last executing test programs: 3.236872876s ago: executing program 0 (id=5478): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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") r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x4, 0x0, 0x2, 0x1}}, 0x2e) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x20) getsockname$l2tp6(r3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1c49, &(0x7f0000000400)={0x0, 0x0, 0x10780}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r8, &(0x7f0000000000), 0x4000}]) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f00000003c0)={r11}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={r11, 0x0, r5, 0x200}) syz_io_uring_submit(r6, r7, &(0x7f0000000740)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x42d3e, 0x0, 0x0, 0x0, 0x0) r12 = io_uring_setup(0x40, &(0x7f0000002000)={0x0, 0x0, 0x2}) io_uring_enter(r12, 0x6df6, 0x0, 0xb, &(0x7f0000000000), 0x18) write(r2, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369304000300ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) timer_create(0x0, 0x0, 0x0) 2.802408053s ago: executing program 3 (id=5485): syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff6487a2bef5d608004500001400000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000d8f5601b452d000000000800655800000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000082800000006000000040000000200000f00000f010100000000000000010000000a0000000300000000000f0100000027000000002e00"], 0x0, 0x46}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000014ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0xfffffffd}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) 2.301636632s ago: executing program 0 (id=5495): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x32) shutdown(r1, 0x1) r2 = accept$inet(r0, 0x0, 0x0) dup3(r0, r2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0xc000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r8, 0x101}], 0x1, 0xe7f1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012102, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 1.913818067s ago: executing program 3 (id=5500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x40}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x400454a4, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="20000000190a03"], 0x20}}, 0x0) accept(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 1.779876282s ago: executing program 3 (id=5504): socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x16, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x2}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) prlimit64(0x0, 0x1, &(0x7f00000000c0), 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec)\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000406a101010000000000000001000006050001000700000809ad3fc84ddb2538aa2f18"], 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x84) 1.752623854s ago: executing program 3 (id=5506): r0 = socket$kcm(0x2, 0x5, 0x84) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) io_setup(0x5, &(0x7f0000000080)) mlock2(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa00, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f0545e9f007120306001e0089e9aaa911d7c2290f00894f1327c9037c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x120c086, &(0x7f0000000100)={[{@resgid}, {@noquota}, {@jqfmt_vfsold}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40d2}}, {@nobh}]}, 0x11, 0x5ec, &(0x7f0000000c00)="$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") setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000075c0)={&(0x7f0000001080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000074c0)=[{&(0x7f00000001c0)="7f", 0x1}], 0x1}, 0x0) 1.608644119s ago: executing program 4 (id=5507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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") r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x4, 0x0, 0x2, 0x1}}, 0x2e) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x20) getsockname$l2tp6(r3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1c49, &(0x7f0000000400)={0x0, 0x0, 0x10780}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r8, &(0x7f0000000000), 0x4000}]) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f00000003c0)={r11}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={r11, 0x0, r5, 0x200}) syz_io_uring_submit(r6, r7, &(0x7f0000000740)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x42d3e, 0x0, 0x0, 0x0, 0x0) r12 = io_uring_setup(0x40, &(0x7f0000002000)={0x0, 0x0, 0x2}) io_uring_enter(r12, 0x6df6, 0x0, 0xb, &(0x7f0000000000), 0x18) write(r2, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369304000300ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) timer_create(0x0, 0x0, 0x0) 1.471826275s ago: executing program 2 (id=5509): socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000121401000000f9fd0000000008000300000000000800150000000000080001000000000008004b001300000008004f0000000000b2e280a718d50cbb428de4519e0b11f168d725"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1464e5563c635e172391a6a6b45efa4b92c242ed4dce091798ddb57df7c12a7d664cf7868a352e404d79b7106ccf040b798d1b9d997fd848c3d514798cb4570879fef09f8402a9bbf75f8d01"], 0x44}}, 0x0) 1.421899776s ago: executing program 2 (id=5510): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xc4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x3d, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x4}]}]}, 0xc4}}, 0x4008010) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'cgroup.subtree_control\x00'}, {0x20, '([&-'}, {0x20, '#]/'}, {0x20, 'cgroup2\x00'}, {0x20, '/&:#'}, {0x20, '#!'}, {0x20, ')'}, {0x20, '(8/+[))'}, {}, {0x20, 'nl80211\x00'}], 0xa, "edcc6e07cabe092de11d102225ff7798252ef72e509d9ea64896784d1e1468f468a4b309aa1e43f5438fabbdc1c057c05f46e7a3a7bc884353379590aaa9761bc33be3c6f5ef88927a9fe8dd2cd5a0d3012068db92d633109519570075ebde9da25a2b1fefa28d8d36f814ce9338636c0d24326cb884631668446a4f8f936ceb0cd7c669b13c557dbd0aa0c77850ed0be6e7d3d22a24d22cc306f098782e7b1d73b2472dbbaa252bd38dbde4dbddba751d930f1c"}, 0x105) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000680)={'filter\x00', 0x0, [0x6, 0x2, 0x100, 0xffff0001, 0xc8]}, 0x0) r6 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) 1.312236721s ago: executing program 0 (id=5511): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0xc, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffffc0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000004000000000000000bb18000000000000008400000006"], 0x38}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e25, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140)="b3", 0x1, 0x0, 0x0, 0x0) 1.074856699s ago: executing program 0 (id=5512): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x24, 0xd23}, 0x18}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r3 = getpid() writev(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bind$l2tp6(r1, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000500)=ANY=[], 0xb9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) 1.042356891s ago: executing program 0 (id=5513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x8, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000014d8740909000000fa1b6c0000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x707400, 0x0) io_uring_enter(r11, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000100)='\xd3\x9cqG?\x99\\\x8b\x89\x15\xb9\x8a\xa5\x0e\xa2\xfa\x05.\xc2\xd7?\xd8\xba{j\\\xc2`:f\x13\xa2\xcaS\xa4,^^&\x86\xdei\xc80\x14\x92\xeaY\xdf\xc3@\xc6W\xb8\x11\xbe\xd4D\xec\x9e1\x12{', 0x0, 0x21, 0x0) 820.800289ms ago: executing program 1 (id=5517): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x41, 0x3, 0x208, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0xffffff00, 0x0, 'wlan1\x00', 'pimreg0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7f, 0xd, [0x4, 0x26, 0x39, 0x1e, 0x8, 0x24, 0x3a, 0x37, 0x25, 0x3f, 0x7, 0x10, 0xb, 0xb, 0xf, 0x3c], 0x1, 0xffff, 0x8f8}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_vlan\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1af) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000200)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005140000001100010000000000000000000000000ad9e4623730b9e76de267b838b97739c733dc1e4056e10aa822695932d4360a3bf60c06ce28b89d55bf69cc582d3f984b16bc29ce2018615479ce9055224e066a44e0d281b93f7fd67ed99bb39ac97da111826072e144fd50002a5698819f1985b199700690d03f1a988f9eed5ff32a9329eb442455f338d489dd9b35f0761d8dfc637a2ef8f17c3cafabda0f5500069c2576b92151399d1aabc6d90da1235258777c24509d86ad11d44055a6daf17ecb6fe988c886d5b101be9dd7113a4490d5ae547d2c97c5eb0bc0b676d368d2e4c81244dc9b80e20b59"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) 780.035451ms ago: executing program 1 (id=5518): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5417, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000680), 0x0, &(0x7f0000001440)) io_uring_setup(0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x2000f000, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00007c65aff80000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000700)) syz_io_uring_setup(0xf4e, &(0x7f0000000440), &(0x7f00000003c0), &(0x7f0000000640)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$eJzs3TFoJFUcBvBvZne9y90ipzaCqAciooFwdoLN2SgcyHGICCqciNgoiRAT7BIrGwutVVKJEMTOaClpgo0iWEVNERtBg4XBQouV3Ulk3USjbrJzZH4/mGRm5735v2Hne7PN7AZorAtJLidpJZlO0klSDDe4WC0X9jZXpjauJ73eEz8Xg3bVdmW/3/kky0keSrJeFnmpnSyuPbP96+Zj97250Ln3/bWnpyZ6knt2trce333v6hsfX3lw8cuvf7xa5HK6fzmv41cc8lq7SG49iWI3iKJd9wj4N6699tE3/dzfluSeQf47KVO9eW/N37TeyQPv/l3ft3/66o5JjhU4fr1ep38PXO4BjVMm6aYoZ5JU62U5M1N9hv+2da58eW7+1ekX5xZmX6h7pgKOSzfZevTTM5+cH8n/D60q/8Dp1c//k9dWv+uv77bqHg0wEXdW//r5n35u6f7IPzSO/ENzyT8013j5v3giYwImw/0fmkv+obnkH06xzj/vln9oLvmH5pJ/aK7h/AMAzdI7U/cTyEBd6p5/AAAAAAAAAAAAAAAAAACAg1amNq7vL5Oq+fk7yc4jSdqH1W8Nfo84OTv4e+6Xot/sT0XVbSzP3j3mAcb0Yc1PX9/8fb31v7ir3vpLs8ny60kutdsHr79i7/r7/245Yn/n+TEL/EfFyPbDT022/qjfV0++xgdD62dH9l3ZTD7rzz+XDpt/ytw+1Gt0/uke/RXLR3rltzEPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMT8EQAA///wCW4b") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000380), 0x208e24b) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(r3, 0x306f, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'netpci0\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x5, 0xd7, "ad976985750fb34f45c6bc30bef8f83687417d6c165c3fbad29d95651a29f3048e1c04667d2f04e95ff28900637c21da0712ada2446eaf8a66e6eb0b4b3c32c369f5aef3242985ca348800ddfa7c85034d5e8230c8af94ae124cc4a834f647f9fcca450ec1bbe25b882f2caca1ade983ca6172a57d248a4bdc398cfc2745caedf405c0e2d867bd71cf917ecd925e95bdf4f027109316c27ab5fffc581b4ee50c122096cc21cd228f698c32a33b616bce02ca323321ac46e49abe9b06d59e61dc034b6af888c5445b1ed1a864850a9d25b3652d84f46f44"}}) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) 643.033396ms ago: executing program 4 (id=5519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f00000000c0)) epoll_create1(0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x8000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000120003470fbb65e1c3e4ffff060060001f0000005600000025000000040012000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 574.318238ms ago: executing program 3 (id=5520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x48}}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x8}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030070", 0x7}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201", @ANYRES64=r6, @ANYRES8], 0x18) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x40) 573.730028ms ago: executing program 1 (id=5521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x8400, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad855d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c8402b67801263c4ff97d2f85426a5963d4fa3e26cc05972c162f223f0000000000000003fe70928295a82b12d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="05804a07009f4306d715e620b9d4", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcd1) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffde, 0x503d40) ioctl$EVIOCSABS20(r4, 0x400445a0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r2, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f0850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x2e) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xc, 0x8, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8a, &(0x7f0000000440)=""/138, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xa, 0x9, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r2, r1], &(0x7f0000000300)=[{0x2, 0x2, 0x10, 0xb}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x4}, 0x90) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000180), 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000001840)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x200, 0x0, 0x0, 0x101}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 513.949861ms ago: executing program 2 (id=5522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x8400, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="05804a07009f4306d715e620b9d4", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcd1) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffde, 0x503d40) ioctl$EVIOCSABS20(r4, 0x400445a0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r2, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f0850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x2e) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xc, 0x8, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8a, &(0x7f0000000440)=""/138, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xa, 0x9, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r2, r1], &(0x7f0000000300)=[{0x2, 0x2, 0x10, 0xb}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x4}, 0x90) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000180), 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000001840)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x200, 0x0, 0x0, 0x101}}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) 513.432281ms ago: executing program 2 (id=5523): r0 = socket$isdn(0x22, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x22020600) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') setns(r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) unshare(0x42000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}], 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000140)=""/191) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x1}, 0x86, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="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", 0x1cc, 0x0, &(0x7f0000000400)={0x2, 0x6b, {0x0, 0xc, 0x2d, "07fcc65e4e75bf938141b280a54066ac294ce92cd8c0136725a354db97fe652e1f3580e19545eb8c3f99c727bc", 0x31, "40f29e52511ea5c982cda8b9c548e0773e6fbc6cfd3bfc9a7c3237b5efcd8dd85882a8ec8432311da9c11097fcad0fbc12"}, 0x1e, "322edf58077fe60951e019d2ef702e9f7f63d2928220f81bd67e292640a0"}, 0x95}) 513.217901ms ago: executing program 4 (id=5524): socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x16, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x2}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) prlimit64(0x0, 0x1, &(0x7f00000000c0), 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec)\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000406a101010000000000000001000006050001000700000809ad3fc84ddb2538aa2f18"], 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x84) 466.653302ms ago: executing program 3 (id=5525): syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff6487a2bef5d608004500001400000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000d8f5601b452d000000000800655800000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000082800000006000000040000000200000f00000f010100000000000000010000000a0000000300000000000f0100000027000000002e00"], 