last executing test programs: 4.325670693s ago: executing program 4 (id=447): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000022001811000080346d148f9b403b4ead85a5e00b949174cf2736016f0621d59a3145ef6589a6f3c3fe4e9acf6279f491d6a508b298fdc3ab25055201ccf117aa4f6ae6f139812ac172e1cefe5805b8008da9eda9c251726dad3f9233717fa05973b289786d6a2a7049d8000ef92ffdc91bd6edec6240347b76bbccc2433192e8ffaf7b020648d2543cf482bc09683020c7775e4a7b51345a1833063b252ec57382cb2e794966092eb2d350e4ecb1e96d9503cc1ef42eea0161e4860dd35d2ff84a847dd80f9779baf344ae517b3816597ca51f138df9ed488680e69a36b7ed8a0daa358a667ebd0b5a316472c94760d4d7638b8ce76d16010597b47966ddf3451e15d1cba9bcd58fad4d98e775e4fbba72b7e9e3db877525d009b6376dbaa486a3535410412d961a2e723398a7415ce7a820e2df2c0def738adcae699464bd9e77fc9efff84c9d9dcfc14f8e8d2298e6c2ab21776ab4207168d7bc9f87de60e1d3da06634d9157bcb882fdaee921f83a69f798784a1373d5be67921d37cab16b80b7d8d00090a4ea55f060782b8ea5", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x3, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x200000000000027a, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000006c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f4ffffff850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28001800", @ANYRES16=r8, @ANYBLOB="00012cbd7000fedbdf250100000014000100fc00"/34], 0x28}, 0x1, 0x0, 0x0, 0x8805}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) recvmmsg(r5, &(0x7f0000000400)=[{{&(0x7f0000000080)=@nl, 0x80, 0x0, 0x0, &(0x7f00000001c0)=""/9, 0x9}, 0x800}, {{0x0, 0x0, 0x0}, 0xb94}], 0x2, 0x20, 0x0) 3.85267622s ago: executing program 0 (id=455): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000340)=""/250, 0x2b, 0xfa, 0x9}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)={[{0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}]}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) socket$netlink(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.557780694s ago: executing program 2 (id=457): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mbind(&(0x7f0000466000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x9, 0x1) unshare(0x22020600) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setreuid(0x0, 0xee00) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000000) ftruncate(0xffffffffffffffff, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='erofs_lookup\x00', 0xffffffffffffffff, 0x0, 0x800000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) 3.476286691s ago: executing program 1 (id=458): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x5}, 0x0, 0x10400, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000000018000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/16], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) 3.475655271s ago: executing program 2 (id=459): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, 0x0, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x18) timer_create(0x2, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18}}], 0x1, 0x0) r10 = dup3(r9, r8, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="4f14", 0x2}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3.432064724s ago: executing program 4 (id=460): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00cd00003c1ef200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0xd6c8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000040030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x66) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmmsg(r5, &(0x7f0000000840)=[{{&(0x7f00000007c0)=@llc={0x1a, 0x200, 0x1, 0x9, 0x26, 0x1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000b00)=[{0x10, 0xff, 0x82b7}, {0x48, 0x0, 0x1, "c2b70f037e19767927a3f770f1dfb962fb4e29620fe2b769a1d7fa2876719fb6244060e60aa5609b4a3fdfd8e910a098bf"}, {0x60, 0x19c, 0x5, "c68426a5d7dbc44c03237e71e0d2dc4ec1ba43f37af491ddbf4195f1f92c2af2504eba487e55975fc2b32377388ed3cd42ee7697e6f2a37e51f03c46bf37ec2238e10e1cb6ca3eae6969dc15ac59"}, {0x50, 0x3a, 0x7fffffff, "ae98b551d921d694aaece461224d79063d81b855c079cb8177fff926c275dd8d54aeaf786a83984f5299d826c9fd30fd4c10e04c95c785fa8b3f66640b"}, {0xf8, 0x10b, 0x8, "3718d7bcc1b0591f40a8e40a548b8beae2fadfe7118a5c8145fd7c2b313196f2a35cca8024febe1cf777026fbcb5c174c9476ca7da3831850624365d524b1029bb8878819d15e64291be82d0c63437d4e11f8c2ecd019dd9e4e0fd9765f9bf647dead5f42b53f22b54e95f68423f637e4af5b1b54a2b742f92b5f6f6165b316c7fcf03221b0631401a529d3af2a9fb4ca4b025d41b45f5f3140b7c9c46f364eb0695ccd376d8c45c8238f6520bdb1d559f8248bf6d0e56eda3a75f0a1f9e1d859848cf004aa913a87e316fde6c2d88417ed4da26ac698203bd07fe5104ed7a5dae46"}, {0x1010, 0x110, 0x4c03, "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"}, {0x30, 0x9a1f2886b2ea26b0, 0xfffffffb, "f87afd06a3c78c8b155b061ffc9c6cdb52358ba263d06672fb955c7b7ffb1d"}, {0x40, 0x113, 0xa0, "75e9442f27872bb451ecba90246da4708bbfd44b455b25d6ca45578b4383523273be689b2a802cc81e"}, {0xe8, 0x29, 0x400, "b4524ee667cb7de0728853682c573372b4df0d54ab3dcff51e7fa3e64a950f250647576935fbc9156ac2df46b90b11b6c1f281db4c69ff83eda3f64d327b9639e5678f26beacd01edf50493029ee911c474c8417c21e9a9a810f75b1b5c605597577f461235e8883961582b67f16ece3137da1a05c3110ae6acbaa42281934d7ba8cd5b70393a4dad851673dc3330503e7a3281c9b173881b6b37e12a3ccf1d40e9d948fd01e8fdfadc7bd86bd4fd14bc1433e22c942a7492f27d62b4986eb8e156271942847893ce8f30f25ee355632e5e63bed"}], 0x1368}}], 0x1, 0x4008000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, 0x0, 0x0) 3.314071084s ago: executing program 4 (id=462): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 2.544022726s ago: executing program 2 (id=463): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x5}, 0x0, 0x10400, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/16], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) 2.528801777s ago: executing program 1 (id=464): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x402201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x1, [0xac1, 0xd28, 0xd74, 0x4bd]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x1, 0x0, 0x0, 0x0, 0x2}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.440094114s ago: executing program 4 (id=465): chmod(&(0x7f0000000040)='./file0\x00', 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x0) socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000000c0)) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0), 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f0000000b40)={0x56, 0x1, 0x1, {0x0, 0x1}, {0x47, 0x2}, @ramp={0x7, 0x40, {0x3, 0xff, 0x2, 0x6}}}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 2.335451112s ago: executing program 1 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1a, 0xa8, @random="7bbf7bec864a21f4e5308f8989990ec47ae3beaf9092"}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syncfs(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000002000000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600ff"], 0x50}}, 0x0) 2.300657965s ago: executing program 0 (id=467): write$bt_hci(0xffffffffffffffff, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.298257485s ago: executing program 3 (id=468): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x200000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000700), 0xd7140dd3239fac83}, 0x0, 0x800000000000004, 0xffffffff, 0x0, 0x0, 0x81, 0xfefc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000580)={0x0, 0x3, 0x60cf, 0x8}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000001, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.152394057s ago: executing program 3 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000080000000104000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000fecac61b1000"/23], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.151976187s ago: executing program 1 (id=470): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000000580)=""/150, 0x8f, 0x4c00) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0x5, &(0x7f0000000100)=[{0x1, 0x4, 0x9, 0x2}, {0x20, 0x2, 0xd1, 0xbe}, {0x80, 0x2, 0xd, 0x3}, {0xfffd, 0x7, 0x9, 0x7d}, {0x196, 0xc7, 0xfd, 0xf}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102397, 0x18ffd, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(0x0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000144000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100001c0012800e00010069703665727370616e000000080002800400120005001100010000000500100009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000f9ff00"/32], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) symlink(0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) 1.766030858s ago: executing program 0 (id=471): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x5}, 0x0, 0x10400, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b00000000000000000000000180000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/16], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) 1.716019942s ago: executing program 3 (id=472): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x15, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = io_uring_setup(0x2bc8, &(0x7f0000000080)={0x0, 0x6ee8, 0x4000, 0x2, 0xd6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x200000a, 0x10010, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=@allocspi={0x140, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x4000006}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {0x0}], 0x2) r7 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/105, 0x69}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r7, {0x15d0b902}}, './file0/file0\x00'}) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000007800)=[{0x5, 0x1, 0x0, &(0x7f0000001380)=[{&(0x7f0000001180)=""/157, 0x9d}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/27, 0x1b}, {&(0x7f0000001240)=""/72, 0x48}, {&(0x7f00000012c0)=""/167, 0xa7}], &(0x7f0000001400)=[0x1, 0x100, 0x2, 0x80000000, 0x14000000000000, 0x4, 0x401, 0x5, 0x9]}, {0x1, 0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001480)=""/162, 0xa2}], &(0x7f0000001580)=[0x4, 0x0]}, {0x3, 0x1, 0x0, &(0x7f0000003800)=[{&(0x7f00000015c0)=""/154, 0x9a}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000003700)=""/209, 0xd1}], &(0x7f0000003840)=[0x9]}, {0x8, 0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/74, 0x4a}, {&(0x7f0000004900)=""/118, 0x76}, {&(0x7f0000004980)=""/252, 0xfc}, {&(0x7f0000004a80)=""/114, 0x72}, {&(0x7f0000004b00)=""/24, 0x18}, {&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/119, 0x77}], &(0x7f0000004d00)}, {0x8, 0x1, 0x0, &(0x7f0000006200)=[{&(0x7f0000004d40)=""/121, 0x79}, {&(0x7f0000004dc0)=""/145, 0x91}, {&(0x7f0000004e80)=""/208, 0xd0}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)=""/122, 0x7a}, {&(0x7f0000006040)=""/249, 0xf9}, {&(0x7f0000006140)=""/187, 0xbb}], &(0x7f0000006280)=[0x10001, 0x0, 0x8, 0x6, 0x3c04]}, {0x7, 0x1, 0x0, &(0x7f0000007740)=[{&(0x7f00000062c0)=""/170, 0xaa}, {&(0x7f0000006380)=""/110, 0x6e}, {&(0x7f0000006400)=""/249, 0xf9}, {&(0x7f0000006500)=""/226, 0xe2}, {&(0x7f0000006600)=""/166, 0xa6}, {&(0x7f00000066c0)=""/80, 0x50}, {&(0x7f0000006740)=""/4096, 0x1000}], &(0x7f00000077c0)=[0x1, 0x80, 0xfffffffffffffffe]}], 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.700509033s ago: executing program 2 (id=473): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = syz_open_dev$sg(0x0, 0x0, 0x2082) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) io_uring_setup(0x556d, &(0x7f0000000180)={0x0, 0x8d48, 0x400, 0x1, 0x2b2}) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.165646956s