audit(1741962611.762:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.605588][ T30] audit: type=1326 audit(1741962611.772:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.631521][ T30] audit: type=1326 audit(1741962611.772:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.658651][ T30] audit: type=1326 audit(1741962611.772:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.684277][ T30] audit: type=1326 audit(1741962611.772:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.710409][ T30] audit: type=1326 audit(1741962611.772:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 125.772327][ T8885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1913'. [ 125.916253][ T8905] geneve0: entered allmulticast mode [ 126.095327][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 126.147360][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 126.301295][ T8927] binfmt_misc: register: failed to install interpreter file ./file2 [ 126.359038][ T8929] bridge0: entered promiscuous mode [ 126.367087][ T8929] bridge0: port 1(macsec1) entered blocking state [ 126.374571][ T8929] bridge0: port 1(macsec1) entered disabled state [ 126.395752][ T8932] netlink: 'syz.6.1933': attribute type 10 has an invalid length. [ 126.402552][ T8929] macsec1: entered allmulticast mode [ 126.410969][ T8929] bridge0: entered allmulticast mode [ 126.425357][ T8929] macsec1: left allmulticast mode [ 126.431043][ T8929] bridge0: left allmulticast mode [ 126.464742][ T8929] bridge0: left promiscuous mode [ 126.473755][ T8932] hsr_slave_0: left promiscuous mode [ 126.485522][ T8932] hsr_slave_1: left promiscuous mode [ 126.856655][ T8944] Falling back ldisc for ttyS3. [ 126.980479][ T8956] smc: net device bond0 applied user defined pnetid SYZ0 [ 127.004790][ T8956] smc: net device bond0 erased user defined pnetid SYZ0 [ 127.319197][ T8976] geneve0: entered allmulticast mode [ 127.701483][ T9003] serio: Serial port ptm0 [ 127.766697][ T9008] loop6: detected capacity change from 0 to 764 [ 127.803695][ T9008] binfmt_misc: register: failed to install interpreter file ./file2 [ 128.114606][ T9041] Falling back ldisc for ttyS3. [ 128.182856][ T9055] loop7: detected capacity change from 0 to 128 [ 128.224639][ T9047] Falling back ldisc for ttyS3. [ 128.453738][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.464662][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9069 comm=syz.7.1990 [ 128.482492][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.513558][ T9069] netlink: 'syz.7.1990': attribute type 1 has an invalid length. [ 128.541941][ T9069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.558114][ T9069] vlan2: entered promiscuous mode [ 128.563909][ T9069] bond1: entered promiscuous mode [ 128.570298][ T9069] vlan2: entered allmulticast mode [ 128.575988][ T9069] bond1: entered allmulticast mode [ 128.710335][ T9083] loop7: detected capacity change from 0 to 1024 [ 128.737255][ T9083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.756208][ T9083] EXT4-fs error (device loop7): ext4_find_dest_de:2079: inode #2: block 16: comm syz.7.1995: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=3, size=1024 fake=1 [ 128.779973][ T9083] EXT4-fs error (device loop7): ext4_find_dest_de:2079: inode #2: block 16: comm syz.7.1995: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=3, size=1024 fake=1 [ 128.818212][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.929774][ T9104] netlink: 'syz.7.2004': attribute type 7 has an invalid length. [ 128.938568][ T9104] __nla_validate_parse: 4 callbacks suppressed [ 128.938583][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2004'. [ 129.104534][ T9118] Falling back ldisc for ttyS3. [ 129.122624][ T9125] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 129.177146][ T9133] ref_ctr increment failed for inode: 0x7d1 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881044e7380 [ 129.189354][ T9132] uprobe: syz.3.2013:9132 failed to unregister, leaking uprobe [ 129.199395][ T9135] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 129.227213][ T9135] team0 (unregistering): Port device team_slave_0 removed [ 129.238595][ T9135] team0 (unregistering): Port device team_slave_1 removed [ 129.297924][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 129.367847][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2023'. [ 129.856429][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 130.911896][ T9230] IPv6: Can't replace route, no match found [ 131.018745][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2061'. [ 131.028831][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2061'. [ 131.046127][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 131.046146][ T30] audit: type=1400 audit(1741962617.312:2450): avc: denied { watch watch_reads } for pid=9249 comm="syz.2.2067" path="/437/file0" dev="tmpfs" ino=2293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.094723][ T9240] geneve0: entered allmulticast mode [ 131.116081][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 131.148103][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 131.254690][ T30] audit: type=1326 audit(1741962617.522:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.299106][ T9277] loop6: detected capacity change from 0 to 128 [ 131.314228][ T9277] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.327132][ T30] audit: type=1326 audit(1741962617.542:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.354386][ T30] audit: type=1326 audit(1741962617.542:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.370468][ T9277] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.379891][ T30] audit: type=1326 audit(1741962617.542:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.415828][ T30] audit: type=1326 audit(1741962617.542:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.442343][ T30] audit: type=1326 audit(1741962617.542:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.468870][ T30] audit: type=1326 audit(1741962617.552:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.497818][ T30] audit: type=1326 audit(1741962617.552:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.529045][ T30] audit: type=1326 audit(1741962617.552:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 131.578410][ T41] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.772242][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2096'. [ 131.785264][ T9314] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 53994 - 0 [ 131.795500][ T9314] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 53994 - 0 [ 131.804984][ T9314] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 53994 - 0 [ 131.814790][ T9314] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 53994 - 0 [ 131.826115][ T9314] geneve2: entered promiscuous mode [ 131.831861][ T9314] geneve2: entered allmulticast mode [ 133.395591][ T9423] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2141'. [ 133.471558][ T9432] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 133.766911][ T9454] loop7: detected capacity change from 0 to 512 [ 133.774267][ T9454] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 133.784847][ T9454] EXT4-fs (loop7): invalid journal inode [ 133.791003][ T9454] EXT4-fs (loop7): can't get journal size [ 133.801150][ T9454] EXT4-fs (loop7): 1 truncate cleaned up [ 133.811797][ T9454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.964952][ T5112] Process accounting resumed [ 134.002807][ T9465] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.2156'. [ 134.187083][ T9470] loop6: detected capacity change from 0 to 512 [ 134.196799][ T9470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.210229][ T9470] EXT4-fs (loop6): 1 truncate cleaned up [ 134.219227][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.230042][ T9470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.296157][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.657236][ T9507] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2177'. [ 134.690711][ T9510] ALSA: seq fatal error: cannot create timer (-19) [ 134.721332][ T9517] loop6: detected capacity change from 0 to 512 [ 134.729021][ T9517] EXT4-fs: Ignoring removed i_version option [ 134.736180][ T9517] EXT4-fs: Ignoring removed i_version option [ 134.743547][ T9517] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.757140][ T9517] EXT4-fs (loop6): 1 truncate cleaned up [ 134.763748][ T9517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.847646][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 134.877618][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.959766][ T9545] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.2189'. [ 134.976707][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2190'. [ 135.098485][ T9553] netlink: 'syz.6.2193': attribute type 10 has an invalid length. [ 135.115471][ T9553] syz_tun: entered promiscuous mode [ 135.127721][ T9553] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.516887][ T9611] loop7: detected capacity change from 0 to 256 [ 135.530153][ T9611] FAT-fs (loop7): bogus number of FAT sectors [ 135.536662][ T9611] FAT-fs (loop7): Can't find a valid FAT filesystem [ 135.558946][ T362] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 135.609839][ T9621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 135.842181][ T9644] netlink: 'syz.7.2244': attribute type 1 has an invalid length. [ 135.867615][ T9644] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 135.878892][ T9644] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 135.893731][ T9644] bond2: (slave ip6gre1): making interface the new active one [ 135.902310][ T9644] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 136.085233][ T9664] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2243'. [ 136.187588][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 136.202080][ T9673] macvtap0: entered promiscuous mode [ 136.211711][ T9673] macvtap0: left promiscuous mode [ 136.224088][ T9676] loop6: detected capacity change from 0 to 512 [ 136.231699][ T9676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.242101][ T9676] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 136.258651][ T9678] loop7: detected capacity change from 0 to 512 [ 136.266513][ T9678] EXT4-fs: Ignoring removed i_version option [ 136.273285][ T9678] EXT4-fs: Ignoring removed i_version option [ 136.283888][ T9678] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 136.308519][ T9678] EXT4-fs (loop7): 1 truncate cleaned up [ 136.329967][ T9678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.391208][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2256'. [ 136.457850][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.617795][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 136.617834][ T30] audit: type=1326 audit(1741962622.882:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.666366][ T30] audit: type=1326 audit(1741962622.882:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.693626][ T30] audit: type=1326 audit(1741962622.882:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.719620][ T30] audit: type=1326 audit(1741962622.882:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.746285][ T30] audit: type=1326 audit(1741962622.882:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.771575][ T30] audit: type=1326 audit(1741962622.882:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.797950][ T30] audit: type=1326 audit(1741962622.882:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.823297][ T30] audit: type=1326 audit(1741962622.882:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.849372][ T30] audit: type=1326 audit(1741962622.882:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 136.875717][ T30] audit: type=1326 audit(1741962622.882:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 137.563233][ T9771] loop7: detected capacity change from 0 to 1024 [ 137.612522][ T9771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.706021][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.747159][ T9797] loop7: detected capacity change from 0 to 512 [ 137.757633][ T9797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.769091][ T9797] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 138.372918][ T9844] loop6: detected capacity change from 0 to 512 [ 138.380742][ T9844] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 138.392697][ T9844] EXT4-fs (loop6): invalid journal inode [ 138.417814][ T9844] EXT4-fs (loop6): can't get journal size [ 138.431527][ T9844] EXT4-fs (loop6): 1 truncate cleaned up [ 138.438386][ T9844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.738793][ T9872] loop7: detected capacity change from 0 to 1024 [ 138.759914][ T9872] EXT4-fs: Ignoring removed orlov option [ 138.767086][ T9872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.842969][ T9872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.956162][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.065847][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 