0x0, 0x46}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000014ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) 466.425952ms ago: executing program 4 (id=5526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/73, 0xfffffdef, 0x0) 416.083404ms ago: executing program 1 (id=5527): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x23020400) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, &(0x7f00000000c0)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syncfs(r5) syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffff9f44, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x165, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000060000000000f97200"], &(0x7f0000000080)='GPL\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000001640)}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="24000000120001a10000000000000000100000000c0000000000000000000000040002807617423a4fbfaa85ab50c15c892699b256dc7040723044dad487260bc1ba675522ae2bd3845a1ea034dbc7f7fb5e3b6ea5e3e8d3a96830f77f1e29aa4743fd97fddddbd08502085568966201cf75194dbbf21685bcba78cc21da27b8c27ce1cbb092e1b5ec0d6ff18e401b89edc619c22c5e5453273157b690952dee8f00f32cb25579f7f8f3a9a1a8debec0152d7eba7dfbfbf538e7b01e0e33b35d2b685052af97d41c0000008000000000ec1d88ce76e8be7a8fb2625ae5c284d70dc80000"], 0x24}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x31, 0x0, 0x0, 0x0, 0xdc, &(0x7f0000000500)=""/220, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000006c0)=[{0x0, 0x5, 0xe, 0x3}, {0x1, 0x3, 0x5, 0xb}, {0x1, 0x1, 0x8, 0x2}, {0x5, 0x2, 0x3, 0x8}, {0x5, 0x5, 0xe, 0x8}], 0x10, 0x5}, 0x90) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60000000007a3afffe8000000000000000000000000000bb00000000000000000000ffff7f00000186009078000000000000000000000000000aa78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af080200010000000500000000260004001801b8a3e10000a30000"], 0x0) ioperm(0x0, 0x1b, 0x8001) io_setup(0x0, 0x0) 410.487845ms ago: executing program 4 (id=5528): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x41, 0x3, 0x208, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0xffffff00, 0x0, 'wlan1\x00', 'pimreg0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7f, 0xd, [0x4, 0x26, 0x39, 0x1e, 0x8, 0x24, 0x3a, 0x37, 0x25, 0x3f, 0x7, 0x10, 0xb, 0xb, 0xf, 0x3c], 0x1, 0xffff, 0x8f8}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_vlan\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1af) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000000c0)) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000200)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) 359.151716ms ago: executing program 1 (id=5529): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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") r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x4, 0x0, 0x2, 0x1}}, 0x2e) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x20) getsockname$l2tp6(r3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1c49, &(0x7f0000000400)={0x0, 0x0, 0x10780}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r8, &(0x7f0000000000), 0x4000}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={r10, 0x0, r5, 0x200}) syz_io_uring_submit(r6, r7, &(0x7f0000000740)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x42d3e, 0x0, 0x0, 0x0, 0x0) r11 = io_uring_setup(0x40, &(0x7f0000002000)={0x0, 0x0, 0x2}) io_uring_enter(r11, 0x6df6, 0x0, 0xb, &(0x7f0000000000), 0x18) write(r2, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369304000300ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) timer_create(0x0, 0x0, 0x0) 308.076159ms ago: executing program 4 (id=5530): r0 = socket$kcm(0x2, 0x5, 0x84) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) io_setup(0x5, &(0x7f0000000080)) mlock2(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa00, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f0545e9f007120306001e0089e9aaa911d7c2290f00894f1327c9037c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x120c086, &(0x7f0000000100)={[{@resgid}, {@noquota}, {@jqfmt_vfsold}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40d2}}, {@nobh}]}, 0x11, 0x5ec, &(0x7f0000000c00)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0kKQAg2t0aIJJcGNiXFjjIkrF+J/oUS2rHTlwo0rQ0LUsDTxmrmdKb3t3Jb+uJ3a+XyS2545507PmbbfnnNPz5kbQGUNph9qEQcjYjqJ6E/mF8s6IyscXHjeoz8+PJ8+kqjXX/stiSTLy5+fZJ/7spN7IuKH75M40LGy3pm5G5fHp6Ymr2fHw7NXpodn5m4cvXRl/OLkxcmroy+Mnjp54uSpkWMbuq6bBXlnb7/zXv/HY29+/eWfycg3P48lcTpezp649Dq2Si37niQri/pObXVlJelY/D15LFmewY6V//y6IuJ/0R8dS36a/fHRK6U2DmirehJRByoqEf9QUfk4IH9tv/x1cK2UUQmwHR6eWZgAWBn/nQtzg9HTmBvY+yhpmudJImJjM3PN9kXE/Xtjty/cG7sdbZqHA4rN34qI/xfFf9KI/4HoiYFG/Nea4j8dF5zLPqf5r26w/uVTxeIfts9C/PesGv/RIv7fWhL/b2+w/n3ZHGSqtyn+ezdzWQAAAAAAAFBJd89ExPNF//+vLa7/iYL1P30RcXoL6h9cdrzy//+1B1tQDVDg4ZmIlwrX/9by1b8DHVnqX431AF3JhUtTk8ci4t8RcSS69qTHI6vUcfSTA1+0KhvM1v/lj7T++9lawKwdDzr3NJ8zMT44vtnrBiIe3op4qnD9b7LY/ycF/X/692D6Ces48Oydc63K1o5/oF3qX0UcLuz/H9+1Iln9/hzDjfHAcD4qWOnpDz79tlX9G41/t5iAzUv7/72rx/9AsvR+PTPrr+P4XGe9VdnGxv+z493J6427CnVnee+Pz85eH4noTs52pLlN+aPrbzPsRnk85PGSxv+RZ1af/ysa//dGxPyyr5383rynOPffv/p+adUe438oTxr/E+vq/9efGL0z8F2r+p+s/z/R6OuPZDlp/9++7wj8c3yeh2l3c35BOHYWFW13ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgN6hFxL5IakOL6VptaCiiLyL+E3trU9dmZp+7cO3dqxNpWeP9/2v5O/32Lxwnjff/r6Xpx8ej0Xx8PCL2R8RnHb2N46Hz16Ymyr54AAAAAAAAAAAAAAAAAAAA2CH6Wuz/T/3aUXbrgLbrLLsBQGkK4v/HMtoBbL919//z7WkHsP2M/6G6xD9Ul/iH6hL/UF3iH6pL/EN1iX8AAAAAANhV9h+6+1MSEfMv9jYeqe6srKvUlgHtViu7AUBp3OIHqsvSH6gur/GBZI3ynpYnrXXmaqbPb+JkAAAAAAAAAAAAAKicwwft/4eqsv8fqsv+f6iufP//oZLbAWw/r/GBWGMnf+H+/9XPmt9sewAAAAAAAAAAAACAZjNzNy6PT01NXpd4Y2c0oyjR26avXK/Xb6a/BaVf4O5I5Evhd0p7liXyvX5PdlZ5f5MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmfwcAAP//yrklTQ==") setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000075c0)={&(0x7f0000001080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000074c0)=[{&(0x7f00000001c0)="7f", 0x1}], 0x1}, 0x0) 235.595892ms ago: executing program 2 (id=5531): set_mempolicy(0x3, 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0xb30, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa60, 0x2e8, 0x2e8, 0xa60, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x8b0, 0x8e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[], 0x6}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x140, 0x180, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @common=@frag={{0x30}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 43.010909ms ago: executing program 2 (id=5532): r0 = socket(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)={0x0, 0x101, 0x1, [0x3]}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x80004508, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x160}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x5, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000040)={'erspan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8913, &(0x7f00000013c0)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) io_setup(0xfffff800, &(0x7f00000001c0)=0x0) io_cancel(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xfff, r2, &(0x7f0000000340)="eba1801d9f6c219233c5f0d415180dc82e8e8735f657390a77473ae7ab28347b3e7632ceaa4de9c9dc924d79d99e66a2184bee950be4800c832be77cce430f6f45b4bf6ebb777f2743a032dc7cec8a839b4a99ea32e5ed0b82ef4cf8a76a039d0a9d86a8b7f6e1e9bc5ad13976f19a5c3efb07dc4eb7e12bdff14a1d75e24d21620081a33c4713921d70b512b12dccf17192c8b876d10010d37b384d7cee30bfdd4d4fdc", 0xa4, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000440)) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)={0x394, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x324, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "87da5a900fb74b3f5606adc041bfdef6c1dd1e8a4e6aaa50431036086a6e4bc9f30e46d35972e7f3cfd1e0863bc26c0b9c15828bb98ceda31f8f0240259d2d3eaf9334bfbafe8f675e7a7f1de3d87d37b7d613d0692a47be67979f9e5965627b5e4c36bba24cbf7ee8b6ca06052b7c2d249004f882fdf69cf13729c1b3d384bc5f37144a58cd5504a07b0cc8e60529c79a3f936b80bbd8d1ac622cc39fd11188"}, @ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "0bb6ef9b1286cbf0fdfa1a54be30e029a6bf1ce2d4e76a2c44277586d41a7a740f005a5fff3fd85d74673574153165cd404488027f8c8aa18578e2b99359a73abe560df94b103c72aa10"}, @ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "b7febf50d85b0ae967e07a86827b77a6540d580da7c88e5aa1448b285a77307cd9de731bf682d65acda7244f655481a5a3b4c78b4a1db493a3c7076940147ea65cb1d0611e595fd9290e24e80417"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '~\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*,)*]$\xca$\a!\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[)+)-%){\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "f69aa533cdb23e10fcc9e25af81e8c614901c08e7c517a65db0db849a18e5cf07b12f50f0f6d0e97a8aa8a9a6ce168a8afbb4718bf07c0dc1abd47b8f1b3597daeda4485d39e37ea50398932732b140cc017ecd1696d503dfac030eb5785ae6e1e34b00c602ec0dcf68ad8947c97b52703e2fa0eefc56526402740e135ce2d91b908e43770277983fc08371c80"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x394}}, 0x4000000) close(r6) 265.701µs ago: executing program 1 (id=5533): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5417, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000680), 0x0, &(0x7f0000001440)) io_uring_setup(0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x2000f000, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00007c65aff80000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000700)) syz_io_uring_setup(0xf4e, &(0x7f0000000440), &(0x7f00000003c0), &(0x7f0000000640)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000380), 0x208e24b) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(r3, 0x306f, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'netpci0\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x5, 0xd7, "ad976985750fb34f45c6bc30bef8f83687417d6c165c3fbad29d95651a29f3048e1c04667d2f04e95ff28900637c21da0712ada2446eaf8a66e6eb0b4b3c32c369f5aef3242985ca348800ddfa7c85034d5e8230c8af94ae124cc4a834f647f9fcca450ec1bbe25b882f2caca1ade983ca6172a57d248a4bdc398cfc2745caedf405c0e2d867bd71cf917ecd925e95bdf4f027109316c27ab5fffc581b4ee50c122096cc21cd228f698c32a33b616bce02ca323321ac46e49abe9b06d59e61dc034b6af888c5445b1ed1a864850a9d25b3652d84f46f44"}}) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) 0s ago: executing program 0 (id=5534): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xc4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x3d, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x4}]}]}, 0xc4}}, 0x4008010) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'cgroup.subtree_control\x00'}, {0x20, '([&-'}, {0x20, '#]/'}, {0x20, 'cgroup2\x00'}, {0x20, '/&:#'}, {0x20, '#!'}, {0x20, ')'}, {0x20, '(8/+[))'}, {}, {0x20, 'nl80211\x00'}], 0xa, "edcc6e07cabe092de11d102225ff7798252ef72e509d9ea64896784d1e1468f468a4b309aa1e43f5438fabbdc1c057c05f46e7a3a7bc884353379590aaa9761bc33be3c6f5ef88927a9fe8dd2cd5a0d3012068db92d633109519570075ebde9da25a2b1fefa28d8d36f814ce9338636c0d24326cb884631668446a4f8f936ceb0cd7c669b13c557dbd0aa0c77850ed0be6e7d3d22a24d22cc306f098782e7b1d73b2472dbbaa252bd38dbde4dbddba751d930f1c"}, 0x105) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000680)={'filter\x00', 0x0, [0x6, 0x2, 0x100, 0xffff0001, 0xc8]}, 0x0) r6 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) kernel console output (not intermixed with test programs): de=0, rec_len=0, size=1024 fake=0 [ 327.499698][T21481] netlink: 'syz.1.4715': attribute type 14 has an invalid length. [ 327.528993][T20440] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 327.587167][T20440] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 327.610106][T20440] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 327.651703][T21487] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4717'. [ 327.655645][T21490] loop1: detected capacity change from 0 to 2048 [ 327.677289][T20440] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 327.709090][T20440] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 327.756254][T20440] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 327.778174][T21490] loop1: p2 < > [ 327.802914][T21495] loop3: detected capacity change from 0 to 512 [ 327.838420][T21495] EXT4-fs: dax option not supported [ 328.049687][T21510] syz.1.4725[21510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.049826][T21510] syz.1.4725[21510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.070412][T21510] loop1: detected capacity change from 0 to 128 [ 328.102235][T21510] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.171475][ T3182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 328.181914][ T3182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.221877][T21517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.290907][ T3182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 328.301328][ T3182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.335220][T21520] netlink: 'syz.1.4728': attribute type 14 has an invalid length. [ 328.364696][ T3182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 328.375250][ T3182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.460381][ T3182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 328.470834][ T3182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.588974][ T3182] bridge_slave_1: left allmulticast mode [ 328.594912][ T3182] bridge_slave_1: left promiscuous mode [ 328.600723][ T3182] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.611372][T21537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10266 sclass=netlink_route_socket pid=21537 comm=syz.0.4733 [ 328.624475][ T3182] bridge_slave_0: left allmulticast mode [ 328.630227][ T3182] bridge_slave_0: left promiscuous mode [ 328.635967][ T3182] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.710674][T21542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63744 sclass=netlink_route_socket pid=21542 comm=syz.3.4735 [ 328.752842][ T3182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.763722][ T3182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.774594][ T3182] bond0 (unregistering): Released all slaves [ 328.785688][T21540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4730'. [ 328.873005][T21519] chnl_net:caif_netlink_parms(): no params data found [ 328.888268][T21544] loop3: detected capacity change from 0 to 128 [ 328.901415][ T3182] hsr_slave_0: left promiscuous mode [ 328.910154][ T3182] hsr_slave_1: left promiscuous mode [ 328.916792][ T3182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.924228][ T3182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.933491][ T3182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.940979][ T3182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.954039][ T3182] veth1_macvtap: left promiscuous mode [ 328.959598][ T3182] veth0_macvtap: left promiscuous mode [ 328.965134][ T3182] veth1_vlan: left promiscuous mode [ 328.970449][ T3182] veth0_vlan: left promiscuous mode [ 329.079498][ T3182] team0 (unregistering): Port device team_slave_1 removed [ 329.092445][ T3182] team0 (unregistering): Port device team_slave_0 removed [ 329.186171][T21519] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.193421][T21519] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.200742][T21519] bridge_slave_0: entered allmulticast mode [ 329.207701][T21519] bridge_slave_0: entered promiscuous mode [ 329.214752][T21519] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.222035][T21519] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.230956][T21519] bridge_slave_1: entered allmulticast mode [ 329.237546][T21519] bridge_slave_1: entered promiscuous mode [ 329.258361][T21519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.278600][T21519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.294930][T21556] loop3: detected capacity change from 0 to 512 [ 329.313470][T21519] team0: Port device team_slave_0 added [ 