ago: executing program 4 (id=474): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x5}, 0x0, 0x10400, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000000018000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/16], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) 1.016121378s ago: executing program 0 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x0, @initdev}}) r4 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r5, 0x0, 0x4}, 0x18) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r12, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) 824.979854ms ago: executing program 1 (id=476): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x402201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x1, [0xac1, 0xd28, 0xd74, 0x4bd]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x1, 0x0, 0x0, 0x0, 0x2}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 714.231663ms ago: executing program 0 (id=477): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0002000000b6515083"], 0x30}}, 0x44) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x8}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "ff41f494e367287d75c6f655c736f0a88a86c6bd7f065e6697afb9f64e5cfa30e53da1a80e0aa8224b16998bfbb1d81164d84367edc0071c32"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x826}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x97, 0x8}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x34d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48001}, 0x50) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000640)=r0, 0x4) sendmmsg$inet(r10, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e22, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000540)={@empty, @remote, r8}, 0xc) setreuid(0xee01, 0xee01) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 713.577092ms ago: executing program 1 (id=478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x2, 0x0, 0x0, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x4) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) accept$packet(r3, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) 468.996602ms ago: executing program 0 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0xeffd) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 437.794845ms ago: executing program 4 (id=480): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r5, r4, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1c4) 408.697217ms ago: executing program 3 (id=481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000000100e0ffffff0000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a727"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000db6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000003000027010300006ee7ba2197db18bc"], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x40800) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) pread64(r3, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000700), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x83) pwritev2(r7, 0x0, 0x0, 0xe7b, 0x0, 0x205) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x60000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="b48d3e71fe5d941e81159066b99afbc06bc01ef9d39b8b7244782305faa1c5e222d2bb26f66080cb8217baff9a759f446f50b4cc53c8a5df97ce4ba900d923b60b119794d17af9ee1b549dd885b36ca7234b85e7375053587784efbe4dc400000000b74da44a1dddfb9e7fd080d02618cae6ba06015bc64c8bc3e9d3dd0618b5030ffeeff775d4b87ff508e7f9f533631d3a3e1f20f6a9c280d1bf579d9071c38fa2b5c2cb1a55e301f04e", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000885) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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") 341.141072ms ago: executing program 2 (id=482): creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x618aeb64}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xfffffffd, 0x0, 0x8}, 0xffffffffffffffff, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x18eb009, 0x0, 0xff, 0x1a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x80000, 0xa, 0x2}, 0x18) name_to_handle_at(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@ceph_nfs_confh={0x10, 0x2, {0x40, 0x320}}, &(0x7f0000000240), 0x400) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r6) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) fcntl$getflags(r9, 0x408) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 195.300954ms ago: executing program 3 (id=483): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x40}}, 0x4048084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000440)={r10, 0x3}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000004c0)={r11, 0xf059}, 0x8) 17.151658ms ago: executing program 2 (id=484): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) vmsplice(r4, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02", 0x2}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x1000}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe0000010000000008000100001001"], 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x2a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400000001141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000024000e800c0002800500010093000000140001"], 0x138}}, 0x0) close(r9) 0s ago: executing program 3 (id=485): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): 38][ T3525] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 30.478137][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.500744][ T3525] lo speed is unknown, defaulting to 1000 [ 30.509409][ T3525] lo speed is unknown, defaulting to 1000 [ 30.515618][ C1] hrtimer: interrupt took 38494 ns [ 30.515732][ T3525] lo speed is unknown, defaulting to 1000 [ 30.527059][ T3525] lo speed is unknown, defaulting to 1000 [ 30.533173][ T3525] lo speed is unknown, defaulting to 1000 [ 30.632479][ T3542] dvmrp1: entered allmulticast mode [ 30.717044][ T3544] loop0: detected capacity change from 0 to 512 [ 30.788157][ T3538] lo speed is unknown, defaulting to 1000 [ 30.802008][ T3547] loop2: detected capacity change from 0 to 512 [ 30.808728][ T3547] ======================================================= [ 30.808728][ T3547] WARNING: The mand mount option has been deprecated and [ 30.808728][ T3547] and is ignored by this kernel. Remove the mand [ 30.808728][ T3547] option from the mount to silence this warning. [ 30.808728][ T3547] ======================================================= [ 30.854953][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.932587][ T3547] EXT4-fs (loop2): orphan cleanup on readonly fs [ 30.939668][ T3547] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.15: Failed to acquire dquot type 1 [ 30.953489][ T3547] EXT4-fs (loop2): 1 truncate cleaned up [ 30.960060][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.032218][ T3546] lo speed is unknown, defaulting to 1000 [ 31.194977][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.324890][ T3544] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.847852][ T3530] loop3: detected capacity change from 0 to 128 [ 31.914967][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.981089][ T3544] syz.0.16 (3544) used greatest stack depth: 10576 bytes left [ 31.993045][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.853221][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.088060][ T3558] syz.3.19 (3558) used greatest stack depth: 10176 bytes left [ 33.159197][ T3566] loop0: detected capacity change from 0 to 512 [ 33.175417][ T3567] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 33.184098][ T3566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.213848][ T3566] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.249909][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 33.876139][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.969894][ T3594] loop4: detected capacity change from 0 to 1024 [ 33.998920][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 34.017242][ T3592] loop1: detected capacity change from 0 to 512 [ 34.032951][ T3594] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.044390][ T3594] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 34.052653][ T3594] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.062458][ T3594] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.077400][ T3594] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 34.084995][ T3594] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.22: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.099772][ T3594] EXT4-fs (loop4): 1 orphan inode deleted [ 34.106422][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.129249][ T3594] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.22: iget: bad extended attribute block 6 [ 34.194583][ T3594] lo speed is unknown, defaulting to 1000 [ 34.355054][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.452512][ T3592] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.504235][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.547991][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.556959][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.599052][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.607913][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.636725][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.640576][ T3608] bridge_slave_0: left allmulticast mode [ 34.651404][ T3608] bridge_slave_0: left promiscuous mode [ 34.657110][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.684580][ T3608] bridge_slave_1: left allmulticast mode [ 34.690263][ T3608] bridge_slave_1: left promiscuous mode [ 34.696070][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.709639][ T3608] bond0: (slave bond_slave_0): Releasing backup interface [ 34.725936][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.734901][ T3606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.739370][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 34.752949][ T3615] loop3: detected capacity change from 0 to 2048 [ 34.757062][ T3615] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.780139][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.784904][ T3608] bond0: (slave bond_slave_1): Releasing backup interface [ 34.821500][ T3613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28'. [ 34.826770][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 34.826783][ T29] audit: type=1400 audit(1755631262.560:465): avc: denied { setopt } for pid=3614 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.858546][ T3608] team0: Port device team_slave_0 removed [ 34.869706][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 34.910852][ T29] audit: type=1326 audit(1755631262.610:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 34.910884][ T29] audit: type=1326 audit(1755631262.610:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 34.910903][ T29] audit: type=1326 audit(1755631262.610:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 34.910960][ T29] audit: type=1326 audit(1755631262.610:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 34.911055][ T29] audit: type=1326 audit(1755631262.610:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 35.027723][ T29] audit: type=1326 audit(1755631262.610:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 35.051000][ T29] audit: type=1326 audit(1755631262.610:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 35.051026][ T29] audit: type=1326 audit(1755631262.610:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 35.051098][ T29] audit: type=1326 audit(1755631262.610:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 35.057871][ T3608] team0: Port device team_slave_1 removed [ 35.134108][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.134126][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.143662][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.158096][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.197540][ T3610] bond1: entered promiscuous mode [ 35.197593][ T3610] bond1: entered allmulticast mode [ 35.197731][ T3610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.219542][ T3610] bond1 (unregistering): Released all slaves [ 35.482123][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.523827][ T3636] serio: Serial port ttyS3 [ 35.545633][ T3639] loop3: detected capacity change from 0 to 512 [ 35.563760][ T3639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.576921][ T3639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.593573][ T3642] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 35.595406][ T3643] loop4: detected capacity change from 0 to 512 [ 35.617085][ T3639] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.634103][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.646950][ T3639] EXT4-fs (loop3): 1 truncate cleaned up [ 35.648812][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 35.656475][ T3639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.660316][ T3643] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.684891][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 35.701087][ T3643] netlink: 'syz.4.36': attribute type 13 has an invalid length. [ 35.722390][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.799442][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.806649][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.850503][ T3659] hub 9-0:1.0: USB hub found [ 35.855402][ T3659] hub 9-0:1.0: 8 ports detected [ 35.901080][ T3656] loop2: detected capacity change from 0 to 512 [ 35.932637][ T3656] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 35.942454][ T3656] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 36.064045][ T3656] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.38: Invalid inode table block 1 in block_group 0 [ 36.079161][ T3656] EXT4-fs (loop2): Remounting filesystem read-only [ 36.085866][ T3656] EXT4-fs (loop2): get root inode failed [ 36.091564][ T3656] EXT4-fs (loop2): mount failed [ 36.311370][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 37.069232][ T3656] loop2: detected capacity change from 0 to 512 [ 37.080902][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.097136][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.118082][ T3656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.130737][ T3656] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.145973][ T3656] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz.2.38: path /7/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 37.166926][ T3656] EXT4-fs (loop2): Remounting filesystem read-only [ 37.206097][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.217291][ T3666] lo speed is unknown, defaulting to 1000 [ 37.296973][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.312666][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.332130][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.341031][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.412596][ T3681] program syz.0.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.427367][ T3684] SELinux: Context is not valid (left unmapped). [ 37.443489][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.443661][ T3686] loop4: detected capacity change from 0 to 256 [ 37.546953][ T3691] lo speed is unknown, defaulting to 1000 [ 37.677851][ T3686] FAT-fs (loop4): Directory bread(block 64) failed [ 37.722916][ T3686] FAT-fs (loop4): Directory bread(block 65) failed [ 37.762945][ T3686] FAT-fs (loop4): Directory bread(block 66) failed [ 37.807490][ T3686] FAT-fs (loop4): Directory bread(block 67) failed [ 37.820597][ T3684] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 37.821534][ T3686] FAT-fs (loop4): Directory bread(block 68) failed [ 37.833863][ T3409] IPVS: starting estimator thread 0... [ 37.863203][ T3686] FAT-fs (loop4): Directory bread(block 69) failed [ 37.869803][ T3686] FAT-fs (loop4): Directory bread(block 70) failed [ 37.875331][ T3692] lo speed is unknown, defaulting to 1000 [ 37.876643][ T3686] FAT-fs (loop4): Directory bread(block 71) failed [ 37.888887][ T3686] FAT-fs (loop4): Directory bread(block 72) failed [ 37.896574][ T3686] FAT-fs (loop4): Directory bread(block 73) failed [ 37.943025][ T3695] IPVS: using max 2688 ests per chain, 134400 per kthread [ 38.032806][ T3697] syz.4.43: attempt to access beyond end of device [ 38.032806][ T3697] loop4: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 38.119046][ T3704] capability: warning: `syz.1.49' uses deprecated v2 capabilities in a way that may be insecure [ 38.227779][ T3708] netlink: 'syz.2.51': attribute type 9 has an invalid length. [ 38.242560][ T3709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3709 comm=syz.3.50 [ 38.255060][ T3709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3709 comm=syz.3.50 [ 38.314978][ T3715] loop4: detected capacity change from 0 to 1024 [ 38.338530][ T3715] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.54: Failed to acquire dquot type 0 [ 38.355943][ T3716] tipc: Failed to remove unknown binding: 66,1,1/0:3725907880/3725907882 [ 38.365221][ T3716] tipc: Failed to remove unknown binding: 66,1,1/0:3725907880/3725907882 [ 38.373736][ T3716] tipc: Failed to remove unknown binding: 66,1,1/0:3725907880/3725907882 [ 38.378388][ T3715] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 38.397416][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.54: corrupted inode contents [ 38.409715][ T3715] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.54: mark_inode_dirty error [ 38.421521][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.54: corrupted inode contents [ 38.434325][ T3715] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.54: mark_inode_dirty error [ 38.446148][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.54: corrupted inode contents [ 38.470441][ T3715] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 38.483758][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.54: corrupted inode contents [ 38.505292][ T3715] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.54: mark_inode_dirty error [ 38.525938][ T3715] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 38.539317][ T3723] loop2: detected capacity change from 0 to 512 [ 38.551055][ T3715] EXT4-fs (loop4): 1 truncate cleaned up [ 38.554890][ T3728] loop3: detected capacity change from 0 to 1024 [ 38.564823][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.577816][ T3723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0103] [ 38.585840][ T3723] System zones: 1-12 [ 38.607084][ T3723] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.55: error while reading EA inode 32 err=-116 [ 38.607870][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.625089][ T3723] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.55: error while reading EA inode 32 err=-116 [ 38.644693][ T3723] EXT4-fs (loop2): 1 orphan inode deleted [ 38.650963][ T3723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.702105][ T3728] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.736489][ T3728] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 38.763557][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.424994][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.642245][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.697879][ T3762] loop2: detected capacity change from 0 to 512 [ 39.773620][ T3781] __nla_validate_parse: 7 callbacks suppressed [ 39.773634][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 39.837217][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 39.837232][ T29] audit: type=1326 audit(1755631267.580:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1de75ba7 code=0x7ffc0000 [ 39.871283][ T29] audit: type=1326 audit(1755631267.620:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1de1add9 code=0x7ffc0000 [ 39.894661][ T29] audit: type=1326 audit(1755631267.620:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1de75ba7 code=0x7ffc0000 [ 39.917721][ T29] audit: type=1326 audit(1755631267.620:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1de1add9 code=0x7ffc0000 [ 39.940785][ T29] audit: type=1326 audit(1755631267.620:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 39.966785][ T29] audit: type=1326 audit(1755631267.690:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1de75ba7 code=0x7ffc0000 [ 39.989905][ T29] audit: type=1326 audit(1755631267.690:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1de1add9 code=0x7ffc0000 [ 40.013362][ T29] audit: type=1326 audit(1755631267.690:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 40.110762][ T29] audit: type=1326 audit(1755631267.810:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1de75ba7 code=0x7ffc0000 [ 40.133988][ T29] audit: type=1326 audit(1755631267.810:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1de1add9 code=0x7ffc0000 [ 40.526195][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.535140][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.547228][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.764858][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.773709][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.782798][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.820378][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.829231][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.855265][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.858635][ T3798] infiniband syz!: set down [ 40.869267][ T3798] infiniband syz!: added team_slave_0 [ 40.880647][ T3795] loop4: detected capacity change from 0 to 512 [ 40.889100][ T3795] EXT4-fs: Ignoring removed i_version option [ 40.898689][ T3795] EXT4-fs: journaled quota format not specified [ 40.907511][ T3811] serio: Serial port ttyS3 [ 40.913850][ T3798] RDS/IB: syz!: added [ 40.917862][ T3798] smc: adding ib device syz! with port count 1 [ 40.924204][ T3798] smc: ib device syz! port 1 has pnetid [ 40.941927][ T3813] loop3: detected capacity change from 0 to 512 [ 40.954863][ T3813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.964750][ T3813] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 41.037043][ T3819] IPVS: Error joining to the multicast group [ 41.299444][ T3822] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 41.299444][ T3822] program syz.1.76 not setting count and/or reply_len properly [ 41.647427][ T3833] hsr_slave_0: left promiscuous mode [ 41.748376][ T3833] hsr_slave_1: left promiscuous mode [ 41.776495][ T3830] loop4: detected capacity change from 0 to 512 [ 42.060061][ T3830] msdos: Bad value for 'time_offset' [ 42.105752][ T3830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 42.112289][ T3830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.119913][ T3830] vhci_hcd vhci_hcd.0: Device attached [ 42.232111][ T3837] vhci_hcd: connection closed [ 42.232359][ T1567] vhci_hcd: stop threads [ 42.241319][ T1567] vhci_hcd: release socket [ 42.245720][ T1567] vhci_hcd: disconnect device [ 42.684380][ T3845] lo speed is unknown, defaulting to 1000 [ 43.342762][ T3851] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.564345][ T3859] netlink: 'syz.3.85': attribute type 13 has an invalid length. [ 43.621518][ T3863] loop4: detected capacity change from 0 to 512 [ 43.649422][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.666427][ T3863] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.678292][ T3859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.730402][ T3863] syz.4.87 (3863) used greatest stack depth: 10032 bytes left [ 43.743052][ T3875] C: renamed from team_slave_0 (while UP) [ 43.750335][ T3875] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 43.762253][ T3875] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 43.778619][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.830068][ T3870] can0: slcan on ttyS3. [ 43.934332][ T3870] can0 (unregistered): slcan off ttyS3. [ 43.942575][ T3893] can0: slcan on ttyS3. [ 43.950900][ T3870] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 44.193359][ T3922] loop2: detected capacity change from 0 to 128 [ 44.306943][ T3922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 44.326600][ T3922] System zones: 1-3, 19-19, 35-36 [ 44.340048][ T3922] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.353934][ T3922] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.529901][ T3915] Set syz1 is full, maxelem 65536 reached [ 44.558296][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.822316][ T3944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3944 comm=syz.1.97 [ 44.874118][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 44.874131][ T29] audit: type=1400 audit(1755631272.620:990): avc: denied { connect } for pid=3938 comm="syz.2.95" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.930159][ T3942] loop4: detected capacity change from 0 to 512 [ 44.941929][ T3942] EXT4-fs: Ignoring removed oldalloc option [ 44.960374][ T3948] lo speed is unknown, defaulting to 1000 [ 45.011217][ T3939] can0 (unregistered): slcan off ttyS3. [ 45.066813][ T3942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.131268][ T3942] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.148786][ T29] audit: type=1326 audit(1755631272.890:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 45.173599][ T29] audit: type=1326 audit(1755631272.890:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 45.173625][ T29] audit: type=1326 audit(1755631272.890:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 45.173644][ T29] audit: type=1326 audit(1755631272.890:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 45.173673][ T29] audit: type=1326 audit(1755631272.890:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1de7d550 code=0x7ffc0000 [ 45.173695][ T29] audit: type=1326 audit(1755631272.890:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 45.173717][ T29] audit: type=1326 audit(1755631272.890:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 45.173810][ T29] audit: type=1326 audit(1755631272.890:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 45.173831][ T29] audit: type=1326 audit(1755631272.890:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 45.208926][ T3967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.267743][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.268790][ T3967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.386615][ T3967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.471617][ T3967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.514152][ T3439] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.514200][ T3439] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.518963][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.533343][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.762694][ T3981] loop4: detected capacity change from 0 to 128 [ 45.857834][ T3998] lo speed is unknown, defaulting to 1000 [ 45.905449][ T4000] bridge_slave_0: left allmulticast mode [ 45.911256][ T4000] bridge_slave_0: left promiscuous mode [ 45.917109][ T4000] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.931999][ T4001] syz.0.111 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.109202][ T4000] bridge_slave_1: left allmulticast mode [ 46.114894][ T4000] bridge_slave_1: left promiscuous mode [ 46.120656][ T4000] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.233358][ T4007] loop2: detected capacity change from 0 to 512 [ 46.239467][ T4002] __nla_validate_parse: 4 callbacks suppressed [ 46.239483][ T4002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 46.266550][ T4007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.300069][ T4007] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.105: corrupted xattr entries [ 46.313383][ T4000] team0: Port device team_slave_0 removed [ 46.317185][ T4007] EXT4-fs (loop2): 1 truncate cleaned up [ 46.325740][ T4007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.327562][ T4000] team0: Port device team_slave_1 removed [ 46.348164][ T4000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.355655][ T4000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.365096][ T4000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.372564][ T4000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.373016][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.428310][ T4001] lo speed is unknown, defaulting to 1000 [ 46.627667][ T4033] bridge0: entered promiscuous mode [ 46.633170][ T4033] macvtap1: entered allmulticast mode [ 46.638571][ T4033] bridge0: entered allmulticast mode [ 46.646169][ T4033] bridge0: port 3(macvtap1) entered blocking state [ 46.652755][ T4033] bridge0: port 3(macvtap1) entered disabled state [ 46.660409][ T4033] bridge0: left allmulticast mode [ 46.665627][ T4033] bridge0: left promiscuous mode [ 46.802680][ T4043] infiniband syz2: set active [ 46.807462][ T4043] infiniband syz2: added bond0 [ 46.824954][ T4043] RDS/IB: syz2: added [ 46.829083][ T4043] smc: adding ib device syz2 with port count 1 [ 46.836051][ T4043] smc: ib device syz2 port 1 has pnetid [ 47.456538][ T3409] IPVS: starting estimator thread 0... [ 47.487461][ T4062] lo speed is unknown, defaulting to 1000 [ 47.523667][ T4066] hub 9-0:1.0: USB hub found [ 47.528329][ T4066] hub 9-0:1.0: 8 ports detected [ 47.535867][ T4060] loop2: detected capacity change from 0 to 512 [ 47.551295][ T4065] IPVS: using max 2928 ests per chain, 146400 per kthread [ 47.566927][ T4060] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.116: error while reading EA inode 32 err=-116 [ 47.606088][ T4069] loop4: detected capacity change from 0 to 512 [ 47.617217][ T4060] EXT4-fs (loop2): Remounting filesystem read-only [ 47.623863][ T4060] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 47.638587][ T4069] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.638726][ T4060] EXT4-fs (loop2): 1 orphan inode deleted [ 47.655567][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 47.665760][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.671662][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.673319][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.685545][ T4069] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.699357][ T4060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.710281][ T4076] process 'syz.1.121' launched './file0' with NULL argv: empty string added [ 47.722111][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.724876][ T4069] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.119: corrupted inode contents [ 47.729513][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.769934][ T4069] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.119: mark_inode_dirty error [ 47.782607][ T4069] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.119: corrupted inode contents [ 47.811220][ T4069] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.119: mark_inode_dirty error [ 47.832434][ T4069] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.119: corrupted inode contents [ 47.861403][ T4069] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 47.899302][ T4069] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.119: corrupted inode contents [ 47.931366][ T4069] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.119: mark_inode_dirty error [ 47.953495][ T4069] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 47.984850][ T4085] lo speed is unknown, defaulting to 1000 [ 48.001976][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.010911][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.021535][ T4069] EXT4-fs (loop4): 1 truncate cleaned up [ 48.027874][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 1 [ 48.054239][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.070361][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.080608][ T4069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.096226][ T4092] netlink: 'syz.3.125': attribute type 7 has an invalid length. [ 48.107097][ T4094] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 48.110822][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.122881][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.133818][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.174874][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.183902][ T4087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.215660][ T4069] loop4: detected capacity change from 0 to 512 [ 48.283011][ T4069] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.303284][ T4069] EXT4-fs (loop4): mount failed [ 48.353455][ T4069] loop4: detected capacity change from 0 to 164 [ 48.426927][ T4116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.581230][ T1567] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.590674][ T1567] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.599824][ T1567] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.779873][ T4116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.790218][ T4116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.924466][ T4116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.934891][ T4116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.014084][ T4116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.024424][ T4116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.044883][ T4120] hub 9-0:1.0: USB hub found [ 49.049621][ T4120] hub 9-0:1.0: 8 ports detected [ 49.109927][ T3439] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.118172][ T3439] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.143348][ T3439] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.151682][ T3439] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.177482][ T3439] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.185814][ T3439] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205572][ T3439] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.213958][ T3439] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.277207][ T4145] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.312675][ T3581] IPVS: starting estimator thread 0... [ 49.312700][ T4141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 49.329218][ T4146] lo speed is unknown, defaulting to 1000 [ 49.431951][ T4147] IPVS: using max 2928 ests per chain, 146400 per kthread [ 49.459336][ T4136] loop3: detected capacity change from 0 to 512 [ 49.500926][ T4136] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.135: error while reading EA inode 32 err=-116 [ 49.520147][ T4136] EXT4-fs (loop3): Remounting filesystem read-only [ 49.526738][ T4136] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.538622][ T4136] EXT4-fs (loop3): 1 orphan inode deleted [ 49.544767][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.567213][ T4136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.702225][ T4156] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.712987][ T4156] loop2: detected capacity change from 0 to 512 [ 49.719595][ T4156] EXT4-fs: Ignoring removed i_version option [ 49.726405][ T4156] EXT4-fs: journaled quota format not specified [ 49.780716][ T4166] loop3: detected capacity change from 0 to 512 [ 49.787538][ T4166] EXT4-fs: Ignoring removed nobh option [ 49.793237][ T4166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.800723][ T4166] EXT4-fs (loop3): filesystem is read-only [ 49.806846][ T4166] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.819124][ T4166] EXT4-fs (loop3): filesystem is read-only [ 49.825050][ T4166] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.833262][ T4166] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.143: iget: bad i_size value: 648518346341360424 [ 49.834619][ T4168] lo speed is unknown, defaulting to 1000 [ 49.846724][ T4166] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.143: couldn't read orphan inode 16 (err -117) [ 49.884189][ T4166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.905263][ T4169] loop2: detected capacity change from 0 to 512 [ 49.985514][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 49.985527][ T29] audit: type=1400 audit(1755631277.730:1075): avc: denied { read } for pid=4165 comm="syz.3.143" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.992498][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.139: error while reading EA inode 32 err=-116 [ 50.014700][ T29] audit: type=1400 audit(1755631277.730:1076): avc: denied { open } for pid=4165 comm="syz.3.143" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.038757][ T4169] EXT4-fs (loop2): Remounting filesystem read-only [ 50.056688][ T4169] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 50.067890][ T4169] EXT4-fs (loop2): 1 orphan inode deleted [ 50.074568][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.087988][ T4169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.156925][ T29] audit: type=1400 audit(1755631277.880:1077): avc: denied { ioctl } for pid=4165 comm="syz.3.143" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.369116][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.580008][ T29] audit: type=1326 audit(1755631278.320:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604611][ T29] audit: type=1326 audit(1755631278.320:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604634][ T29] audit: type=1326 audit(1755631278.320:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604654][ T29] audit: type=1326 audit(1755631278.320:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604693][ T29] audit: type=1326 audit(1755631278.320:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604715][ T29] audit: type=1326 audit(1755631278.320:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.604735][ T29] audit: type=1326 audit(1755631278.320:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 50.807746][ T4186] hub 9-0:1.0: USB hub found [ 50.809593][ T4186] hub 9-0:1.0: 8 ports detected [ 50.854121][ T4191] loop0: detected capacity change from 0 to 512 [ 51.067940][ T4191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.068013][ T4191] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.102000][ T4175] Set syz1 is full, maxelem 65536 reached [ 51.148741][ T4205] rdma_rxe: rxe_newlink: failed to add bond0 [ 51.184173][ T4209] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 51.205469][ T4211] loop3: detected capacity change from 0 to 512 [ 51.277213][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.289018][ T4211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.302578][ T4211] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.319710][ T4202] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.152: corrupted inode contents [ 51.331708][ T4202] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.152: mark_inode_dirty error [ 51.331767][ T4215] loop4: detected capacity change from 0 to 512 [ 51.351320][ T4202] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.152: corrupted inode contents [ 51.373031][ T4215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.378609][ T4202] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.152: mark_inode_dirty error [ 51.413052][ T4215] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.159: corrupted xattr entries [ 51.443717][ T4226] lo speed is unknown, defaulting to 1000 [ 51.487708][ T4229] loop0: detected capacity change from 0 to 512 [ 51.524123][ T4215] EXT4-fs (loop4): 1 truncate cleaned up [ 51.531082][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.654265][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.664611][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.694715][ T4229] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.157: error while reading EA inode 32 err=-116 [ 51.739354][ T4229] EXT4-fs (loop0): Remounting filesystem read-only [ 51.745936][ T4229] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 51.802702][ T4229] EXT4-fs (loop0): 1 orphan inode deleted [ 51.809226][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.824388][ T4229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.910693][ T4238] serio: Serial port ttyS3 [ 52.077415][ T4247] loop2: detected capacity change from 0 to 128 [ 52.152798][ T4249] netlink: 'syz.0.164': attribute type 27 has an invalid length. [ 52.325238][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.332558][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.376382][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.386285][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.491896][ T10] lo speed is unknown, defaulting to 1000 [ 52.496547][ T3439] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.497730][ T10] syz0: Port: 1 Link DOWN [ 52.519562][ T3439] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.550894][ T3439] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.620500][ T3439] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.677384][ T4262] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 52.911583][ T4276] loop3: detected capacity change from 0 to 512 [ 52.924890][ T4276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.945328][ T4276] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.957410][ T4276] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.171: Failed to acquire dquot type 1 [ 52.995450][ T4278] lo speed is unknown, defaulting to 1000 [ 53.374883][ T4276] EXT4-fs (loop3): 1 truncate cleaned up [ 53.396110][ T4276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.436975][ T4276] lo speed is unknown, defaulting to 1000 [ 53.940839][ T4280] loop0: detected capacity change from 0 to 8192 [ 54.078353][ T4292] lo speed is unknown, defaulting to 1000 [ 54.109588][ T4282] loop4: detected capacity change from 0 to 512 [ 54.229879][ T4282] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.175: error while reading EA inode 32 err=-116 [ 54.838105][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 54.844753][ T4282] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 54.939965][ T4282] EXT4-fs (loop4): 1 orphan inode deleted [ 54.978466][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.004065][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 55.004077][ T29] audit: type=1400 audit(1755631282.750:1241): avc: denied { listen } for pid=4304 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.173286][ T4282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.202849][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.216731][ T29] audit: type=1400 audit(1755631282.960:1242): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.364831][ T4309] lo speed is unknown, defaulting to 1000 [ 55.395350][ T4312] __nla_validate_parse: 17 callbacks suppressed [ 55.395385][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 55.410872][ T29] audit: type=1400 audit(1755631283.100:1243): avc: denied { shutdown } for pid=4308 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.433217][ T4312] IPVS: Error joining to the multicast group [ 55.494966][ T4315] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 55.554996][ T4319] loop4: detected capacity change from 0 to 512 [ 55.586293][ T4319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.627052][ T4319] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.683252][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.744896][ T4326] netlink: 'syz.4.185': attribute type 7 has an invalid length. [ 55.889291][ T4336] bridge_slave_0: left allmulticast mode [ 55.895057][ T4336] bridge_slave_0: left promiscuous mode [ 55.900798][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.981669][ T29] audit: type=1326 audit(1755631283.720:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 56.005156][ T29] audit: type=1326 audit(1755631283.720:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 56.028520][ T29] audit: type=1326 audit(1755631283.720:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd62ffad550 code=0x7ffc0000 [ 56.051978][ T29] audit: type=1326 audit(1755631283.720:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd62ffad550 code=0x7ffc0000 [ 56.075303][ T29] audit: type=1326 audit(1755631283.720:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 56.099098][ T29] audit: type=1326 audit(1755631283.720:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 56.122523][ T29] audit: type=1326 audit(1755631283.720:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62ffaebe9 code=0x7ffc0000 [ 56.157597][ T4336] bridge_slave_1: left allmulticast mode [ 56.163528][ T4336] bridge_slave_1: left promiscuous mode [ 56.169546][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.178996][ T4340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.189'. [ 56.189497][ T4338] netlink: 88 bytes leftover after parsing attributes in process `syz.2.190'. [ 56.672730][ T4336] bond0: (slave bond_slave_0): Releasing backup interface [ 56.689577][ T4336] bond0: (slave bond_slave_1): Releasing backup interface [ 56.743127][ T4336] team0: Port device team_slave_0 removed [ 56.821071][ T4336] team0: Port device team_slave_1 removed [ 56.850256][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 56.904932][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.930667][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.939031][ T4354] loop3: detected capacity change from 0 to 512 [ 57.218188][ T4343] lo speed is unknown, defaulting to 1000 [ 57.244186][ T4354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.257118][ T4354] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.322410][ T4362] loop2: detected capacity change from 0 to 512 [ 57.341709][ T4362] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.354360][ T4362] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.364559][ T4362] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.204: corrupted inode contents [ 57.377336][ T4362] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.204: mark_inode_dirty error [ 57.388991][ T4362] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.204: corrupted inode contents [ 57.410840][ T4352] lo speed is unknown, defaulting to 1000 [ 57.418019][ T4362] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.204: mark_inode_dirty error [ 57.430112][ T4362] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.204: corrupted inode contents [ 57.443308][ T4362] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 57.452519][ T4362] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.204: corrupted inode contents [ 57.465331][ T4362] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.204: mark_inode_dirty error [ 57.476868][ T4362] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 57.487377][ T4362] EXT4-fs (loop2): 1 truncate cleaned up [ 57.908747][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 57.921667][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.921878][ T4362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.947988][ T4362] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.009678][ T4362] loop2: detected capacity change from 0 to 512 [ 58.140663][ T4362] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.175003][ T4362] EXT4-fs (loop2): mount failed [ 58.321188][ T4368] loop4: detected capacity change from 0 to 512 [ 58.327536][ T4379] loop2: detected capacity change from 0 to 164 [ 58.386892][ T4368] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.194: error while reading EA inode 32 err=-116 [ 58.598454][ T4368] EXT4-fs (loop4): Remounting filesystem read-only [ 58.605109][ T4368] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.729796][ T4368] EXT4-fs (loop4): 1 orphan inode deleted [ 58.737096][ T4382] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 58.781328][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.805980][ T4368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.817311][ T4386] loop2: detected capacity change from 0 to 512 [ 58.862900][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.895636][ T4386] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.002277][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.044106][ T4397] loop2: detected capacity change from 0 to 128 [ 59.062796][ T4397] 9pnet_fd: Insufficient options for proto=fd [ 59.164815][ T4399] loop2: detected capacity change from 0 to 1024 [ 59.225264][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 59.234310][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 59.309008][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.479775][ T4405] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 59.860277][ T4419] lo speed is unknown, defaulting to 1000 [ 60.492935][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 60.492950][ T29] audit: type=1326 audit(1755631288.240:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.488165][ T29] audit: type=1326 audit(1755631289.220:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.511543][ T29] audit: type=1326 audit(1755631289.220:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.535004][ T29] audit: type=1326 audit(1755631289.220:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.558356][ T29] audit: type=1326 audit(1755631289.220:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.581664][ T29] audit: type=1326 audit(1755631289.220:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.605032][ T29] audit: type=1326 audit(1755631289.220:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.628433][ T29] audit: type=1326 audit(1755631289.220:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.651948][ T29] audit: type=1326 audit(1755631289.220:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.675342][ T29] audit: type=1326 audit(1755631289.220:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 61.900851][ T4428] loop3: detected capacity change from 0 to 512 [ 61.931616][ T4428] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 61.941345][ T4428] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 61.955080][ T4429] loop4: detected capacity change from 0 to 512 [ 61.992753][ T4428] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.210: Invalid inode table block 1 in block_group 0 [ 62.009776][ T4428] EXT4-fs (loop3): Remounting filesystem read-only [ 62.016359][ T4428] EXT4-fs (loop3): get root inode failed [ 62.022054][ T4428] EXT4-fs (loop3): mount failed [ 62.029233][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.043087][ T4429] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.056628][ T4429] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.211: corrupted inode contents [ 62.069441][ T4429] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.211: mark_inode_dirty error [ 62.081103][ T4429] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.211: corrupted inode contents [ 62.094051][ T4429] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.211: mark_inode_dirty error [ 62.126498][ T4434] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 62.146398][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.266684][ T4423] loop3: detected capacity change from 0 to 512 [ 62.374294][ T4445] C: renamed from team_slave_0 [ 62.390528][ T4445] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 62.398317][ T4445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 62.431267][ T4446] can0: slcan on ttyS3. [ 62.470075][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.483092][ T4423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.498653][ T4423] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.516379][ T4423] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz.3.210: path /42/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 62.538504][ T4423] EXT4-fs (loop3): Remounting filesystem read-only [ 62.549778][ T4446] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 62.557498][ T4446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.213'. [ 62.712288][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.713074][ T4452] loop4: detected capacity change from 0 to 512 [ 62.740266][ T4452] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 62.779162][ T4455] loop3: detected capacity change from 0 to 512 [ 62.825351][ T4452] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 62.834498][ T4452] EXT4-fs (loop4): 1 truncate cleaned up [ 62.840745][ T4452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.847915][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.865841][ T4455] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.876882][ T4445] can0 (unregistered): slcan off ttyS3. [ 62.885185][ T4443] can0: slcan on ttyS3. [ 62.919671][ T4452] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.219: lblock 0 mapped to illegal pblock 4 (length 1) [ 62.936121][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.947808][ T4452] EXT4-fs (loop4): Remounting filesystem read-only [ 62.971301][ T4442] can0 (unregistered): slcan off ttyS3. [ 62.993781][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.348155][ T4495] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 63.472785][ T4499] rdma_rxe: rxe_newlink: failed to add bond0 [ 63.524942][ T4503] loop2: detected capacity change from 0 to 512 [ 63.573390][ T4503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.586002][ T4503] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.659822][ T4513] loop3: detected capacity change from 0 to 512 [ 63.754273][ T4515] loop2: detected capacity change from 0 to 512 [ 63.779703][ T4513] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.842518][ T4515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.230: error while reading EA inode 32 err=-116 [ 63.943284][ T4515] EXT4-fs (loop2): Remounting filesystem read-only [ 63.949875][ T4515] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 63.967783][ T4515] EXT4-fs (loop2): 1 orphan inode deleted [ 64.485802][ T4523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.533570][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4524 comm=syz.1.233 [ 64.557561][ T4523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.633256][ T4523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.702855][ T4523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.759247][ T3439] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.777994][ T3439] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.787128][ T3439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.804642][ T3439] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.019313][ T4536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'. [ 65.028375][ T4536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 65.037341][ T4536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'. [ 65.046552][ T4536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'. [ 65.818918][ T4542] lo speed is unknown, defaulting to 1000 [ 65.929137][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 65.966526][ T4544] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 66.190735][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 66.190747][ T29] audit: type=1326 audit(1755631293.930:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.220441][ T29] audit: type=1326 audit(1755631293.930:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.244211][ T29] audit: type=1326 audit(1755631293.970:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1de7d550 code=0x7ffc0000 [ 66.267607][ T29] audit: type=1326 audit(1755631293.970:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.291348][ T29] audit: type=1326 audit(1755631293.970:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.314927][ T29] audit: type=1326 audit(1755631293.970:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.338260][ T29] audit: type=1326 audit(1755631293.970:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.361727][ T29] audit: type=1326 audit(1755631293.970:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.385129][ T29] audit: type=1326 audit(1755631293.970:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.408507][ T29] audit: type=1326 audit(1755631293.970:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1de7ebe9 code=0x7ffc0000 [ 66.520231][ T4559] sd 0:0:1:0: device reset [ 67.073618][ T4575] lo speed is unknown, defaulting to 1000 [ 67.094369][ T4579] loop3: detected capacity change from 0 to 512 [ 67.184991][ T4582] lo speed is unknown, defaulting to 1000 [ 67.768713][ T4579] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.247: error while reading EA inode 32 err=-116 [ 68.003573][ T4579] EXT4-fs (loop3): Remounting filesystem read-only [ 68.010097][ T4579] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 68.826294][ T4597] loop4: detected capacity change from 0 to 512 [ 68.839923][ T4597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.871438][ T4597] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.878623][ T4597] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.249: Failed to acquire dquot type 1 [ 68.890734][ T4597] EXT4-fs (loop4): 1 truncate cleaned up [ 68.897189][ T4597] EXT4-fs mount: 5 callbacks suppressed [ 68.897201][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.936869][ T4597] lo speed is unknown, defaulting to 1000 [ 69.194240][ T4603] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 69.206596][ T4579] EXT4-fs (loop3): 1 orphan inode deleted [ 69.442353][ T4579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.514287][ T4579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.149685][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.967155][ T4631] loop2: detected capacity change from 0 to 1024 [ 70.975962][ T4631] EXT4-fs: Ignoring removed bh option [ 70.981743][ T4631] EXT4-fs: inline encryption not supported [ 70.993618][ T4631] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.007219][ T4631] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.262: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.031933][ T4631] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.262: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.036508][ T4640] lo speed is unknown, defaulting to 1000 [ 71.063651][ T4631] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.262: Failed to acquire dquot type 0 [ 71.089320][ T4631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.093161][ T4629] netlink: 'syz.3.261': attribute type 27 has an invalid length. [ 71.115212][ T4631] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.262: mark_inode_dirty error [ 71.127310][ T4631] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 71.139297][ T4631] EXT4-fs (loop2): 1 orphan inode deleted [ 71.146635][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.156676][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.173911][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 71.186361][ T4631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.199672][ T4631] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.262: Invalid inode table block 1 in block_group 0 [ 71.206341][ T4644] /dev/sg0: Can't lookup blockdev [ 71.213269][ T4631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.230490][ T4631] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.262: mark_inode_dirty error [ 71.384504][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 71.384519][ T29] audit: type=1326 audit(1755631299.130:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 71.434611][ T29] audit: type=1326 audit(1755631299.130:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 71.470919][ T4637] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.479933][ T4637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.496097][ T4649] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 71.504873][ T1567] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.513355][ T1567] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.550960][ T4651] loop4: detected capacity change from 0 to 512 [ 71.590077][ T1567] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.598592][ T1567] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.661870][ T1567] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.671371][ T1567] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.673956][ T4651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.699374][ T4659] loop3: detected capacity change from 0 to 1024 [ 71.700714][ T4651] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.718248][ T4659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.786469][ T4660] lo speed is unknown, defaulting to 1000 [ 72.097379][ T4659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.101230][ T1567] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.118011][ T1567] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.154092][ T29] audit: type=1400 audit(1755631299.900:1586): avc: denied { ioctl } for pid=4657 comm="syz.3.268" path="socket:[9080]" dev="sockfs" ino=9080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.173728][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.207981][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.235607][ T29] audit: type=1326 audit(1755631299.980:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.259182][ T29] audit: type=1326 audit(1755631299.980:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.263305][ T4672] mmap: syz.3.270 (4672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.283964][ T29] audit: type=1326 audit(1755631300.010:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.311047][ T4675] lo speed is unknown, defaulting to 1000 [ 72.317903][ T29] audit: type=1326 audit(1755631300.010:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.347090][ T29] audit: type=1326 audit(1755631300.010:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.370437][ T29] audit: type=1326 audit(1755631300.010:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.393922][ T29] audit: type=1326 audit(1755631300.010:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f846aebe9 code=0x7ffc0000 [ 72.572055][ T4688] loop2: detected capacity change from 0 to 512 [ 72.633230][ T4688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.654668][ T4688] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.677654][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.272: corrupted inode contents [ 72.694048][ T4688] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.272: mark_inode_dirty error [ 72.707964][ T4697] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.717436][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.272: corrupted inode contents [ 72.730002][ T4688] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.272: mark_inode_dirty error [ 73.111316][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.318612][ T4716] loop2: detected capacity change from 0 to 512 [ 73.532429][ T4716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.588473][ T4716] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.685921][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.821420][ T4724] loop2: detected capacity change from 0 to 1024 [ 73.830826][ T4724] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 73.864025][ T4724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.033511][ T4734] syz.4.285(4734): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 74.376446][ T4738] lo speed is unknown, defaulting to 1000 [ 74.425587][ T4739] lo speed is unknown, defaulting to 1000 [ 74.647083][ T4741] bridge_slave_0: left allmulticast mode [ 74.652794][ T4741] bridge_slave_0: left promiscuous mode [ 74.658534][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.668216][ T4741] bridge_slave_1: left allmulticast mode [ 74.674080][ T4741] bridge_slave_1: left promiscuous mode [ 74.679834][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.698545][ T4741] bond0: (slave bond_slave_0): Releasing backup interface [ 74.716277][ T4741] bond0: (slave bond_slave_1): Releasing backup interface [ 74.765204][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.781826][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.924760][ T4755] lo speed is unknown, defaulting to 1000 [ 74.976769][ T4760] loop4: detected capacity change from 0 to 512 [ 75.089192][ T4760] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.289: error while reading EA inode 32 err=-116 [ 75.211158][ T4760] EXT4-fs (loop4): Remounting filesystem read-only [ 75.217754][ T4760] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 75.271339][ T4760] EXT4-fs (loop4): 1 orphan inode deleted [ 75.277525][ T4760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.352398][ T4760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.682484][ T4792] loop4: detected capacity change from 0 to 1024 [ 75.705448][ T4792] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.723466][ T4792] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 75.731721][ T4792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000] [ 75.759966][ T4792] System zones: 0-1, 3-12 [ 75.764552][ T4792] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.766109][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.781698][ T4792] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.292: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.822615][ T4792] EXT4-fs (loop4): Remounting filesystem read-only [ 75.845009][ T4792] EXT4-fs (loop4): 1 orphan inode deleted [ 75.851100][ T4792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.854338][ T4798] bridge_slave_0: left allmulticast mode [ 75.869265][ T4798] bridge_slave_0: left promiscuous mode [ 75.875191][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.893698][ T4802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'. [ 75.904109][ T4798] bridge_slave_1: left allmulticast mode [ 75.909816][ T4798] bridge_slave_1: left promiscuous mode [ 75.915682][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.940693][ T4798] bond0: (slave bond_slave_0): Releasing backup interface [ 75.963703][ T4798] bond0: (slave bond_slave_1): Releasing backup interface [ 76.002991][ T4798] team0: Port device C removed [ 76.011541][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 76.022851][ T4798] team0: Port device team_slave_1 removed [ 76.071525][ T4810] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.088953][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 76.155439][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.314731][ T4800] loop2: detected capacity change from 0 to 2048 [ 76.323728][ T4819] team0: Mode changed to "loadbalance" [ 76.336186][ T4819] team0: Device veth1_vlan failed to register rx_handler [ 76.377938][ T4819] syz.1.299 (4819) used greatest stack depth: 9944 bytes left [ 76.416186][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 76.416201][ T29] audit: type=1326 audit(1755631304.140:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.445795][ T29] audit: type=1326 audit(1755631304.140:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.469272][ T29] audit: type=1326 audit(1755631304.150:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.495142][ T29] audit: type=1326 audit(1755631304.240:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.520846][ T29] audit: type=1326 audit(1755631304.240:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.544239][ T29] audit: type=1326 audit(1755631304.240:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.571388][ T29] audit: type=1326 audit(1755631304.270:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.602840][ T3294] loop2: p2 p3 p7 [ 76.607586][ T29] audit: type=1326 audit(1755631304.350:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.632694][ T29] audit: type=1326 audit(1755631304.380:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.696119][ T29] audit: type=1326 audit(1755631304.410:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 76.823014][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 76.834723][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 76.920376][ T3662] udevd[3662]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.958551][ T4833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4833 comm=syz.3.303 [ 76.978433][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 76.987488][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 77.008296][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 78.540767][ T4839] lo speed is unknown, defaulting to 1000 [ 78.697486][ T4852] loop4: detected capacity change from 0 to 128 [ 78.731765][ T4855] bridge0: entered promiscuous mode [ 78.737211][ T4855] macvtap1: entered allmulticast mode [ 78.742773][ T4855] bridge0: entered allmulticast mode [ 78.752765][ T4855] bridge0: port 1(macvtap1) entered blocking state [ 78.759401][ T4855] bridge0: port 1(macvtap1) entered disabled state [ 78.776224][ T4855] bridge0: left allmulticast mode [ 78.781617][ T4855] bridge0: left promiscuous mode [ 79.064707][ T4867] netlink: 5 bytes leftover after parsing attributes in process `syz.4.314'. [ 79.077173][ T4867] 0{X: renamed from gretap0 [ 79.083994][ T4867] 0{X: entered allmulticast mode [ 79.084981][ T4865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.310'. [ 