139.409094][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.449454][ T9911] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 139.618511][ T9931] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2361'. [ 139.929950][ T9965] program syz.7.2373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.073293][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 140.141809][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.150336][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.159070][ T9952] bridge_slave_0: entered allmulticast mode [ 140.168234][ T9952] bridge_slave_0: entered promiscuous mode [ 140.185461][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.193257][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.201953][ T9952] bridge_slave_1: entered allmulticast mode [ 140.210614][ T9952] bridge_slave_1: entered promiscuous mode [ 140.253681][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.275973][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.350513][ T9952] team0: Port device team_slave_0 added [ 140.363801][ T9952] team0: Port device team_slave_1 added [ 140.398789][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.406725][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.435916][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.516703][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.524721][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.552639][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.606297][ T9952] hsr_slave_0: entered promiscuous mode [ 140.623114][ T9952] hsr_slave_1: entered promiscuous mode [ 140.631489][ T9952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.645549][ T9952] Cannot create hsr debugfs directory [ 140.779537][ T9952] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.847333][ T9952] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.936633][ T9952] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.987093][ T9952] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.073543][ T9952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.088186][ T9952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.102028][ T9952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.109449][T10042] netlink: 'syz.3.2405': attribute type 4 has an invalid length. [ 141.130412][T10042] netlink: 'syz.3.2405': attribute type 4 has an invalid length. [ 141.145229][ T9952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.179152][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 141.249153][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.289394][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.308498][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.316168][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.351754][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.359397][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.402754][ T9952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.469493][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.603964][ T9952] veth0_vlan: entered promiscuous mode [ 141.630191][ T9952] veth1_vlan: entered promiscuous mode [ 141.665291][ T9952] veth0_macvtap: entered promiscuous mode [ 141.684841][ T9952] veth1_macvtap: entered promiscuous mode [ 141.729290][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.742273][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.753235][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.766116][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.783870][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.797692][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809334][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.820047][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.833181][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.852465][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.863804][ T9952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.873301][ T9952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.884324][ T9952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.896700][ T9952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.134005][T10119] loop7: detected capacity change from 0 to 1024 [ 142.141853][ T30] kauditd_printk_skb: 343 callbacks suppressed [ 142.141971][ T30] audit: type=1326 audit(1741962628.392:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 142.176422][ T30] audit: type=1326 audit(1741962628.392:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f0678d169 code=0x7ffc0000 [ 142.186046][T10119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.204379][ T30] audit: type=1326 audit(1741962628.392:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f0678d1a3 code=0x7ffc0000 [ 142.237369][ T30] audit: type=1326 audit(1741962628.392:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f0678bc1f code=0x7ffc0000 [ 142.263254][ T30] audit: type=1326 audit(1741962628.392:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7f0678d1f7 code=0x7ffc0000 [ 142.292222][ T30] audit: type=1326 audit(1741962628.392:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f0678bad0 code=0x7ffc0000 [ 142.319234][ T30] audit: type=1326 audit(1741962628.392:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f0678cd6b code=0x7ffc0000 [ 142.353741][ T30] audit: type=1326 audit(1741962628.442:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f0678bdca code=0x7ffc0000 [ 142.381227][ T30] audit: type=1326 audit(1741962628.442:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f0678bdca code=0x7ffc0000 [ 142.410830][ T30] audit: type=1326 audit(1741962628.442:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.7.