329.322980][T21519] team0: Port device team_slave_1 added [ 329.325588][T21556] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.357010][T21519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.357529][T21558] syz.1.4738[21558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.364013][T21519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.364059][T21558] syz.1.4738[21558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.401434][T21519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.425579][T21519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.432771][T21519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.458137][T21558] loop1: detected capacity change from 0 to 128 [ 329.458969][T21519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.469523][T21558] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.498627][T21570] loop0: detected capacity change from 0 to 512 [ 329.512732][T21568] netlink: 'syz.4.4739': attribute type 14 has an invalid length. [ 329.521228][T21570] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 329.551269][T21570] EXT4-fs (loop0): 1 truncate cleaned up [ 329.562020][T21519] hsr_slave_0: entered promiscuous mode [ 329.573839][T21519] hsr_slave_1: entered promiscuous mode [ 329.669045][T21578] 9pnet_virtio: no channels available for device [ 329.745345][T21588] loop3: detected capacity change from 0 to 512 [ 329.782072][T21588] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.881482][T21603] netlink: 'syz.0.4751': attribute type 14 has an invalid length. [ 329.917342][T21605] loop0: detected capacity change from 0 to 512 [ 329.925176][T21605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 329.933250][T21605] System zones: 1-12 [ 329.937345][T21605] EXT4-fs (loop0): orphan cleanup on readonly fs [ 329.945555][T21605] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4752: bg 0: block 328: padding at end of block bitmap is not set [ 329.961371][T21605] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 329.970921][T21605] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4752: invalid indirect mapped block 65280 (level 0) [ 329.986305][T21605] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.4752: attempt to clear invalid blocks 33619980 len 1 [ 330.008828][T21605] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4752: invalid indirect mapped block 1819239214 (level 0) [ 330.024386][T21605] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4752: invalid indirect mapped block 1819239214 (level 1) [ 330.040660][T21605] EXT4-fs (loop0): 1 orphan inode deleted [ 330.047125][T21609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.074798][T21612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4747'. [ 330.116594][T21519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.127010][T21519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.136036][T21519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.159834][T21519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.184672][T21519] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.191857][T21519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.199177][T21519] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.206255][T21519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.228304][ T3231] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.237709][ T3231] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.269526][T21519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.282613][T21519] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.294501][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.301710][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.318142][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.325275][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.345766][T21519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.356177][T21519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.408515][T21519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.480907][T21519] veth0_vlan: entered promiscuous mode [ 330.489508][T21519] veth1_vlan: entered promiscuous mode [ 330.505528][T21519] veth0_macvtap: entered promiscuous mode [ 330.513262][T21519] veth1_macvtap: entered promiscuous mode [ 330.524613][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.535312][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.545343][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.555949][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.565941][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.576647][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.586468][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.597267][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.607211][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.617655][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.629008][T21519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.642703][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.653372][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.663346][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.673823][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.683646][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 330.683662][ T29] audit: type=1400 audit(1719918859.511:2052): avc: denied { read write } for pid=18207 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 330.689740][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.689770][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.716199][ T29] audit: type=1400 audit(1719918859.551:2053): avc: denied { open } for pid=18207 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 330.724461][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.734132][ T29] audit: type=1400 audit(1719918859.551:2054): avc: denied { ioctl } for pid=18207 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=1569 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 330.757480][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.813262][T21519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.825687][T21519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.834551][T21519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.843334][T21519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.852064][T21519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.875620][T21632] devtmpfs: Unknown parameter 'posixacl' [ 330.885140][ T29] audit: type=1400 audit(1719918859.721:2055): avc: denied { execute } for pid=21631 comm="syz.4.4757" path="/224/file0/bus" dev="ramfs" ino=79724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 330.915824][T21634] loop0: detected capacity change from 0 to 512 [ 330.945351][T21634] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.969300][T21645] loop1: detected capacity change from 0 to 512 [ 330.974912][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 330.982689][T21649] loop2: detected capacity change from 0 to 1024 [ 330.993511][T21645] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.4761: casefold flag without casefold feature [ 331.015981][T21634] loop0: detected capacity change from 0 to 1764 [ 331.022709][T21645] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4761: couldn't read orphan inode 15 (err -117) [ 331.037342][T21634] iso9660: Bad value for 'uid' [ 331.057206][ T29] audit: type=1400 audit(1719918859.891:2056): avc: denied { link } for pid=21644 comm="syz.1.4761" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 331.105399][T21645] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz.1.4761: Unrecognised inode hash code 4 [ 331.116916][T21645] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.4761: Corrupt directory, running e2fsck is recommended [ 331.130738][T21645] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz.1.4761: Unrecognised inode hash code 4 [ 331.142107][T21645] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.4761: Corrupt directory, running e2fsck is recommended [ 331.142514][T21634] loop0: detected capacity change from 0 to 512 [ 331.156390][ T29] audit: type=1400 audit(1719918859.991:2057): avc: denied { rename } for pid=21644 comm="syz.1.4761" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 331.196713][ T29] audit: type=1400 audit(1719918859.991:2058): avc: denied { rmdir } for pid=21644 comm="syz.1.4761" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 331.200767][T21634] EXT4-fs (loop0): filesystem is read-only [ 331.231545][T21634] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 331.266956][T21634] EXT4-fs (loop0): filesystem is read-only [ 331.267979][T21659] loop3: detected capacity change from 0 to 128 [ 331.272825][T21634] EXT4-fs (loop0): orphan cleanup on readonly fs [ 331.287643][T21634] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4756: bg 0: block 64: padding at end of block bitmap is not set [ 331.291208][T21659] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.314804][T21634] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 331.346207][T21634] EXT4-fs (loop0): 1 orphan inode deleted [ 331.363048][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4764'. [ 331.378310][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4763'. [ 331.456217][T21672] loop1: detected capacity change from 0 to 512 [ 331.473472][T21672] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 331.612449][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4776'. [ 331.638056][T21693] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 331.675523][T21688] loop0: detected capacity change from 0 to 8192 [ 331.735361][T21700] loop3: detected capacity change from 0 to 128 [ 331.764350][T21700] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.815342][ T29] audit: type=1326 audit(1719918860.641:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21646 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 331.901620][T21706] loop0: detected capacity change from 0 to 512 [ 331.928516][T21706] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.986973][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4785'. [ 331.996611][T21718] batman_adv: batadv0: Adding interface: ipvlan2 [ 332.003031][T21718] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.043343][T21718] batman_adv: batadv0: Interface activated: ipvlan2 [ 332.077452][T21736] loop2: detected capacity change from 0 to 1024 [ 332.096133][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4787'. [ 332.106479][T21734] loop3: detected capacity change from 0 to 128 [ 332.118225][T21734] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.121494][T21743] loop0: detected capacity change from 0 to 512 [ 332.135600][T21743] EXT4-fs: dax option not supported [ 332.176995][T21747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 332.186891][T21747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.197588][T21747] dummy0: entered promiscuous mode [ 332.204207][T21747] dummy0: left promiscuous mode [ 332.258126][T21749] loop3: detected capacity change from 0 to 256 [ 332.284117][T21749] FAT-fs (loop3): Directory bread(block 64) failed [ 332.300610][T21749] FAT-fs (loop3): Directory bread(block 65) failed [ 332.317316][T21749] FAT-fs (loop3): Directory bread(block 66) failed [ 332.332399][T21749] FAT-fs (loop3): Directory bread(block 67) failed [ 332.344493][T21749] FAT-fs (loop3): Directory bread(block 68) failed [ 332.353896][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4796'. [ 332.355078][T21749] FAT-fs (loop3): Directory bread(block 69) failed [ 332.370609][T21749] FAT-fs (loop3): Directory bread(block 70) failed [ 332.377291][T21749] FAT-fs (loop3): Directory bread(block 71) failed [ 332.386303][T21749] FAT-fs (loop3): Directory bread(block 72) failed [ 332.393006][T21749] FAT-fs (loop3): Directory bread(block 73) failed [ 332.471850][T21763] loop1: detected capacity change from 0 to 2048 [ 332.517246][T21763] loop1: p1 < > p4 [ 332.521737][T21763] loop1: p4 size 8388608 extends beyond EOD, truncated [ 332.665235][T21768] loop1: detected capacity change from 0 to 128 [ 332.677770][T21768] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.908817][ T29] audit: type=1326 audit(1719918861.741:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.2.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 332.932385][ T29] audit: type=1326 audit(1719918861.741:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.2.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 333.012418][T21778] loop0: detected capacity change from 0 to 128 [ 333.026517][T21778] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.028285][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4801'. [ 333.072145][T21784] loop4: detected capacity change from 0 to 128 [ 333.082218][T21784] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.092915][T21749] syz.3.4793: attempt to access beyond end of device [ 333.092915][T21749] loop3: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 333.112898][T21749] syz.3.4793: attempt to access beyond end of device [ 333.112898][T21749] loop3: rw=2049, sector=1864, nr_sectors = 2048 limit=256 [ 333.130580][T21749] syz.3.4793: attempt to access beyond end of device [ 333.130580][T21749] loop3: rw=2049, sector=3912, nr_sectors = 2048 limit=256 [ 333.149962][T21749] syz.3.4793: attempt to access beyond end of device [ 333.149962][T21749] loop3: rw=2049, sector=5960, nr_sectors = 2048 limit=256 [ 333.167439][T21749] syz.3.4793: attempt to access beyond end of device [ 333.167439][T21749] loop3: rw=2049, sector=8008, nr_sectors = 2080 limit=256 [ 333.175414][T21791] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4804'. [ 333.186086][T21749] syz.3.4793: attempt to access beyond end of device [ 333.186086][T21749] loop3: rw=2049, sector=10088, nr_sectors = 2304 limit=256 [ 333.207113][T21787] loop0: detected capacity change from 0 to 512 [ 333.210087][T21749] syz.3.4793: attempt to access beyond end of device [ 333.210087][T21749] loop3: rw=2049, sector=12392, nr_sectors = 2352 limit=256 [ 333.228891][T21787] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.228915][T21787] EXT4-fs (loop0): blocks per group (39) and clusters per group (32768) inconsistent [ 333.231072][T21749] syz.3.4793: attempt to access beyond end of device [ 333.231072][T21749] loop3: rw=2049, sector=14744, nr_sectors = 2048 limit=256 [ 333.264501][T21749] syz.3.4793: attempt to access beyond end of device [ 333.264501][T21749] loop3: rw=2049, sector=16792, nr_sectors = 2048 limit=256 [ 333.282149][T21749] syz.3.4793: attempt to access beyond end of device [ 333.282149][T21749] loop3: rw=2049, sector=18840, nr_sectors = 2088 limit=256 [ 333.417917][T21812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4806'. [ 333.456736][T21816] loop3: detected capacity change from 0 to 512 [ 333.463430][T21817] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 333.473032][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 333.482049][T21817] netlink: 'syz.0.4811': attribute type 15 has an invalid length. [ 333.494667][T21817] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 65023 - 0 [ 333.503651][T21817] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 65023 - 0 [ 333.511665][T21816] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 333.512541][T21817] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 65023 - 0 [ 333.529914][T21817] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 65023 - 0 [ 333.539320][T21817] vxlan1: entered promiscuous mode [ 334.270555][T21836] loop0: detected capacity change from 0 to 512 [ 334.282802][T21834] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4815'. [ 334.294587][T21836] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.327858][T21843] loop2: detected capacity change from 0 to 256 [ 334.343429][T21843] FAT-fs (loop2): Directory bread(block 64) failed [ 334.352778][T21843] FAT-fs (loop2): Directory bread(block 65) failed [ 334.361261][T21843] FAT-fs (loop2): Directory bread(block 66) failed [ 334.362439][T21845] loop3: detected capacity change from 0 to 128 [ 334.368094][T21843] FAT-fs (loop2): Directory bread(block 67) failed [ 334.377243][T21845] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.382212][T21843] FAT-fs (loop2): Directory bread(block 68) failed [ 334.399127][T21843] FAT-fs (loop2): Directory bread(block 69) failed [ 334.405793][T21843] FAT-fs (loop2): Directory bread(block 70) failed [ 334.412975][T21843] FAT-fs (loop2): Directory bread(block 71) failed [ 334.435731][T21843] FAT-fs (loop2): Directory bread(block 72) failed [ 334.443335][T21843] FAT-fs (loop2): Directory bread(block 73) failed [ 334.572198][T21862] loop1: detected capacity change from 0 to 512 [ 334.580836][T21862] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.608416][T21862] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.4824: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 334.609672][T21863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21863 comm=syz.0.4823 [ 334.627713][T21862] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz.1.4824: Bad quota inode: 3, type: 0 [ 334.657030][T21863] loop0: detected capacity change from 0 to 512 [ 334.664416][T21862] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 334.680799][T21862] EXT4-fs (loop1): mount failed [ 334.688725][T21863] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.831075][T21888] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 334.843907][T21888] netlink: 'syz.0.4826': attribute type 15 has an invalid length. [ 334.879773][T21884] syz.1.4828[21884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.879962][T21884] syz.1.4828[21884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.895705][T21884] loop1: detected capacity change from 0 to 128 [ 334.941944][T21884] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.128562][T21892] syz.1.4829[21892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.128744][T21892] syz.1.4829[21892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.156034][T21892] loop1: detected capacity change from 0 to 128 [ 335.204380][T21892] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.362713][T21903] loop1: detected capacity change from 0 to 256 [ 335.363855][T21901] loop3: detected capacity change from 0 to 128 [ 335.378799][T21901] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.424258][T21909] loop1: detected capacity change from 0 to 512 [ 335.439698][T21909] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.453049][T21909] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4834: corrupted inode contents [ 335.465159][T21909] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4834: mark_inode_dirty error [ 335.478232][T21909] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4834: corrupted inode contents [ 335.490546][T21909] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4834: mark_inode_dirty error [ 335.593827][T21928] loop3: detected capacity change from 0 to 256 [ 335.609337][T21928] FAT-fs (loop3): Directory bread(block 64) failed [ 335.616221][T21928] FAT-fs (loop3): Directory bread(block 65) failed [ 335.623018][T21928] FAT-fs (loop3): Directory bread(block 66) failed [ 335.629777][T21928] FAT-fs (loop3): Directory bread(block 67) failed [ 335.636489][T21928] FAT-fs (loop3): Directory bread(block 68) failed [ 335.643448][T21928] FAT-fs (loop3): Directory bread(block 69) failed [ 335.650337][T21931] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 335.659649][T21928] FAT-fs (loop3): Directory bread(block 70) failed [ 335.666388][T21931] netlink: 'syz.1.4840': attribute type 15 has an invalid length. [ 335.671582][T21935] loop0: detected capacity change from 0 to 256 [ 335.675689][T21928] FAT-fs (loop3): Directory bread(block 71) failed [ 335.687283][T21928] FAT-fs (loop3): Directory bread(block 72) failed [ 335.694156][T21928] FAT-fs (loop3): Directory bread(block 73) failed [ 335.763841][T21937] loop0: detected capacity change from 0 to 128 [ 335.773442][T21937] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.101017][T21944] netlink: 'syz.0.4846': attribute type 10 has an invalid length. [ 336.120101][T21944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.403551][T21967] loop2: detected capacity change from 0 to 256 [ 336.446407][T21968] __nla_validate_parse: 9 callbacks suppressed [ 336.446423][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4854'. [ 336.461736][T21968] netlink: 'syz.4.4854': attribute type 15 has an invalid length. [ 336.489793][T21968] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 336.498775][T21968] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 336.501152][T21972] loop1: detected capacity change from 0 to 512 [ 336.507656][T21968] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 336.522696][T21968] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 336.533551][T21968] vxlan0: entered promiscuous mode [ 336.539063][T21972] EXT4-fs: dax option not supported [ 336.551748][T21974] loop2: detected capacity change from 0 to 512 [ 336.568890][T21974] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.584485][T21974] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4856: corrupted inode contents [ 336.599673][T21974] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.4856: mark_inode_dirty error [ 336.611586][T21974] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4856: corrupted inode contents [ 336.625020][T21974] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.4856: mark_inode_dirty error [ 336.722880][T21989] netlink: 'syz.3.4863': attribute type 14 has an invalid length. [ 336.736598][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4862'. [ 336.962585][T22001] loop3: detected capacity change from 0 to 256 [ 337.035730][T22005] loop3: detected capacity change from 0 to 256 [ 337.049210][T22005] FAT-fs (loop3): Directory bread(block 64) failed [ 337.055871][T22005] FAT-fs (loop3): Directory bread(block 65) failed [ 337.064133][T22005] FAT-fs (loop3): Directory bread(block 66) failed [ 337.070826][T22005] FAT-fs (loop3): Directory bread(block 67) failed [ 337.077554][T22005] FAT-fs (loop3): Directory bread(block 68) failed [ 337.085673][T22005] FAT-fs (loop3): Directory bread(block 69) failed [ 337.093246][T22005] FAT-fs (loop3): Directory bread(block 70) failed [ 337.101147][T22005] FAT-fs (loop3): Directory bread(block 71) failed [ 337.107758][T22005] FAT-fs (loop3): Directory bread(block 72) failed [ 337.114361][T22005] FAT-fs (loop3): Directory bread(block 73) failed [ 337.369237][T22017] netlink: 'syz.1.4874': attribute type 14 has an invalid length. [ 337.419368][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4876'. [ 337.433068][T22025] loop4: detected capacity change from 0 to 512 [ 337.465546][T22029] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 337.476221][T22025] EXT4-fs error (device loop4): ext4_quota_enable:7030: comm syz.4.4877: Bad quota inum: 1, type: 2 [ 337.490439][T22025] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 337.505528][T22025] EXT4-fs (loop4): mount failed [ 337.510076][T22034] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4881'. [ 337.608584][T22037] syz.1.4882[22037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.608663][T22037] syz.1.4882[22037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.781516][T22053] loop1: detected capacity change from 0 to 512 [ 337.799496][T22053] EXT4-fs: dax option not supported [ 337.822091][T22055] syz.2.4886[22055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.822272][T22055] syz.2.4886[22055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.029561][T22061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4888'. [ 338.116583][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 338.169441][T22077] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4892'. [ 338.221555][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 338.221567][T22081] random: crng reseeded on system resumption [ 338.221574][ T29] audit: type=1400 audit(1719918867.051:2138): avc: denied { write } for pid=22080 comm="syz.3.4894" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.334428][T22081] loop3: detected capacity change from 0 to 2364 [ 338.339150][T22089] syz.0.4895[22089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.340957][T22089] syz.0.4895[22089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.354746][T22081] iso9660: Unknown parameter 'ioharset' [ 338.366355][T22084] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 338.383990][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'. [ 338.393005][T22084] netlink: 'syz.2.4893': attribute type 15 has an invalid length. [ 338.403967][T22084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 338.412935][T22084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 338.421887][T22084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 338.430865][T22084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 338.440704][T22084] vxlan0: entered promiscuous mode [ 338.472589][T22095] loop3: detected capacity change from 0 to 256 [ 338.513632][T22095] FAT-fs (loop3): Directory bread(block 64) failed [ 338.522048][T22095] FAT-fs (loop3): Directory bread(block 65) failed [ 338.522087][T22095] FAT-fs (loop3): Directory bread(block 66) failed [ 338.522110][T22095] FAT-fs (loop3): Directory bread(block 67) failed [ 338.522141][T22095] FAT-fs (loop3): Directory bread(block 68) failed [ 338.522209][T22095] FAT-fs (loop3): Directory bread(block 69) failed [ 338.522235][T22095] FAT-fs (loop3): Directory bread(block 70) failed [ 338.522255][T22095] FAT-fs (loop3): Directory bread(block 71) failed [ 338.529705][T22095] FAT-fs (loop3): Directory bread(block 72) failed [ 338.529737][T22095] FAT-fs (loop3): Directory bread(block 73) failed [ 338.609306][T22109] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.4900'. [ 338.612205][T22109] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4900'. [ 338.702046][T22117] loop0: detected capacity change from 0 to 1024 [ 338.741650][ T29] audit: type=1400 audit(1719918867.571:2139): avc: denied { create } for pid=22116 comm="syz.0.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.774712][T22124] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 338.782614][ T29] audit: type=1400 audit(1719918867.601:2140): avc: denied { connect } for pid=22116 comm="syz.0.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.916248][T22128] netlink: 'syz.0.4904': attribute type 3 has an invalid length. [ 339.156363][T22137] loop2: detected capacity change from 0 to 512 [ 339.190342][T22137] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.313244][T22095] bio_check_eod: 29 callbacks suppressed [ 339.313262][T22095] syz.3.4897: attempt to access beyond end of device [ 339.313262][T22095] loop3: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 339.351875][T22095] syz.3.4897: attempt to access beyond end of device [ 339.351875][T22095] loop3: rw=2049, sector=1864, nr_sectors = 2224 limit=256 [ 339.375309][T22095] syz.3.4897: attempt to access beyond end of device [ 339.375309][T22095] loop3: rw=2049, sector=4088, nr_sectors = 2056 limit=256 [ 339.395909][T22095] syz.3.4897: attempt to access beyond end of device [ 339.395909][T22095] loop3: rw=2049, sector=6144, nr_sectors = 2104 limit=256 [ 339.424780][T22095] syz.3.4897: attempt to access beyond end of device [ 339.424780][T22095] loop3: rw=2049, sector=8248, nr_sectors = 3584 limit=256 [ 339.445514][T22095] syz.3.4897: attempt to access beyond end of device [ 339.445514][T22095] loop3: rw=2049, sector=11832, nr_sectors = 2128 limit=256 [ 339.466242][T22150] loop1: detected capacity change from 0 to 512 [ 339.475200][T22095] syz.3.4897: attempt to access beyond end of device [ 339.475200][T22095] loop3: rw=2049, sector=13960, nr_sectors = 2048 limit=256 [ 339.489339][T22150] EXT4-fs: dax option not supported [ 339.494741][T22095] syz.3.4897: attempt to access beyond end of device [ 339.494741][T22095] loop3: rw=2049, sector=16008, nr_sectors = 40 limit=256 [ 339.531942][ T29] audit: type=1326 audit(1719918868.361:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.555581][ T29] audit: type=1326 audit(1719918868.361:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.579319][ T29] audit: type=1326 audit(1719918868.361:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.603091][ T29] audit: type=1326 audit(1719918868.361:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.628445][ T29] audit: type=1326 audit(1719918868.361:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.651968][ T29] audit: type=1326 audit(1719918868.361:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.675564][ T29] audit: type=1326 audit(1719918868.361:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.0.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 339.721572][T16449] EXT4-fs unmount: 67 callbacks suppressed [ 339.721588][T16449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.740810][T22156] loop4: detected capacity change from 0 to 512 [ 339.756067][T22156] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.4913: corrupted in-inode xattr: invalid ea_ino [ 339.770534][T22156] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4913: couldn't read orphan inode 15 (err -117) [ 339.785225][T22156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.861317][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.137627][T22178] loop4: detected capacity change from 0 to 512 [ 340.170920][T22178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 340.198194][T22178] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.342954][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 340.369693][T22192] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 340.430920][T22197] loop4: detected capacity change from 0 to 256 [ 340.443882][T22199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 340.448493][T22197] FAT-fs (loop4): Directory bread(block 64) failed [ 340.460146][T22197] FAT-fs (loop4): Directory bread(block 65) failed [ 340.467143][T22197] FAT-fs (loop4): Directory bread(block 66) failed [ 340.474027][T22197] FAT-fs (loop4): Directory bread(block 67) failed [ 340.482038][T22197] FAT-fs (loop4): Directory bread(block 68) failed [ 340.489254][T22197] FAT-fs (loop4): Directory bread(block 69) failed [ 340.496036][T22197] FAT-fs (loop4): Directory bread(block 70) failed [ 340.504658][T22197] FAT-fs (loop4): Directory bread(block 71) failed [ 340.511626][T22197] FAT-fs (loop4): Directory bread(block 72) failed [ 340.520637][T22197] FAT-fs (loop4): Directory bread(block 73) failed [ 340.615678][T22197] syz.4.4922: attempt to access beyond end of device [ 340.615678][T22197] loop4: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 340.631990][T22197] syz.4.4922: attempt to access beyond end of device [ 340.631990][T22197] loop4: rw=2049, sector=1864, nr_sectors = 768 limit=256 [ 341.022924][T22230] loop2: detected capacity change from 0 to 512 [ 341.039254][T22230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 341.052081][T22230] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.113665][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.174606][T22239] loop2: detected capacity change from 0 to 256 [ 341.190838][T22239] FAT-fs (loop2): Directory bread(block 64) failed [ 341.198185][T22239] FAT-fs (loop2): Directory bread(block 65) failed [ 341.204792][T22239] FAT-fs (loop2): Directory bread(block 66) failed [ 341.211507][T22239] FAT-fs (loop2): Directory bread(block 67) failed [ 341.218171][T22239] FAT-fs (loop2): Directory bread(block 68) failed [ 341.224760][T22239] FAT-fs (loop2): Directory bread(block 69) failed [ 