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f0678b9d7 code=0x7ffc0000 [ 142.440749][T10119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.549987][T10136] program syz.6.2439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.562586][T10139] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2441'. [ 142.597699][ T8333] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.621112][T10145] tipc: Failed to remove unknown binding: 66,1,1/0:2150118674/2150118676 [ 142.633349][T10145] tipc: Failed to remove unknown binding: 66,1,1/0:2150118674/2150118676 [ 142.643663][T10145] tipc: Failed to remove unknown binding: 66,1,1/0:2150118674/2150118676 [ 142.903278][T10173] loop6: detected capacity change from 0 to 1024 [ 142.916933][T10173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.957316][T10173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.991390][T10183] bridge0: port 3(geneve0) entered blocking state [ 143.001419][T10183] bridge0: port 3(geneve0) entered disabled state [ 143.016641][T10183] geneve0: entered allmulticast mode [ 143.023574][T10183] geneve0: entered promiscuous mode [ 143.030344][T10183] bridge0: port 3(geneve0) entered blocking state [ 143.039741][T10183] bridge0: port 3(geneve0) entered forwarding state [ 143.054663][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.293512][T10205] loop6: detected capacity change from 0 to 1024 [ 143.339491][T10205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.356348][T10205] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.409540][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.516829][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 143.530379][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 143.668480][T10245] bridge0: port 3(geneve0) entered blocking state [ 143.675919][T10245] bridge0: port 3(geneve0) entered disabled state [ 143.683845][T10245] geneve0: entered allmulticast mode [ 143.690925][T10245] geneve0: entered promiscuous mode [ 143.700244][T10245] bridge0: port 3(geneve0) entered blocking state [ 143.707546][T10245] bridge0: port 3(geneve0) entered forwarding state [ 143.767578][T10251] loop6: detected capacity change from 0 to 2048 [ 143.782759][T10251] ext4: Unknown parameter 'subj_user' [ 143.845344][T10260] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.859206][T10260] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 143.939328][T10273] bridge0: port 3(geneve0) entered blocking state [ 143.946332][T10273] bridge0: port 3(geneve0) entered disabled state [ 143.952424][T10275] xt_hashlimit: max too large, truncated to 1048576 [ 143.967678][T10273] geneve0: entered promiscuous mode [ 144.137561][T10286] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2505'. [ 144.257592][T10296] netlink: 1196 bytes leftover after parsing attributes in process `gtp'. [ 144.329725][T10304] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.338014][T10304] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 144.792416][T10311] loop6: detected capacity change from 0 to 512 [ 144.800585][T10311] ext4: Unknown parameter 'noacl' [ 144.803617][T10314] bridge0: port 3(geneve0) entered blocking state [ 144.814524][T10314] bridge0: port 3(geneve0) entered disabled state [ 144.822603][T10314] geneve0: entered promiscuous mode [ 145.192364][T10332] tipc: Failed to remove unknown binding: 66,1,1/0:3666901498/3666901500 [ 145.204584][T10332] tipc: Failed to remove unknown binding: 66,1,1/0:3666901498/3666901500 [ 145.214166][T10332] tipc: Failed to remove unknown binding: 66,1,1/0:3666901498/3666901500 [ 145.247957][T10336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.255528][T10336] IPv6: NLM_F_CREATE should be set when creating new route [ 145.272078][T10338] x_tables: duplicate underflow at hook 4 [ 145.296499][T10340] xt_hashlimit: max too large, truncated to 1048576 [ 145.485027][T10363] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3596985211/3596985213 [ 145.512104][T10363] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3596985211/3596985213 [ 145.522490][T10363] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3596985211/3596985213 [ 145.854904][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.867891][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53994 - 0 [ 145.959278][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.973374][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53994 - 0 [ 146.058132][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.071949][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53994 - 0 [ 146.175110][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.186990][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53994 - 0 [ 146.276692][T10395] chnl_net:caif_netlink_parms(): no params data found [ 146.389631][ T41] geneve0: left allmulticast mode [ 146.395659][ T41] geneve0: left promiscuous mode [ 146.401721][ T41] bridge0: port 3(geneve0) entered disabled state [ 146.410701][ T41] bridge_slave_1: left allmulticast mode [ 146.417795][ T41] bridge_slave_1: left promiscuous mode [ 146.424904][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.436368][ T41] bridge_slave_0: left allmulticast mode [ 146.442626][ T41] bridge_slave_0: left promiscuous mode [ 146.449295][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.507779][T10426] loop6: detected capacity change from 0 to 256 [ 146.517843][T10426] msdos: Unknown parameter '»ÿ¸èäÓØûyûé/n' [ 146.524393][ T41] bond1: left allmulticast mode [ 146.530295][ T41] bond1: left promiscuous mode [ 146.545422][ T41] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 146.587491][T10430] unsupported nla_type 52263 [ 146.647543][T10432] xt_hashlimit: max too large, truncated to 1048576 [ 146.707338][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.718096][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.728572][ T41] bond0 (unregistering): Released all slaves [ 146.740853][ T41] bond1 (unregistering): Released all slaves [ 146.752897][ T41] bond2 (unregistering): Released all slaves [ 146.800188][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.809001][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.818277][T10395] bridge_slave_0: entered allmulticast mode [ 146.826670][T10395] bridge_slave_0: entered promiscuous mode [ 146.837582][ T41] hsr_slave_0: left promiscuous mode [ 146.848699][ T41] hsr_slave_1: left promiscuous mode [ 146.869445][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.882295][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.913842][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.923832][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.989930][T10437] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2570'. [ 147.057584][ T41] veth1_macvtap: left promiscuous mode [ 147.063946][ T41] veth0_macvtap: left promiscuous mode [ 147.081436][ T41] veth1_vlan: left promiscuous mode [ 147.094391][ T41] veth0_vlan: left promiscuous mode [ 147.105041][T10444] netlink: 1196 bytes leftover after parsing attributes in process `gtp'. [ 147.154004][T10414] +}[@ invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 147.169854][T10414] CPU: 0 UID: 0 PID: 10414 Comm: +}[@ Tainted: G W 6.14.0-rc6-syzkaller-00145-g695caca9345a #0 [ 147.169895][T10414] Tainted: [W]=WARN [ 147.169904][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.169964][T10414] Call Trace: [ 147.169970][T10414] [ 