341.231330][T22239] FAT-fs (loop2): Directory bread(block 70) failed [ 341.237999][T22239] FAT-fs (loop2): Directory bread(block 71) failed [ 341.244603][T22239] FAT-fs (loop2): Directory bread(block 72) failed [ 341.251172][T22239] FAT-fs (loop2): Directory bread(block 73) failed [ 341.384332][T22247] loop2: detected capacity change from 0 to 256 [ 341.549312][T22252] loop2: detected capacity change from 0 to 512 [ 341.557353][T22252] EXT4-fs (loop2): orphan cleanup on readonly fs [ 341.563810][T22252] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 341.578372][T22252] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 341.585186][T22252] EXT4-fs (loop2): 1 truncate cleaned up [ 341.591880][T22252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.703564][T22259] loop4: detected capacity change from 0 to 128 [ 341.711941][T22259] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.724429][T22259] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.759312][T22264] __nla_validate_parse: 4 callbacks suppressed [ 341.759333][T22264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4943'. [ 341.784992][T18207] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.842475][T22270] loop4: detected capacity change from 0 to 512 [ 341.869382][T22270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 341.883018][T22270] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.912284][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.963941][T22278] loop4: detected capacity change from 0 to 256 [ 341.977787][T22278] FAT-fs (loop4): Directory bread(block 64) failed [ 341.984346][T22278] FAT-fs (loop4): Directory bread(block 65) failed [ 341.997183][T22278] FAT-fs (loop4): Directory bread(block 66) failed [ 342.003901][T22278] FAT-fs (loop4): Directory bread(block 67) failed [ 342.011934][T22278] FAT-fs (loop4): Directory bread(block 68) failed [ 342.019264][T22278] FAT-fs (loop4): Directory bread(block 69) failed [ 342.025964][T22278] FAT-fs (loop4): Directory bread(block 70) failed [ 342.034213][T22278] FAT-fs (loop4): Directory bread(block 71) failed [ 342.041264][T22278] FAT-fs (loop4): Directory bread(block 72) failed [ 342.042065][T22279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4946'. [ 342.047886][T22278] FAT-fs (loop4): Directory bread(block 73) failed [ 342.106294][T22281] loop1: detected capacity change from 0 to 256 [ 342.336896][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.482010][T22296] loop2: detected capacity change from 0 to 512 [ 342.492782][T22296] EXT4-fs: dax option not supported [ 342.500883][T22295] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4954'. [ 342.554835][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4955'. [ 342.626422][T22301] loop3: detected capacity change from 0 to 128 [ 342.650786][T22301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.682766][T22301] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.777225][T16831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.856305][T22310] loop3: detected capacity change from 0 to 512 [ 342.868981][T22310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 342.881684][T22310] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.906290][T16831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 342.955226][T22317] loop3: detected capacity change from 0 to 256 [ 343.005489][T22319] loop3: detected capacity change from 0 to 512 [ 343.013917][T22319] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.4960: corrupted in-inode xattr: invalid ea_ino [ 343.030352][T22319] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4960: couldn't read orphan inode 15 (err -117) [ 343.044621][T22319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.095930][T16831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.126205][T22322] loop4: detected capacity change from 0 to 128 [ 343.145443][T22322] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.170509][T22322] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.264826][T18207] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.299444][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4966'. [ 343.354622][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 343.354639][ T29] audit: type=1326 audit(1719918872.181:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22341 comm="syz.4.4964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x0 [ 343.355842][T22346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4965'. [ 343.411074][T22349] loop1: detected capacity change from 0 to 128 [ 343.412964][T22351] loop3: detected capacity change from 0 to 256 [ 343.419527][T22349] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.436386][T22349] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.470475][T22355] loop2: detected capacity change from 0 to 512 [ 343.480250][T22355] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.4972: corrupted in-inode xattr: invalid ea_ino [ 343.501270][T22355] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4972: couldn't read orphan inode 15 (err -117) [ 343.515461][T22355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.531261][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.543666][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.607715][T22366] loop2: detected capacity change from 0 to 512 [ 343.614434][T22366] ext4: Unknown parameter 'subj_type' [ 343.630464][T22364] infiniband syz2: set active [ 343.676086][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4977'. [ 343.740569][T22381] loop2: detected capacity change from 0 to 512 [ 343.749852][T22377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4980'. [ 343.772352][T22381] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.4983: corrupted in-inode xattr: invalid ea_ino [ 343.794078][ T29] audit: type=1400 audit(1719918872.621:2163): avc: denied { create } for pid=22383 comm="syz.3.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.794687][T22381] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4983: couldn't read orphan inode 15 (err -117) [ 343.834072][ T29] audit: type=1400 audit(1719918872.621:2164): avc: denied { ioctl } for pid=22383 comm="syz.3.4984" path="socket:[83123]" dev="sockfs" ino=83123 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.845185][T22381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.890710][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.964894][T22395] loop2: detected capacity change from 0 to 1024 [ 343.980243][T22395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.035870][T22401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4982'. [ 344.051749][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.105973][T22403] loop2: detected capacity change from 0 to 128 [ 344.114271][T22403] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.126885][T22403] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.146038][ T29] audit: type=1400 audit(1719918872.971:2165): avc: denied { accept } for pid=22402 comm="syz.2.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.187425][T21519] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.205400][T22406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'. [ 344.246513][T22408] netlink: 'syz.4.4991': attribute type 14 has an invalid length. [ 344.314403][ T29] audit: type=1326 audit(1719918873.141:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.338004][ T29] audit: type=1326 audit(1719918873.141:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.376408][ T29] audit: type=1326 audit(1719918873.191:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.400207][ T29] audit: type=1326 audit(1719918873.191:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.423828][ T29] audit: type=1326 audit(1719918873.191:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.447332][ T29] audit: type=1326 audit(1719918873.201:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1cc6cf4f19 code=0x7ffc0000 [ 344.511264][T22416] loop2: detected capacity change from 0 to 512 [ 344.520174][T22416] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 344.703747][T22439] netlink: 'syz.4.5002': attribute type 14 has an invalid length. [ 344.802180][T22444] infiniband syz2: set active [ 344.960287][T22455] loop3: detected capacity change from 0 to 512 [ 344.967496][T22455] EXT4-fs: dax option not supported [ 345.414012][T22461] loop1: detected capacity change from 0 to 2048 [ 345.449748][T22461] loop1: p2 < > [ 345.465722][T22461] loop1: p2 < > [ 345.580290][T22479] loop1: detected capacity change from 0 to 512 [ 345.603826][T22479] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 345.634680][T22479] EXT4-fs (loop1): Remounting filesystem read-only [ 345.658520][T22479] EXT4-fs (loop1): 1 truncate cleaned up [ 345.664596][T22479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.709581][T22479] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 345.722367][T22479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.769351][T22479] loop1: detected capacity change from 0 to 512 [ 345.810708][T22483] netlink: 'syz.0.5014': attribute type 10 has an invalid length. [ 345.839806][T22483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.857770][T22494] loop3: detected capacity change from 0 to 1024 [ 345.865008][T22494] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.878401][T22494] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.5018: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 345.900197][T22494] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.5018: couldn't read orphan inode 11 (err -117) [ 345.913037][T22494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.949200][T22494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5018: Invalid block bitmap block 0 in block_group 0 [ 345.975471][T22494] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.5018: Failed to acquire dquot type 0 [ 346.001573][T16831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.010806][T10144] EXT4-fs error (device loop3): ext4_release_dquot:6883: comm kworker/u8:10: Failed to release dquot type 0 [ 346.025866][T22500] loop4: detected capacity change from 0 to 512 [ 346.033152][T22500] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 346.215282][T22524] loop2: detected capacity change from 0 to 512 [ 346.224378][T22524] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.5024: corrupted in-inode xattr: invalid ea_ino [ 346.238226][T22524] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5024: couldn't read orphan inode 15 (err -117) [ 346.251254][T22524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.272776][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.561829][T22569] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.570983][T22569] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.578146][T22569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.619538][T22574] loop1: detected capacity change from 0 to 512 [ 346.629938][T22574] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.5036: corrupted in-inode xattr: invalid ea_ino [ 346.643635][T22574] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5036: couldn't read orphan inode 15 (err -117) [ 346.657780][T22570] netlink: 'syz.2.5031': attribute type 10 has an invalid length. [ 346.666175][T22574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.669662][T22570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.681932][T22574] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 13: comm syz.1.5036: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 346.726959][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.797550][T22577] loop2: detected capacity change from 0 to 512 [ 346.805982][T22577] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 346.821585][T22577] EXT4-fs (loop2): Remounting filesystem read-only [ 346.839745][T22577] EXT4-fs (loop2): 1 truncate cleaned up [ 346.846083][T22577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.859579][T22577] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 346.883832][T22577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.894462][T22584] loop4: detected capacity change from 0 to 128 [ 346.904607][T22584] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.922969][T22584] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.932581][T22577] loop2: detected capacity change from 0 to 512 [ 346.948417][T22592] __nla_validate_parse: 13 callbacks suppressed [ 346.948435][T22592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5042'. [ 346.991588][T18207] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.046936][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5043'. [ 347.098899][T22613] loop4: detected capacity change from 0 to 512 [ 347.102198][T22613] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.5047: corrupted in-inode xattr: invalid ea_ino [ 347.120922][T22613] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.5047: couldn't read orphan inode 15 (err -117) [ 347.121463][T22613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.156743][T22613] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 13: comm syz.4.5047: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 347.216213][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.285096][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5050'. [ 347.301274][T22628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 347.311347][T22628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.322425][T22628] vlan2: entered promiscuous mode [ 347.327523][T22628] dummy0: entered promiscuous mode [ 347.332723][T22628] vlan2: entered allmulticast mode [ 347.337997][T22628] dummy0: entered allmulticast mode [ 347.345728][T22628] dummy0: left allmulticast mode [ 347.350750][T22628] dummy0: left promiscuous mode [ 347.379228][T22619] netlink: 'syz.3.5048': attribute type 10 has an invalid length. [ 347.387206][T22619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5048'. [ 347.398770][T22619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.522407][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 347.554903][T22660] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5054'. [ 347.589281][T22664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5056'. [ 347.622531][T22673] loop3: detected capacity change from 0 to 128 [ 347.631048][T22673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.643485][T22673] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.658699][T22676] loop2: detected capacity change from 0 to 1024 [ 347.667613][T16831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.679334][T22676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.803358][T22690] netlink: 'syz.2.5059': attribute type 3 has an invalid length. [ 347.815590][T22692] loop1: detected capacity change from 0 to 512 [ 347.824076][T22692] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.5061: corrupted in-inode xattr: invalid ea_ino [ 347.839052][T22692] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5061: couldn't read orphan inode 15 (err -117) [ 347.851598][T22692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.865795][T22692] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 13: comm syz.1.5061: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 347.893305][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.956577][T22697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5062'. [ 347.967698][T22697] wg0 speed is unknown, defaulting to 1000 [ 347.973600][T22697] wg0 speed is unknown, defaulting to 1000 [ 347.979698][T22697] wg0 speed is unknown, defaulting to 1000 [ 347.986042][T22697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 347.993715][T22697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 348.003619][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.009926][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.016229][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.022936][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.029109][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.035297][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.041666][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.048133][T22697] wg0 speed is unknown, defaulting to 1000 [ 348.131056][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5064'. [ 348.183007][T22710] loop0: detected capacity change from 0 to 2048 [ 348.257630][T22710] loop0: p2 < > [ 348.269488][T22708] netlink: 'syz.1.5063': attribute type 10 has an invalid length. [ 348.277499][T22708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5063'. [ 348.301891][T22708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.423023][T22722] loop4: detected capacity change from 0 to 512 [ 348.432597][T22722] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 348.447614][T22722] EXT4-fs (loop4): Remounting filesystem read-only [ 348.455249][T22722] EXT4-fs (loop4): 1 truncate cleaned up [ 348.461767][T22722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.475433][T22722] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 348.483791][T22722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.493050][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 348.493067][ T29] audit: type=1326 audit(1719918877.311:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.522798][ T29] audit: type=1326 audit(1719918877.311:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.546366][ T29] audit: type=1326 audit(1719918877.311:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.570048][ T29] audit: type=1326 audit(1719918877.311:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.593622][ T29] audit: type=1326 audit(1719918877.311:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.617191][ T29] audit: type=1326 audit(1719918877.311:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.640728][ T29] audit: type=1326 audit(1719918877.311:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.664363][ T29] audit: type=1326 audit(1719918877.311:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.688115][ T29] audit: type=1326 audit(1719918877.311:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.711693][ T29] audit: type=1326 audit(1719918877.311:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22675 comm="syz.2.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x7fc00000 [ 348.793709][T22722] loop4: detected capacity change from 0 to 512 [ 348.819307][T22737] loop0: detected capacity change from 0 to 1024 [ 348.826041][T22737] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 348.835344][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.017358][T22752] wg0 speed is unknown, defaulting to 1000 [ 349.287721][T22783] loop4: detected capacity change from 0 to 128 [ 349.305532][T22783] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.332770][T22783] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.429975][T18207] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.471756][T22787] loop1: detected capacity change from 0 to 512 [ 349.501860][T22787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 349.515777][T22793] loop4: detected capacity change from 0 to 2048 [ 349.521087][T22787] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.577962][T22793] loop4: p2 < > [ 349.605050][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 349.697983][T22826] loop4: detected capacity change from 0 to 1024 [ 349.720808][T22826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.761356][T22831] loop0: detected capacity change from 0 to 1024 [ 349.770440][T22831] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 349.885900][T22840] netlink: 'syz.4.5083': attribute type 3 has an invalid length. [ 349.906018][T22843] loop0: detected capacity change from 0 to 128 [ 349.914406][T22843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.928594][T22843] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.971819][T16449] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.209008][T22862] wg0 speed is unknown, defaulting to 1000 [ 350.605210][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.998855][T22914] netlink: 'syz.1.5104': attribute type 14 has an invalid length. [ 351.022173][T22916] loop2: detected capacity change from 0 to 512 [ 351.033231][T22916] EXT4-fs: dax option not supported [ 351.046171][T22918] loop0: detected capacity change from 0 to 2048 [ 351.068020][T22924] loop1: detected capacity change from 0 to 128 [ 351.088415][T22918] loop0: p2 < > [ 351.153152][T22937] loop0: detected capacity change from 0 to 1024 [ 351.181308][T22937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.328680][T22948] netlink: 'syz.0.5110': attribute type 3 has an invalid length. [ 351.397483][T22950] loop1: detected capacity change from 0 to 512 [ 351.408939][T22950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.422845][T22950] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.434236][T22950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.593565][T22961] wg0 speed is unknown, defaulting to 1000 [ 351.863343][T22996] loop4: detected capacity change from 0 to 512 [ 351.878942][T22996] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 351.890378][T22996] bio_check_eod: 4 callbacks suppressed [ 351.890399][T22996] syz.4.5120: attempt to access beyond end of device [ 351.890399][T22996] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 351.918568][T22999] loop2: detected capacity change from 0 to 512 [ 351.921990][T22996] EXT4-fs (loop4): couldn't read superblock of external journal [ 351.953268][T22999] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.5121: corrupted in-inode xattr: invalid ea_ino [ 351.971449][T22999] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5121: couldn't read orphan inode 15 (err -117) [ 352.515531][T23038] loop2: detected capacity change from 0 to 128 [ 352.516955][T23027] wg0 speed is unknown, defaulting to 1000 [ 352.532523][T23038] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.544017][T23045] loop3: detected capacity change from 0 to 128 [ 352.556740][T23045] EXT4-fs: Ignoring removed bh option [ 352.571040][T23045] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.604962][T23065] loop1: detected capacity change from 0 to 512 [ 352.608940][T23045] __nla_validate_parse: 8 callbacks suppressed [ 352.608957][T23045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5130'. [ 352.611595][T23065] EXT4-fs: dax option not supported [ 352.749438][T23071] loop2: detected capacity change from 0 to 512 [ 352.764020][T23071] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.5133: corrupted in-inode xattr: invalid ea_ino [ 352.780361][T23071] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5133: couldn't read orphan inode 15 (err -117) [ 352.799786][T23079] loop4: detected capacity change from 0 to 1024 [ 352.948330][T23090] netlink: 'syz.4.5134': attribute type 3 has an invalid length. [ 353.085905][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5132'. [ 353.146777][T23103] loop2: detected capacity change from 0 to 512 [ 353.167733][T23103] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 353.230104][T23103] EXT4-fs (loop2): Remounting filesystem read-only [ 353.249858][T23103] EXT4-fs (loop2): 1 truncate cleaned up [ 353.256055][T23103] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 353.339901][T23103] loop2: detected capacity change from 0 to 512 [ 353.475423][T23113] wg0 speed is unknown, defaulting to 1000 [ 353.510213][T23132] loop1: detected capacity change from 0 to 128 [ 353.526845][T23132] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.540089][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 353.540106][ T29] audit: type=1326 audit(1719918882.371:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.0.5142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x0 [ 353.570911][T23118] wg0 speed is unknown, defaulting to 1000 [ 353.609904][ T29] audit: type=1326 audit(1719918882.431:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23078 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6cf4f19 code=0x7fc00000 [ 353.717131][ T29] audit: type=1400 audit(1719918882.551:2260): avc: denied { watch_reads } for pid=23167 comm="syz.1.5144" path="/102/file0" dev="ramfs" ino=85136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 353.778905][T23172] loop4: detected capacity change from 0 to 512 [ 353.790110][T23172] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 353.913616][T23172] wg0 speed is unknown, defaulting to 1000 [ 354.153888][T23218] loop4: detected capacity change from 0 to 256 [ 354.182866][T23220] loop1: detected capacity change from 0 to 512 [ 354.189521][T23220] EXT4-fs: dax option not supported [ 354.214517][T23224] loop4: detected capacity change from 0 to 512 [ 354.223290][T23224] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 354.239350][T23224] EXT4-fs (loop4): Remounting filesystem read-only [ 354.245952][T23224] EXT4-fs (loop4): 1 truncate cleaned up [ 354.252045][T23224] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 354.299756][T23224] loop4: detected capacity change from 0 to 512 [ 354.308340][T23230] loop2: detected capacity change from 0 to 2048 [ 354.338096][T23234] loop0: detected capacity change from 0 to 1024 [ 354.345364][T23230] loop2: p2 < > [ 354.353958][T23238] netlink: 'syz.4.5156': attribute type 14 has an invalid length. [ 354.421191][T23245] loop4: detected capacity change from 0 to 1024 [ 354.505819][T23254] netlink: 'syz.0.5155': attribute type 3 has an invalid length. [ 354.567703][T23261] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5159'. [ 354.598856][T23261] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5159'. [ 354.689106][T23266] loop3: detected capacity change from 0 to 1024 [ 354.894533][T23273] netlink: 'syz.3.5160': attribute type 3 has an invalid length. [ 355.046266][T23275] loop1: detected capacity change from 0 to 256 [ 355.158047][ T29] audit: type=1326 audit(1719918883.991:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.205368][ T29] audit: type=1326 audit(1719918883.991:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.228953][ T29] audit: type=1326 audit(1719918883.991:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.252492][ T29] audit: type=1326 audit(1719918883.991:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.276061][ T29] audit: type=1326 audit(1719918883.991:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.299586][ T29] audit: type=1326 audit(1719918883.991:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.323197][ T29] audit: type=1326 audit(1719918883.991:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.0.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 355.331937][T23281] wg0 speed is unknown, defaulting to 1000 [ 355.469475][T23307] loop2: detected capacity change from 0 to 128 [ 355.478013][T23307] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.505694][T23311] cgroup: Bad value for 'name' [ 355.513563][T23311] netlink: 'syz.1.5165': attribute type 3 has an invalid length. [ 355.513757][T23315] netlink: 'syz.0.5168': attribute type 14 has an invalid length. [ 355.585318][T23323] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5171'. [ 355.599873][T23323] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5171'. [ 355.659755][T23333] loop3: detected capacity change from 0 to 256 [ 355.725563][T23321] netlink: 'syz.4.5170': attribute type 10 has an invalid length. [ 355.733542][T23321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5170'. [ 355.757019][T23321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.809866][T23346] loop2: detected capacity change from 0 to 512 [ 355.836429][T23348] loop0: detected capacity change from 0 to 1024 [ 355.846082][T23346] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.850159][T23339] wg0 speed is unknown, defaulting to 1000 [ 355.906261][T23382] netlink: 'syz.4.5179': attribute type 14 has an invalid length. [ 355.948911][T23389] netlink: 'syz.0.5178': attribute type 3 has an invalid length. [ 356.004225][T23397] loop2: detected capacity change from 0 to 128 [ 356.013044][T23397] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.196064][T23408] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5184'. [ 356.206471][T23408] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5184'. [ 356.235854][T23410] loop2: detected capacity change from 0 to 256 [ 356.414222][T23418] loop2: detected capacity change from 0 to 512 [ 356.529753][T23426] netlink: 'syz.1.5189': attribute type 10 has an invalid length. [ 356.537717][T23426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5189'. [ 356.547768][T23426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.590454][T23428] netlink: 'syz.2.5191': attribute type 14 has an invalid length. [ 356.643482][T23430] loop2: detected capacity change from 0 to 512 [ 356.689761][T23430] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.753518][T23436] wg0 speed is unknown, defaulting to 1000 [ 356.800419][T23475] loop4: detected capacity change from 0 to 512 [ 356.818636][T23481] loop2: detected capacity change from 0 to 256 [ 356.820602][T23475] EXT4-fs: dax option not supported [ 356.870174][T23485] loop3: detected capacity change from 0 to 512 [ 356.902460][T23490] netlink: 'syz.1.5202': attribute type 14 has an invalid length. [ 356.969588][T23499] loop1: detected capacity change from 0 to 512 [ 356.974178][T23503] loop2: detected capacity change from 0 to 1024 [ 356.994923][T23502] loop0: detected capacity change from 0 to 512 [ 357.004221][T23499] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 357.013974][T23502] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 357.159022][T23523] netlink: 'syz.2.5205': attribute type 3 has an invalid length. [ 357.252735][T23499] wg0 speed is unknown, defaulting to 1000 [ 357.388407][T23502] wg0 speed is unknown, defaulting to 1000 [ 357.443334][T23560] loop1: detected capacity change from 0 to 128 [ 357.471326][T23560] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.649288][T23578] loop1: detected capacity change from 0 to 512 [ 357.663216][T23578] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.5210: casefold flag without casefold feature [ 357.665144][T23581] loop4: detected capacity change from 0 to 256 [ 357.678542][T23578] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5210: couldn't read orphan inode 15 (err -117) [ 357.946901][T23601] __nla_validate_parse: 5 callbacks suppressed [ 357.946919][T23601] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5219'. [ 357.972123][T23605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5217'. [ 357.990342][T23601] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5219'. [ 358.002426][T23609] loop0: detected capacity change from 0 to 128 [ 358.024937][T23609] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.038899][T23600] wg0 speed is unknown, defaulting to 1000 [ 358.088238][T23640] loop1: detected capacity change from 0 to 256 [ 358.098526][T23617] loop3: detected capacity change from 0 to 256 [ 358.132777][T23643] vhci_hcd: default hub control req: 6010 v0009 i0002 l60 [ 358.206509][T23657] loop1: detected capacity change from 0 to 512 [ 358.216041][T23656] loop2: detected capacity change from 0 to 512 [ 358.223292][T23657] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 358.239366][T23656] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 358.244562][T23662] loop0: detected capacity change from 0 to 1024 [ 358.261450][T23656] EXT4-fs (loop2): Remounting filesystem read-only [ 358.270875][T23656] EXT4-fs (loop2): 1 truncate cleaned up [ 358.289373][T23656] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 358.331773][T23656] loop2: detected capacity change from 0 to 512 [ 358.399939][T23672] wg0 speed is unknown, defaulting to 1000 [ 358.436302][T23693] loop2: detected capacity change from 0 to 512 [ 358.448698][T23693] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 358.599577][T23693] wg0 speed is unknown, defaulting to 1000 [ 358.671358][T23729] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5231'. [ 358.682957][T23729] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5231'. [ 358.745456][T23735] loop4: detected capacity change from 0 to 1024 [ 358.809406][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 358.809424][ T29] audit: type=1326 audit(1719918887.641:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23733 comm="syz.2.5233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dde040f19 code=0x0 [ 358.843898][T23734] wg0 speed is unknown, defaulting to 1000 [ 358.945580][T23764] loop4: detected capacity change from 0 to 256 [ 358.981239][T23768] veth0_macvtap: left promiscuous mode [ 358.997179][T23768] veth0_macvtap: entered promiscuous mode [ 359.016900][T23768] team0: Device macvtap0 failed to register rx_handler [ 359.024673][T23768] veth0_macvtap: left promiscuous mode [ 359.073936][ T29] audit: type=1326 audit(1719918887.901:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.100485][ T29] audit: type=1326 audit(1719918887.901:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.124399][ T29] audit: type=1326 audit(1719918887.901:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.147997][ T29] audit: type=1326 audit(1719918887.901:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.171698][ T29] audit: type=1326 audit(1719918887.901:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.176101][T23776] loop4: detected capacity change from 0 to 128 [ 359.195287][ T29] audit: type=1326 audit(1719918887.901:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.195326][ T29] audit: type=1326 audit(1719918887.901:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.195433][ T29] audit: type=1326 audit(1719918887.901:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.205705][T23776] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.225251][ T29] audit: type=1326 audit(1719918887.901:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz.0.