147.169978][T10414] dump_stack_lvl+0xf2/0x150 [ 147.170012][T10414] dump_stack+0x15/0x1a [ 147.170073][T10414] dump_header+0x83/0x2d0 [ 147.170098][T10414] oom_kill_process+0x341/0x4c0 [ 147.170144][T10414] out_of_memory+0x9af/0xbe0 [ 147.170188][T10414] ? css_next_descendant_pre+0x11c/0x140 [ 147.170254][T10414] mem_cgroup_out_of_memory+0x13e/0x190 [ 147.170353][T10414] try_charge_memcg+0x508/0x7f0 [ 147.170387][T10414] obj_cgroup_charge_pages+0xbd/0x1a0 [ 147.170419][T10414] __memcg_kmem_charge_page+0x9d/0x170 [ 147.170452][T10414] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 147.170493][T10414] alloc_pages_mpol+0xb4/0x260 [ 147.170539][T10414] alloc_pages_noprof+0xe8/0x130 [ 147.170642][T10414] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 147.170764][T10414] __kvmalloc_node_noprof+0x121/0x170 [ 147.170804][T10414] ? ip_set_alloc+0x1f/0x30 [ 147.170834][T10414] ip_set_alloc+0x1f/0x30 [ 147.170861][T10414] hash_netiface_create+0x273/0x730 [ 147.170930][T10414] ? __nla_parse+0x40/0x60 [ 147.170976][T10414] ? __pfx_hash_netiface_create+0x10/0x10 [ 147.171078][T10414] ip_set_create+0x3b1/0x970 [ 147.171128][T10414] ? __nla_parse+0x40/0x60 [ 147.171213][T10414] nfnetlink_rcv_msg+0x4a9/0x570 [ 147.171286][T10414] netlink_rcv_skb+0x12c/0x230 [ 147.171391][T10414] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.171430][T10414] nfnetlink_rcv+0x16c/0x15d0 [ 147.171466][T10414] ? bpf_check+0xada1/0xc230 [ 147.171502][T10414] ? xas_load+0x3ae/0x3d0 [ 147.171543][T10414] ? __rcu_read_unlock+0x4e/0x70 [ 147.171570][T10414] ? xa_load+0xb9/0xe0 [ 147.171608][T10414] ? memcg_list_lru_alloc+0xce/0x4e0 [ 147.171634][T10414] ? cgroup_rstat_updated+0x9f/0x570 [ 147.171733][T10414] ? mod_objcg_state+0x2ea/0x4f0 [ 147.171760][T10414] ? should_fail_ex+0x31/0x260 [ 147.171795][T10414] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 147.171891][T10414] ? __rcu_read_unlock+0x34/0x70 [ 147.171973][T10414] ? __netlink_lookup+0x253/0x290 [ 147.171999][T10414] netlink_unicast+0x599/0x670 [ 147.172115][T10414] netlink_sendmsg+0x5cc/0x6e0 [ 147.172158][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.172197][T10414] __sock_sendmsg+0x140/0x180 [ 147.172256][T10414] ____sys_sendmsg+0x326/0x4b0 [ 147.172318][T10414] __sys_sendmsg+0x19d/0x230 [ 147.172366][T10414] __x64_sys_sendmsg+0x46/0x50 [ 147.172397][T10414] x64_sys_call+0x2734/0x2dc0 [ 147.172510][T10414] do_syscall_64+0xc9/0x1c0 [ 147.172547][T10414] ? clear_bhb_loop+0x55/0xb0 [ 147.172600][T10414] ? clear_bhb_loop+0x55/0xb0 [ 147.172631][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.172661][T10414] RIP: 0033:0x7f244757d169 [ 147.172681][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.172714][T10414] RSP: 002b:00007f2445be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.172736][T10414] RAX: ffffffffffffffda RBX: 00007f2447795fa0 RCX: 00007f244757d169 [ 147.172750][T10414] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 147.172764][T10414] RBP: 00007f24475fe2a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.172778][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.172791][T10414] R13: 0000000000000000 R14: 00007f2447795fa0 R15: 00007fff88922c88 [ 147.172814][T10414] [ 147.172919][T10414] memory: usage 307200kB, limit 307200kB, failcnt 157 [ 147.598123][T10414] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 147.607096][T10414] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 147.615228][T10414] Memory cgroup stats for /syz1: [ 147.615430][T10414] cache 0 [ 147.625158][T10414] rss 4096 [ 147.629201][T10414] shmem 0 [ 147.632251][T10414] mapped_file 0 [ 147.637144][T10414] dirty 0 [ 147.641225][T10414] writeback 0 [ 147.645230][T10414] workingset_refault_anon 91 [ 147.650453][T10414] workingset_refault_file 240 [ 147.655953][T10414] swap 176128 [ 147.659613][T10414] swapcached 28672 [ 147.664109][T10414] pgpgin 133710 [ 147.667986][T10414] pgpgout 133703 [ 147.674535][T10414] pgfault 170448 [ 147.679563][T10414] pgmajfault 65 [ 147.683653][T10414] inactive_anon 28672 [ 147.688280][T10414] active_anon 0 [ 147.692359][T10414] inactive_file 0 [ 147.696868][T10414] active_file 0 [ 147.701296][T10414] unevictable 0 [ 147.707842][T10414] hierarchical_memory_limit 314572800 [ 147.715690][T10414] hierarchical_memsw_limit 9223372036854771712 [ 147.722708][T10414] total_cache 0 [ 147.727312][T10414] total_rss 4096 [ 147.731118][T10414] total_shmem 0 [ 147.735954][T10414] total_mapped_file 0 [ 147.740582][T10414] total_dirty 0 [ 147.744438][T10414] total_writeback 0 [ 147.748484][T10414] total_workingset_refault_anon 91 [ 147.754091][T10414] total_workingset_refault_file 240 [ 147.759968][T10414] total_swap 176128 [ 147.764495][T10414] total_swapcached 28672 [ 147.769334][T10414] total_pgpgin 133710 [ 147.773967][T10414] total_pgpgout 133703 [ 147.780037][T10414] total_pgfault 170448 [ 147.784772][T10414] total_pgmajfault 65 [ 147.790009][T10414] total_inactive_anon 28672 [ 147.795879][T10414] total_active_anon 0 [ 147.800161][T10414] total_inactive_file 0 [ 147.807445][T10414] total_active_file 0 [ 147.812183][T10414] total_unevictable 0 [ 147.817161][T10414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2560,pid=10413,uid=0 [ 147.835002][T10414] Memory cgroup out of memory: Killed process 10413 (syz.1.2560) total-vm:95628kB, anon-rss:1044kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 147.936403][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.944938][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.956779][T10395] bridge_slave_1: entered allmulticast mode [ 147.967003][T10395] bridge_slave_1: entered promiscuous mode [ 148.012054][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.050163][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.078777][T10395] team0: Port device team_slave_0 added [ 148.095498][T10395] team0: Port device team_slave_1 added [ 148.130635][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.138526][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.167970][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.185990][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.193587][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.223602][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.324369][T10395] hsr_slave_0: entered promiscuous mode [ 148.334344][T10395] hsr_slave_1: entered promiscuous mode [ 148.346769][T10395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.355341][T10395] Cannot create hsr debugfs directory [ 148.382246][T10466] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2582'. [ 