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b912aff19 code=0x7fc00000 [ 359.338065][T23781] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.340153][T23779] loop1: detected capacity change from 0 to 512 [ 359.357885][T23779] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 359.372652][T23779] EXT4-fs (loop1): Remounting filesystem read-only [ 359.380664][T23779] EXT4-fs (loop1): 1 truncate cleaned up [ 359.388413][T23779] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 359.442250][T23779] loop1: detected capacity change from 0 to 512 [ 359.442856][T23789] loop0: detected capacity change from 0 to 512 [ 359.455974][T23789] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 359.489729][T23798] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5243'. [ 359.500106][T23798] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5243'. [ 359.522454][T23805] loop4: detected capacity change from 0 to 128 [ 359.533681][T23805] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.603330][T23818] loop1: detected capacity change from 0 to 256 [ 359.608918][T23789] wg0 speed is unknown, defaulting to 1000 [ 359.623661][T23822] loop4: detected capacity change from 0 to 512 [ 359.642851][T23822] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.700770][T23850] loop1: detected capacity change from 0 to 2048 [ 359.735877][T23852] loop2: detected capacity change from 0 to 128 [ 359.736181][T23854] loop0: detected capacity change from 0 to 512 [ 359.752064][T23854] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 359.768288][T23854] EXT4-fs (loop0): Remounting filesystem read-only [ 359.774896][T23854] EXT4-fs (loop0): 1 truncate cleaned up [ 359.775035][T23852] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.780992][T23854] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 359.791389][T23850] loop1: p2 < > [ 359.798816][T23860] loop4: detected capacity change from 0 to 1024 [ 359.870635][T23873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5254'. [ 359.881034][T23873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5254'. [ 359.885514][T23854] loop0: detected capacity change from 0 to 512 [ 359.900821][T23874] validate_nla: 3 callbacks suppressed [ 359.900835][T23874] netlink: 'syz.4.5251': attribute type 3 has an invalid length. [ 360.052886][T23894] loop0: detected capacity change from 0 to 256 [ 360.081567][T23896] loop1: detected capacity change from 0 to 512 [ 360.087348][T23884] wg0 speed is unknown, defaulting to 1000 [ 360.114898][T23896] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.5260: corrupted in-inode xattr: invalid ea_ino [ 360.130142][T23896] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5260: couldn't read orphan inode 15 (err -117) [ 360.241132][T23922] loop3: detected capacity change from 0 to 512 [ 360.243079][T23930] loop1: detected capacity change from 0 to 2048 [ 360.254832][T23922] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 360.308624][T23930] loop1: p2 < > [ 360.392617][T23944] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5265'. [ 360.399254][T23922] wg0 speed is unknown, defaulting to 1000 [ 360.480999][T23965] loop1: detected capacity change from 0 to 128 [ 360.485682][T23967] loop3: detected capacity change from 0 to 512 [ 360.495334][T23967] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 360.511390][T23965] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.513746][T23967] EXT4-fs (loop3): Remounting filesystem read-only [ 360.529192][T23967] EXT4-fs (loop3): 1 truncate cleaned up [ 360.535292][T23967] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 360.624377][T23967] loop3: detected capacity change from 0 to 512 [ 360.685370][T23980] loop1: detected capacity change from 0 to 512 [ 360.698415][T23980] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.755959][T23999] loop4: detected capacity change from 0 to 512 [ 360.762627][T23999] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 360.826924][T24009] 9pnet_fd: p9_fd_create_tcp (24009): problem connecting socket to 127.0.0.1 [ 360.865695][T24015] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.915751][T24024] loop1: detected capacity change from 0 to 512 [ 360.922912][T24024] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 361.018061][T24024] wg0 speed is unknown, defaulting to 1000 [ 361.039150][T24036] loop0: detected capacity change from 0 to 128 [ 361.050422][T24036] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.087534][T24060] loop1: detected capacity change from 0 to 1024 [ 361.225072][T24074] netlink: 'syz.1.5279': attribute type 3 has an invalid length. [ 361.355383][T24080] wg0 speed is unknown, defaulting to 1000 [ 361.482613][T24114] loop3: detected capacity change from 0 to 512 [ 361.491333][T24114] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 361.507679][T24116] loop0: detected capacity change from 0 to 128 [ 361.516545][T24116] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.651336][T24114] wg0 speed is unknown, defaulting to 1000 [ 361.778112][T24148] loop2: detected capacity change from 0 to 128 [ 361.797192][T24157] loop4: detected capacity change from 0 to 512 [ 361.805620][T24148] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.820617][T24159] loop3: detected capacity change from 0 to 2048 [ 361.834048][T24157] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 361.864685][T24163] loop0: detected capacity change from 0 to 512 [ 361.880166][T24157] EXT4-fs (loop4): Remounting filesystem read-only [ 361.896793][T24163] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 361.905957][T24159] loop3: p2 < > [ 361.913174][T24157] EXT4-fs (loop4): 1 truncate cleaned up [ 361.932093][T24157] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 361.982770][T24157] loop4: detected capacity change from 0 to 512 [ 362.013622][T24185] loop3: detected capacity change from 0 to 256 [ 362.087401][T24191] wg0 speed is unknown, defaulting to 1000 [ 362.128243][T24227] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.192849][T24197] wg0 speed is unknown, defaulting to 1000 [ 362.604173][T24258] loop2: detected capacity change from 0 to 512 [ 362.612281][T24258] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 362.769708][T24273] loop0: detected capacity change from 0 to 1024 [ 362.775237][T24265] wg0 speed is unknown, defaulting to 1000 [ 362.846275][T24296] loop4: detected capacity change from 0 to 1024 [ 362.869027][T24304] loop0: detected capacity change from 0 to 512 [ 362.875647][T24304] EXT4-fs: dax option not supported [ 362.977363][T24310] loop3: detected capacity change from 0 to 256 [ 362.992373][T24312] netlink: 'syz.4.5308': attribute type 3 has an invalid length. [ 363.231665][T24321] wg0 speed is unknown, defaulting to 1000 [ 363.232332][T24327] loop1: detected capacity change from 0 to 512 [ 363.265878][T24327] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 363.298469][T24327] EXT4-fs (loop1): Remounting filesystem read-only [ 363.349723][T24327] EXT4-fs (loop1): 1 truncate cleaned up [ 363.367165][T24327] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 363.410051][T24355] loop3: detected capacity change from 0 to 512 [ 363.425300][T24355] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 363.439627][T24327] loop1: detected capacity change from 0 to 512 [ 363.501219][T24359] loop2: detected capacity change from 0 to 512 [ 363.549164][T24359] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.5317: corrupted in-inode xattr: invalid ea_ino [ 363.581503][T24359] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5317: couldn't read orphan inode 15 (err -117) [ 363.645537][T24359] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 13: comm syz.2.5317: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 363.720389][T24367] wg0 speed is unknown, defaulting to 1000 [ 363.736728][T24374] loop0: detected capacity change from 0 to 512 [ 363.743664][T24374] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 363.878802][T24410] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.888353][T24374] wg0 speed is unknown, defaulting to 1000 [ 364.098816][T24442] loop1: detected capacity change from 0 to 256 [ 364.101197][T24448] loop2: detected capacity change from 0 to 512 [ 364.112889][T24448] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 364.180862][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 364.180876][ T29] audit: type=1326 audit(1719918893.011:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.210767][ T29] audit: type=1326 audit(1719918893.011:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.234296][ T29] audit: type=1326 audit(1719918893.011:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.257988][ T29] audit: type=1326 audit(1719918893.011:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.281581][ T29] audit: type=1326 audit(1719918893.011:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.302997][T24454] wg0 speed is unknown, defaulting to 1000 [ 364.305130][ T29] audit: type=1326 audit(1719918893.011:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.334576][ T29] audit: type=1326 audit(1719918893.011:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.358122][ T29] audit: type=1326 audit(1719918893.011:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.381642][ T29] audit: type=1326 audit(1719918893.011:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.405211][ T29] audit: type=1326 audit(1719918893.011:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24441 comm="syz.1.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd8a9839f19 code=0x7ffc0000 [ 364.495229][T24481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24481 comm=syz.3.5329 [ 364.605384][T24489] loop3: detected capacity change from 0 to 512 [ 364.618751][T24489] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.739090][T24510] loop3: detected capacity change from 0 to 512 [ 364.745996][T24510] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 364.843691][T24522] loop0: detected capacity change from 0 to 512 [ 364.869760][T24522] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 364.885419][T24510] wg0 speed is unknown, defaulting to 1000 [ 364.904266][T24522] EXT4-fs (loop0): Remounting filesystem read-only [ 364.904347][T24529] __nla_validate_parse: 4 callbacks suppressed [ 364.904364][T24529] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5336'. [ 364.921203][T24522] EXT4-fs (loop0): 1 truncate cleaned up [ 364.934490][T24522] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 364.941137][T24529] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5336'. [ 364.972732][T24522] loop0: detected capacity change from 0 to 512 [ 365.009780][T24549] loop4: detected capacity change from 0 to 2048 [ 365.030587][T24551] ip6gretap0: entered promiscuous mode [ 365.045262][T24551] batadv_slave_0: entered promiscuous mode [ 365.079166][T24551] ip6gretap0: left promiscuous mode [ 365.093143][T24569] loop1: detected capacity change from 0 to 512 [ 365.100100][T24551] batadv_slave_0: left promiscuous mode [ 365.131616][T24569] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.153879][T24576] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.196439][T24590] loop3: detected capacity change from 0 to 512 [ 365.228790][T24590] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.275766][T24598] loop0: detected capacity change from 0 to 512 [ 365.283271][T24598] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 365.335402][T24590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5344'. [ 365.523121][T24611] wg0 speed is unknown, defaulting to 1000 [ 365.874618][T24653] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5349'. [ 365.876330][T24649] loop3: detected capacity change from 0 to 256 [ 365.885650][T24653] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5349'. [ 366.024210][T24658] loop2: detected capacity change from 0 to 512 [ 366.034415][T24658] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 366.138558][T24667] 9pnet_fd: p9_fd_create_tcp (24667): problem connecting socket to 127.0.0.1 [ 366.163061][T24671] loop0: detected capacity change from 0 to 512 [ 366.196955][T24671] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 366.220416][T24658] wg0 speed is unknown, defaulting to 1000 [ 366.253723][T24671] EXT4-fs (loop0): Remounting filesystem read-only [ 366.276274][T24671] EXT4-fs (loop0): 1 truncate cleaned up [ 366.284372][T24671] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 366.345425][T24671] loop0: detected capacity change from 0 to 512 [ 366.373149][T24704] loop2: detected capacity change from 0 to 512 [ 366.384914][T24706] loop4: detected capacity change from 0 to 512 [ 366.470229][T24706] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.485384][T24704] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.798343][T24719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5358'. [ 366.818392][T24731] loop0: detected capacity change from 0 to 1024 [ 366.949740][T24737] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5361'. [ 367.010908][T24737] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5361'. [ 367.066559][T24741] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.159636][T24755] loop4: detected capacity change from 0 to 512 [ 367.167317][T24751] loop2: detected capacity change from 0 to 128 [ 367.173846][T24755] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 367.184063][T24751] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.347740][T24768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5369'. [ 