148.542980][ T30] kauditd_printk_skb: 457 callbacks suppressed [ 148.542997][ T30] audit: type=1326 audit(1741962634.802:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.577118][ T30] audit: type=1326 audit(1741962634.802:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.607616][ T30] audit: type=1326 audit(1741962634.872:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.635314][ T30] audit: type=1326 audit(1741962634.872:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.659950][ T30] audit: type=1326 audit(1741962634.872:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.686793][ T30] audit: type=1326 audit(1741962634.872:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.712725][ T30] audit: type=1326 audit(1741962634.872:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.740057][ T30] audit: type=1326 audit(1741962634.872:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.770348][ T30] audit: type=1326 audit(1741962634.872:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.806364][ T30] audit: type=1326 audit(1741962635.072:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x7ffc0000 [ 148.978153][T10499] loop6: detected capacity change from 0 to 256 [ 148.992885][T10395] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.064677][T10395] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.079431][T10395] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.088721][T10395] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 149.200164][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.237372][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.340170][T10395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.352532][T10395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.379268][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.386861][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.484633][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.493043][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.531392][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 149.569868][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.721426][T10395] veth0_vlan: entered promiscuous mode [ 149.755932][T10395] veth1_vlan: entered promiscuous mode [ 149.772499][T10395] veth0_macvtap: entered promiscuous mode [ 149.790894][T10395] veth1_macvtap: entered promiscuous mode [ 149.808584][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.819703][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.830453][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.841702][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.857382][T10395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.869002][T10545] pim6reg: entered allmulticast mode [ 149.871217][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 149.880177][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.896239][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.899537][T10545] x_tables: duplicate underflow at hook 3 [ 149.906313][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.906363][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.907741][T10395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.943904][T10545] pim6reg: left allmulticast mode [ 149.944503][T10546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.964152][T10395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.973409][T10395] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.986937][T10395] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.997249][T10395] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.000545][T10549] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 150.020803][T10549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.057406][T10549] bond1: (slave veth7): Enslaving as an active interface with a down link [ 150.080211][T10549] ip6erspan0: entered promiscuous mode [ 150.090537][T10549] bond1: (slave ip6erspan0): making interface the new active one [ 150.100972][T10549] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 150.405045][T10570] loop7: detected capacity change from 0 to 128 [ 150.485215][T10570] bio_check_eod: 24294 callbacks suppressed [ 150.485237][T10570] syz.7.2620: attempt to access beyond end of device [ 150.485237][T10570] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 150.571441][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2625'. [ 150.585167][T10579] syz.7.2620: attempt to access beyond end of device [ 150.585167][T10579] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 150.631177][T10579] syz.7.2620: attempt to access beyond end of device [ 150.631177][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.713764][T10579] syz.7.2620: attempt to access beyond end of device [ 150.713764][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.734380][T10579] syz.7.2620: attempt to access beyond end of device [ 150.734380][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.754666][T10579] syz.7.2620: attempt to access beyond end of device [ 150.754666][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.818181][T10579] syz.7.2620: attempt to access beyond end of device [ 150.818181][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.881307][T10579] syz.7.2620: attempt to access beyond end of device [ 150.881307][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.919908][T10579] syz.7.2620: attempt to access beyond end of device [ 150.919908][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.964437][T10579] syz.7.2620: attempt to access beyond end of device [ 150.964437][T10579] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 151.606054][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2657'. [ 151.624135][T10656] pim6reg1: entered promiscuous mode [ 151.630389][T10656] pim6reg1: entered allmulticast mode [ 151.673931][T10660] all: renamed from bridge_slave_0 [ 152.028551][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 152.120247][T10694] SELinux: security_context_str_to_sid () failed with errno=-22 [ 152.644095][T10761] netlink: 'syz.3.2701': attribute type 12 has an invalid length. [ 153.157900][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'. [ 153.168556][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 153.190446][T10795] pim6reg1: entered promiscuous mode [ 153.197410][T10795] pim6reg1: entered allmulticast mode [ 153.201117][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 153.295193][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.306745][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.735898][T10819] tipc: Started in network mode [ 153.741765][T10819] tipc: Node identity 6ab0568351e7, cluster identity 4711 [ 153.750486][T10819] tipc: Enabled bearer , priority 0 [ 153.769296][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 153.769318][ T30] audit: type=1326 audit(1741962640.022:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.802145][ T30] audit: type=1326 audit(1741962640.022:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.826985][ T30] audit: type=1326 audit(1741962640.022:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.852907][ T30] audit: type=1326 audit(1741962640.022:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.880672][ T30] audit: type=1326 audit(1741962640.022:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.906387][ T30] audit: type=1326 audit(1741962640.022:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.935123][ T30] audit: type=1326 audit(1741962640.022:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.964808][ T30] audit: type=1326 audit(1741962640.022:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 153.991874][ T30] audit: type=1326 audit(1741962640.022:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 154.018807][ T30] audit: type=1326 audit(1741962640.022:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244757d169 code=0x7ffc0000 [ 154.051452][T10818] tipc: Resetting bearer [ 154.090596][T10818] tipc: Disabling bearer [ 154.198739][T10842] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.218864][T10842] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 154.220907][T10844] loop6: detected capacity change from 0 to 512 [ 154.258523][T10844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.281399][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'. [ 154.299393][T10844] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.334710][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.361658][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2745'. [ 154.404176][T10869] loop6: detected capacity change from 0 to 1024 [ 154.412183][T10869] EXT4-fs: Ignoring removed bh option [ 154.427238][T10869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.480401][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.510348][T10879] netem: change failed [ 154.590786][T10883] tipc: Started in network mode [ 154.596008][T10883] tipc: Node identity a273f93bde3f, cluster identity 4711 [ 154.603740][T10883] tipc: Enabled bearer , priority 0 [ 154.613510][T10882] tipc: Resetting bearer [ 154.634029][T10882] tipc: Disabling bearer [ 154.771263][T10901] Invalid ELF header magic: != ELF [ 154.863173][T10920] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.115305][T10950] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2784'. [ 155.181597][T10958] bond1: entered promiscuous mode [ 155.187389][T10958] bond1: entered allmulticast mode [ 155.193466][T10958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.206394][T10963] netlink: 'syz.7.2791': attribute type 1 has an invalid length. [ 155.219425][T10958] bond1 (unregistering): Released all slaves [ 155.373328][T10977] loop6: detected capacity change from 0 to 1024 [ 155.390804][T10977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.519780][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2801'. [ 155.537838][T10990] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 155.547861][T10990] SELinux: failed to load policy [ 155.611443][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2804'. [ 155.626710][T10994] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.697965][T10994] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.757742][T10994] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.817647][T10994] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.896869][T10994] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.935398][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 155.948343][T10994] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.987509][T10994] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.034875][T10994] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.472968][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.635980][T11020] tipc: Enabled bearer , priority 0 [ 156.656246][T11019] tipc: Resetting bearer [ 156.683731][T11019] tipc: Disabling bearer [ 156.759874][T11036] netlink: 'syz.6.2822': attribute type 1 has an invalid length. [ 156.788176][T11036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.855585][T11036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.871908][T11036] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 156.884056][T11036] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 157.482043][T11073] loop7: detected capacity change from 0 to 512 [ 157.505098][T11073] EXT4-fs: Ignoring removed oldalloc option [ 157.534170][T11073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 157.569207][T11073] EXT4-fs (loop7): 1 truncate cleaned up [ 157.578215][T11073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.658278][T10395] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.720816][T11102] netlink: 'syz.6.2849': attribute type 12 has an invalid length. [ 157.752871][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2850'. [ 157.777936][T11104] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.861762][T11104] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.950329][T11123] loop7: detected capacity change from 0 to 2048 [ 157.961574][T11104] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.966484][T11123] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.2858: bad orphan inode 8192 [ 157.988168][T11123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.018757][T11132] pim6reg: entered allmulticast mode [ 158.026178][T10395] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.027136][T11132] pim6reg: left allmulticast mode [ 158.050500][T11104] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.113282][T11141] tipc: Enabling of bearer rejected, failed to enable media [ 158.133728][T11104] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.153996][T11104] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.169229][T11104] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.183045][T11104] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.300709][T11155] loop6: detected capacity change from 0 to 512 [ 158.318340][T11155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 158.338807][T11155] System