367.399801][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5371'. [ 367.425912][T24788] loop0: detected capacity change from 0 to 512 [ 367.444270][T24788] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 367.459623][T24788] EXT4-fs (loop0): Remounting filesystem read-only [ 367.460131][T24775] wg0 speed is unknown, defaulting to 1000 [ 367.466173][T24788] EXT4-fs (loop0): 1 truncate cleaned up [ 367.478472][T24788] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 367.510548][T24813] loop2: detected capacity change from 0 to 512 [ 367.513856][T24788] loop0: detected capacity change from 0 to 512 [ 367.538633][T24813] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.696205][T24838] loop0: detected capacity change from 0 to 1024 [ 367.771604][T24841] netlink: 'syz.0.5377': attribute type 3 has an invalid length. [ 367.955779][T24849] loop3: detected capacity change from 0 to 128 [ 367.964323][T24849] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.181438][T24865] loop3: detected capacity change from 0 to 512 [ 368.232142][T24865] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.281851][T24870] loop1: detected capacity change from 0 to 512 [ 368.306735][T24870] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 368.331604][T24870] EXT4-fs (loop1): Remounting filesystem read-only [ 368.345070][T24870] EXT4-fs (loop1): 1 truncate cleaned up [ 368.363777][T24870] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 368.422444][T24870] loop1: detected capacity change from 0 to 512 [ 368.468895][T24892] infiniband syz2: set active [ 368.562853][T24900] loop3: detected capacity change from 0 to 512 [ 368.583150][T24900] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 368.629068][T24904] loop4: detected capacity change from 0 to 128 [ 368.648613][T24904] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.819185][T24922] wg0 speed is unknown, defaulting to 1000 [ 368.915883][T24964] loop1: detected capacity change from 0 to 1024 [ 369.056082][T24974] loop4: detected capacity change from 0 to 512 [ 369.066587][T24977] netlink: 'syz.1.5404': attribute type 3 has an invalid length. [ 369.076584][T24974] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 369.092761][T24971] wg0 speed is unknown, defaulting to 1000 [ 369.100680][T24974] EXT4-fs (loop4): Remounting filesystem read-only [ 369.114282][T24974] EXT4-fs (loop4): 1 truncate cleaned up [ 369.126509][T24974] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 369.193177][T24974] loop4: detected capacity change from 0 to 512 [ 369.227916][T25003] loop0: detected capacity change from 0 to 128 [ 369.236201][T25003] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.496191][T25018] loop3: detected capacity change from 0 to 256 [ 369.748909][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 369.748927][ T29] audit: type=1326 audit(1719918898.581:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24963 comm="syz.1.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 369.804399][T25034] wg0 speed is unknown, defaulting to 1000 [ 369.830412][T25042] loop4: detected capacity change from 0 to 512 [ 369.856068][T21104] EXT4-fs unmount: 126 callbacks suppressed [ 369.856088][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.875091][T25042] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 369.914392][T25066] __nla_validate_parse: 14 callbacks suppressed [ 369.914409][T25066] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5422'. [ 369.956027][T25071] loop1: detected capacity change from 0 to 128 [ 369.956174][T25066] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5422'. [ 369.974761][T25071] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.014005][T25071] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.039930][T25078] loop0: detected capacity change from 0 to 512 [ 370.050234][T25078] EXT4-fs: dax option not supported [ 370.117037][T25075] wg0 speed is unknown, defaulting to 1000 [ 370.208297][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.225371][T25117] loop3: detected capacity change from 0 to 512 [ 370.233905][T25117] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 370.251505][T25117] EXT4-fs (loop3): Remounting filesystem read-only [ 370.258267][T25117] EXT4-fs (loop3): 1 truncate cleaned up [ 370.264380][T25117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.278474][T25117] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 370.287294][T25117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.333610][T25122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5430'. [ 370.352035][T25117] loop3: detected capacity change from 0 to 512 [ 370.361509][T25126] loop1: detected capacity change from 0 to 1024 [ 370.390228][T25126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.539899][T25131] netlink: 'syz.1.5431': attribute type 3 has an invalid length. [ 370.962864][T25145] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5434'. [ 370.990714][T25145] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5434'. [ 371.163907][T25158] loop3: detected capacity change from 0 to 256 [ 371.208211][ T29] audit: type=1326 audit(1719918900.031:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25125 comm="syz.1.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 371.210056][T25163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5441'. [ 371.277211][ T29] audit: type=1326 audit(1719918900.101:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.300834][ T29] audit: type=1326 audit(1719918900.101:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.324355][ T29] audit: type=1326 audit(1719918900.101:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.347867][ T29] audit: type=1326 audit(1719918900.101:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.371398][ T29] audit: type=1326 audit(1719918900.111:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.394892][ T29] audit: type=1326 audit(1719918900.111:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.418397][ T29] audit: type=1326 audit(1719918900.111:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.441917][ T29] audit: type=1326 audit(1719918900.111:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbbaaaf19 code=0x7ffc0000 [ 371.488015][T25169] loop0: detected capacity change from 0 to 512 [ 371.490707][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.506879][T25169] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 371.545150][T25167] wg0 speed is unknown, defaulting to 1000 [ 371.581311][T25187] loop1: detected capacity change from 0 to 512 [ 371.601637][T25187] EXT4-fs: dax option not supported [ 371.751896][T25203] wg0 speed is unknown, defaulting to 1000 [ 372.125300][T25248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5452'. [ 372.135880][T25251] loop4: detected capacity change from 0 to 512 [ 372.163854][T25251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.165312][T25254] loop3: detected capacity change from 0 to 1024 [ 372.183535][T25251] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.200391][T25254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.287675][T25251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5453'. [ 372.372323][T25260] netlink: 'syz.3.5454': attribute type 3 has an invalid length. [ 372.398386][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.430318][T25265] loop1: detected capacity change from 0 to 128 [ 372.449659][T25265] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.521840][T25265] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.650095][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.763119][T25292] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5462'. [ 372.783180][T25292] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5462'. [ 372.855946][T25301] loop2: detected capacity change from 0 to 512 [ 372.871905][T25301] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 372.882947][T25304] loop0: detected capacity change from 0 to 512 [ 372.909238][T25304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 372.948860][T25304] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.063153][T16831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.094675][T16449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 373.137047][T25336] loop0: detected capacity change from 0 to 128 [ 373.165797][T25336] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.172871][T25301] wg0 speed is unknown, defaulting to 1000 [ 373.212072][T25336] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.284877][T16449] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.413727][T25368] loop1: detected capacity change from 0 to 512 [ 373.438561][T25368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.461910][T25368] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.572559][T25386] loop0: detected capacity change from 0 to 1024 [ 373.591127][T25386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.730982][T25394] netlink: 'syz.0.5478': attribute type 3 has an invalid length. [ 373.747041][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.812684][T25403] loop1: detected capacity change from 0 to 128 [ 373.829112][T25403] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.874131][T25403] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.020345][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.384616][T25440] wg0 speed is unknown, defaulting to 1000 [ 374.497915][T16449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.646935][T25478] loop1: detected capacity change from 0 to 1024 [ 374.670696][T25478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.698022][T25484] loop2: detected capacity change from 0 to 512 [ 374.709225][T25484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 374.726041][T25484] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.796154][T21519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 374.842320][T25498] netlink: 'syz.1.5496': attribute type 3 has an invalid length. [ 374.918695][T25511] __nla_validate_parse: 14 callbacks suppressed [ 374.918714][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5501'. [ 374.998448][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5503'. [ 375.001287][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5504'. [ 375.158344][T25521] wg0 speed is unknown, defaulting to 1000 [ 375.226209][T25540] loop4: detected capacity change from 0 to 1024 [ 375.264211][T25540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.451405][T25558] netlink: 'syz.4.5507': attribute type 3 has an invalid length. [ 375.471598][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 375.471625][ T29] audit: type=1326 audit(1719918904.291:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.501503][ T29] audit: type=1326 audit(1719918904.291:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.525055][ T29] audit: type=1326 audit(1719918904.291:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.548666][ T29] audit: type=1326 audit(1719918904.291:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.572338][ T29] audit: type=1326 audit(1719918904.291:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.595893][ T29] audit: type=1326 audit(1719918904.291:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.619415][ T29] audit: type=1326 audit(1719918904.291:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.643047][ T29] audit: type=1326 audit(1719918904.291:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.666565][ T29] audit: type=1326 audit(1719918904.291:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.690252][ T29] audit: type=1326 audit(1719918904.291:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25477 comm="syz.1.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a9839f19 code=0x7fc00000 [ 375.805273][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.954370][T25578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5516'. [ 375.989681][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5517'. [ 376.030866][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5513'. [ 376.049237][T25585] loop1: detected capacity change from 0 to 128 [ 376.070882][T25585] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.086449][T25585] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.156087][T18207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.224253][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.228268][T25596] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5519'. [ 376.257984][T25596] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5519'. [ 376.295245][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'. [ 376.409680][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 376.461984][T25630] loop1: detected capacity change from 0 to 1024 [ 376.471303][T25602] wg0 speed is unknown, defaulting to 1000 [ 376.500428][T25630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.583271][T25653] loop2: detected capacity change from 0 to 128 [ 376.603137][T25630] netlink: 'syz.1.5529': attribute type 3 has an invalid length. [ 376.612035][T25653] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.635327][T25653] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.756493][T21519] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.781098][T21104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.801579][T21104] ================================================================== [ 376.809716][T21104] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 376.817207][T21104] [ 376.819543][T21104] read-write to 0xffff888237c2b410 of 1 bytes by task 25631 on cpu 0: [ 376.827728][T21104] mlock_new_folio+0x114/0x200 [ 376.832511][T21104] folio_add_lru_vma+0x15d/0x170 [ 376.837478][T21104] handle_mm_fault+0x2411/0x2a80 [ 376.842444][T21104] __get_user_pages+0x49d/0xf10 [ 376.847327][T21104] __mm_populate+0x25b/0x3b0 [ 376.851945][T21104] __se_sys_mremap+0x960/0xf20 [ 376.856766][T21104] __x64_sys_mremap+0x67/0x80 [ 376.861466][T21104] x64_sys_call+0x1029/0x2d70 [ 376.866159][T21104] do_syscall_64+0xc9/0x1c0 [ 376.870692][T21104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.876647][T21104] [ 376.878975][T21104] read to 0xffff888237c2b410 of 1 bytes by task 21104 on cpu 1: [ 376.886616][T21104] need_mlock_drain+0x30/0x50 [ 376.891340][T21104] __lru_add_drain_all+0x235/0x410 [ 376.896477][T21104] lru_add_drain_all+0x10/0x20 [ 376.901264][T21104] invalidate_bdev+0x47/0x70 [ 376.905883][T21104] ext4_put_super+0x51b/0x7e0 [ 376.910600][T21104] generic_shutdown_super+0xde/0x210 [ 376.915923][T21104] kill_block_super+0x2a/0x70 [ 376.920624][T21104] ext4_kill_sb+0x44/0x80 [ 376.924990][T21104] deactivate_locked_super+0x7d/0x1c0 [ 376.930385][T21104] deactivate_super+0x9f/0xb0 [ 376.935084][T21104] cleanup_mnt+0x268/0x2e0 [ 376.939530][T21104] __cleanup_mnt+0x19/0x20 [ 376.943995][T21104] task_work_run+0x13a/0x1a0 [ 376.948638][T21104] syscall_exit_to_user_mode+0xbe/0x130 [ 376.954204][T21104] do_syscall_64+0xd6/0x1c0 [ 376.958728][T21104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.964641][T21104] [ 376.966964][T21104] value changed: 0x0b -> 0x12 [ 376.971667][T21104] [ 376.973993][T21104] Reported by Kernel Concurrency Sanitizer on: [ 376.980159][T21104] CPU: 1 PID: 21104 Comm: syz-executor Tainted: G W 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 376.991984][T21104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 377.002054][T21104] ================================================================== [ 377.078110][T25672] loop1: detected capacity change from 0 to 128 [ 377.093946][T25672] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.121636][T25672] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.228359][T21104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.