zones: 1-12 [ 158.350364][T11155] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.2870: invalid block [ 158.384740][T11155] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2870: invalid indirect mapped block 1819239214 (level 1) [ 158.405184][T11155] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2870: bg 0: block 361: padding at end of block bitmap is not set [ 158.447752][T11155] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 158.488846][T11155] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2870: attempt to clear invalid blocks 33619980 len 1 [ 158.519240][T11172] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2878'. [ 158.534954][T11155] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2870: invalid indirect mapped block 1819239214 (level 0) [ 158.553838][T11155] EXT4-fs (loop6): 1 truncate cleaned up [ 158.562083][T11155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.614611][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.678598][T11192] pim6reg: entered allmulticast mode [ 158.687031][T11192] pim6reg: left allmulticast mode [ 158.720787][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2882'. [ 158.797809][T11207] serio: Serial port ptm0 [ 158.806035][T11209] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2894'. [ 158.937424][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 158.937440][ T30] audit: type=1326 audit(1741962645.202:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.3.2897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff95b44d169 code=0x0 [ 159.072974][T11223] syzkaller0: entered promiscuous mode [ 159.079429][T11223] syzkaller0: entered allmulticast mode [ 159.429274][ T30] audit: type=1326 audit(159.373:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.457382][ T30] audit: type=1326 audit(159.373:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.483731][ T30] audit: type=1326 audit(159.373:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.510966][ T30] audit: type=1326 audit(159.373:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.541097][ T30] audit: type=1326 audit(159.373:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.572004][ T30] audit: type=1326 audit(159.373:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.600846][ T30] audit: type=1326 audit(159.373:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.625637][ T30] audit: type=1326 audit(159.373:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 159.656335][ T30] audit: type=1326 audit(159.373:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe35d169 code=0x7ffc0000 [ 160.201917][T11281] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2924'. [ 160.221070][T11283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11283 comm=syz.3.2925 [ 160.296006][T11279] loop6: detected capacity change from 0 to 128 [ 160.365824][T11292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2928'. [ 160.783107][T11321] loop6: detected capacity change from 0 to 128 [ 160.914736][T11331] loop6: detected capacity change from 0 to 1024 [ 160.926471][T11331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.267619][T11335] ================================================================== [ 161.277333][T11335] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 161.285062][T11335] [ 161.288019][T11335] write to 0xffff8881344bd924 of 4 bytes by task 11331 on cpu 0: [ 161.296201][T11335] xas_set_mark+0x131/0x150 [ 161.301041][T11335] __folio_start_writeback+0x1e8/0x430 [ 161.306814][T11335] ext4_bio_write_folio+0x591/0x9d0 [ 161.312605][T11335] mpage_process_page_bufs+0x486/0x5d0 [ 161.318904][T11335] mpage_prepare_extent_to_map+0x788/0xb80 [ 161.327825][T11335] ext4_do_writepages+0xa20/0x2130 [ 161.334556][T11335] ext4_writepages+0x159/0x2e0 [ 161.340326][T11335] do_writepages+0x1d8/0x480 [ 161.345591][T11335] file_write_and_wait_range+0x168/0x2f0 [ 161.351576][T11335] generic_buffers_fsync_noflush+0x46/0x120 [ 161.358574][T11335] ext4_sync_file+0x1ff/0x6c0 [ 161.365275][T11335] vfs_fsync_range+0x116/0x130 [ 161.371039][T11335] ext4_buffered_write_iter+0x358/0x3c0 [ 161.378286][T11335] ext4_file_write_iter+0x383/0xf20 [ 161.385467][T11335] iter_file_splice_write+0x5f1/0x980 [ 161.392871][T11335] direct_splice_actor+0x160/0x2c0 [ 161.398841][T11335] splice_direct_to_actor+0x302/0x670 [ 161.405039][T11335] do_splice_direct+0xd7/0x150 [ 161.410619][T11335] do_sendfile+0x398/0x660 [ 161.415424][T11335] __x64_sys_sendfile64+0x110/0x150 [ 161.421147][T11335] x64_sys_call+0xfbd/0x2dc0 [ 161.425870][T11335] do_syscall_64+0xc9/0x1c0 [ 161.432080][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.438755][T11335] [ 161.442351][T11335] read to 0xffff8881344bd924 of 4 bytes by task 11335 on cpu 1: [ 161.452519][T11335] xas_find_marked+0x608/0x650 [ 161.457641][T11335] find_get_entry+0x54/0x390 [ 161.462644][T11335] filemap_get_folios_tag+0x9e/0x210 [ 161.468605][T11335] mpage_prepare_extent_to_map+0x329/0xb80 [ 161.476010][T11335] ext4_do_writepages+0x6ea/0x2130 [ 161.482650][T11335] ext4_writepages+0x159/0x2e0 [ 161.488267][T11335] do_writepages+0x1d8/0x480 [ 161.494465][T11335] file_write_and_wait_range+0x168/0x2f0 [ 161.500701][T11335] generic_buffers_fsync_noflush+0x46/0x120 [ 161.509016][T11335] ext4_sync_file+0x1ff/0x6c0 [ 161.513832][T11335] vfs_fsync_range+0x116/0x130 [ 161.520192][T11335] ext4_buffered_write_iter+0x358/0x3c0 [ 161.526931][T11335] ext4_file_write_iter+0x383/0xf20 [ 161.533916][T11335] iter_file_splice_write+0x5f1/0x980 [ 161.539965][T11335] direct_splice_actor+0x160/0x2c0 [ 161.545493][T11335] splice_direct_to_actor+0x302/0x670 [ 161.552581][T11335] do_splice_direct+0xd7/0x150 [ 161.558625][T11335] do_sendfile+0x398/0x660 [ 161.563413][T11335] __x64_sys_sendfile64+0x110/0x150 [ 161.569186][T11335] x64_sys_call+0xfbd/0x2dc0 [ 161.574088][T11335] do_syscall_64+0xc9/0x1c0 [ 161.579438][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.587745][T11335] [ 161.590106][T11335] value changed: 0x0a000021 -> 0x04000021 [ 161.596101][T11335] [ 161.599065][T11335] Reported by Kernel Concurrency Sanitizer on: [ 161.606194][T11335] CPU: 1 UID: 0 PID: 11335 Comm: syz.6.2945 Tainted: G W 6.14.0-rc6-syzkaller-00145-g695caca9345a #0 [ 161.620418][T11335] Tainted: [W]=WARN [ 161.624418][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.636211][T11335] ================================================================== [ 161.748528][T11342] serio: Serial port ptm0 [ 161.959028][ T7165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.