79.090162][ T4867] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 79.125166][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.134047][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.196955][ T4877] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.196955][ T4877] program syz.4.316 not setting count and/or reply_len properly [ 79.223672][ T4884] netlink: zone id is out of range [ 79.228889][ T4884] netlink: zone id is out of range [ 79.234146][ T4884] netlink: zone id is out of range [ 79.239266][ T4884] netlink: zone id is out of range [ 79.244494][ T4884] netlink: zone id is out of range [ 79.249599][ T4884] netlink: zone id is out of range [ 79.254716][ T4884] netlink: zone id is out of range [ 79.259811][ T4884] netlink: zone id is out of range [ 79.264947][ T4884] netlink: zone id is out of range [ 79.278402][ T4887] loop4: detected capacity change from 0 to 512 [ 79.294182][ T4887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.307324][ T4887] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.332142][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.383928][ T4899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 79.408071][ T4901] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.416535][ T4880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 79.426817][ T4880] netlink: 'syz.3.317': attribute type 7 has an invalid length. [ 79.434574][ T4880] netlink: 'syz.3.317': attribute type 8 has an invalid length. [ 79.505886][ T4905] random: crng reseeded on system resumption [ 79.516132][ T4911] netlink: 'syz.3.324': attribute type 7 has an invalid length. [ 79.527106][ T4911] serio: Serial port ptm0 [ 80.323848][ T4922] lo speed is unknown, defaulting to 1000 [ 80.347973][ T4924] lo speed is unknown, defaulting to 1000 [ 80.359608][ T4928] loop2: detected capacity change from 0 to 764 [ 80.392485][ T4928] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.413571][ T4933] loop3: detected capacity change from 0 to 512 [ 80.431814][ T4928] Symlink component flag not implemented [ 80.437538][ T4928] Symlink component flag not implemented (7) [ 80.466605][ T4930] lo speed is unknown, defaulting to 1000 [ 80.512561][ T4933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.541255][ T4933] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.626885][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.693020][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.725516][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.810688][ T4942] loop4: detected capacity change from 0 to 512 [ 80.845300][ T4942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.931660][ T4954] __nla_validate_parse: 5 callbacks suppressed [ 80.931674][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 80.946865][ T4954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'. [ 80.955823][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 80.964850][ T4954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'. [ 80.966855][ T4942] EXT4-fs (loop4): 1 truncate cleaned up [ 81.003426][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.610173][ T4973] loop2: detected capacity change from 0 to 512 [ 81.759415][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 81.759429][ T29] audit: type=1400 audit(1755631309.500:2065): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.849586][ T4973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.862910][ T4973] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.875052][ T29] audit: type=1400 audit(1755631309.620:2066): avc: denied { add_name } for pid=4972 comm="syz.2.342" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.895764][ T29] audit: type=1400 audit(1755631309.620:2067): avc: denied { create } for pid=4972 comm="syz.2.342" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.916052][ T29] audit: type=1400 audit(1755631309.620:2068): avc: denied { read } for pid=4972 comm="syz.2.342" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.938112][ T29] audit: type=1400 audit(1755631309.620:2069): avc: denied { open } for pid=4972 comm="syz.2.342" path="/64/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.040175][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.052078][ T29] audit: type=1400 audit(1755631309.780:2070): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 82.092345][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.094283][ T29] audit: type=1400 audit(1755631309.800:2071): avc: denied { lock } for pid=4972 comm="syz.2.342" path="/64/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.124580][ T29] audit: type=1400 audit(1755631309.800:2072): avc: denied { setattr } for pid=4972 comm="syz.2.342" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.147129][ T29] audit: type=1326 audit(1755631309.840:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 82.170663][ T29] audit: type=1326 audit(1755631309.840:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 82.171207][ T4983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.346'. [ 82.662927][ T5003] lo speed is unknown, defaulting to 1000 [ 82.900990][ T4994] loop3: detected capacity change from 0 to 512 [ 83.385512][ T4994] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.348: error while reading EA inode 32 err=-116 [ 83.429188][ T4994] EXT4-fs (loop3): Remounting filesystem read-only [ 83.435779][ T4994] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 83.464849][ T5021] tmpfs: Bad value for 'mpol' [ 83.474496][ T5021] serio: Serial port ttyS3 [ 83.491959][ T4994] EXT4-fs (loop3): 1 orphan inode deleted [ 83.502444][ T4994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.531214][ T4994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.910740][ T5031] loop3: detected capacity change from 0 to 512 [ 83.994588][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.007299][ T5031] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.112227][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.204945][ T5038] loop3: detected capacity change from 0 to 512 [ 84.275040][ T5038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.291352][ T5038] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.378150][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.499974][ T5011] syz.4.351 (5011) used greatest stack depth: 7536 bytes left [ 84.687241][ T5058] lo speed is unknown, defaulting to 1000 [ 84.875009][ T5060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 85.362149][ T5090] loop2: detected capacity change from 0 to 128 [ 85.389744][ T5090] syz.2.366: attempt to access beyond end of device [ 85.389744][ T5090] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 85.421299][ T5090] syz.2.366: attempt to access beyond end of device [ 85.421299][ T5090] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 85.447316][ T5090] syz.2.366: attempt to access beyond end of device [ 85.447316][ T5090] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 85.497562][ T5103] syz.2.366: attempt to access beyond end of device [ 85.497562][ T5103] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 85.534351][ T5090] syz.2.366: attempt to access beyond end of device [ 85.534351][ T5090] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 85.582668][ T5103] syz.2.366: attempt to access beyond end of device [ 85.582668][ T5103] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 85.633249][ T5090] syz.2.366: attempt to access beyond end of device [ 85.633249][ T5090] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 85.662613][ T5103] syz.2.366: attempt to access beyond end of device [ 85.662613][ T5103] loop2: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 85.694063][ T5090] syz.2.366: attempt to access beyond end of device [ 85.694063][ T5090] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 85.731440][ T5103] syz.2.366: attempt to access beyond end of device [ 85.731440][ T5103] loop2: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 86.221473][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 86.230371][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 86.422809][ T5077] syz.4.362 (5077) used greatest stack depth: 7304 bytes left [ 86.769540][ T5173] loop2: detected capacity change from 0 to 512 [ 86.779565][ T5173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.832338][ T5173] EXT4-fs (loop2): 1 truncate cleaned up [ 86.838389][ T5173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.900334][ T5173] netlink: 260 bytes leftover after parsing attributes in process `syz.2.373'. [ 86.909444][ T5173] netlink: 260 bytes leftover after parsing attributes in process `syz.2.373'. [ 86.985664][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 86.985679][ T29] audit: type=1400 audit(1755631314.730:2215): avc: denied { read write } for pid=5172 comm="syz.2.373" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.999458][ T5181] loop3: detected capacity change from 0 to 512 [ 87.015989][ T29] audit: type=1400 audit(1755631314.730:2216): avc: denied { open } for pid=5172 comm="syz.2.373" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.043103][ T5181] EXT4-fs: Ignoring removed nobh option [ 87.051838][ T29] audit: type=1400 audit(1755631314.740:2217): avc: denied { setopt } for pid=5167 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.053526][ T5173] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 87.053526][ T5173] program syz.2.373 not setting count and/or reply_len properly [ 87.071279][ T29] audit: type=1400 audit(1755631314.740:2218): avc: denied { write } for pid=5167 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.071336][ T29] audit: type=1400 audit(1755631314.740:2219): avc: denied { connect } for pid=5167 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.127196][ T29] audit: type=1400 audit(1755631314.740:2220): avc: denied { name_connect } for pid=5167 comm="syz.3.370" dest=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.149214][ T29] audit: type=1400 audit(1755631314.740:2221): avc: denied { name_connect } for pid=5167 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 87.186716][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.370: corrupted inode contents [ 87.227936][ T5181] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.370: mark_inode_dirty error [ 87.247033][ T29] audit: type=1326 audit(1755631314.990:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5188 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 87.254112][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.370: corrupted inode contents [ 87.270500][ T29] audit: type=1326 audit(1755631314.990:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5188 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f613ebe9 code=0x7ffc0000 [ 87.287912][ T5181] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.370: mark_inode_dirty error [ 87.321979][ T5187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 87.333756][ T29] audit: type=1400 audit(1755631315.060:2224): avc: denied { read write } for pid=5172 comm="syz.2.373" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.360382][ T5181] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.370: Failed to acquire dquot type 0 [ 87.398994][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.370: corrupted inode contents [ 87.412302][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.426030][ T5181] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.370: mark_inode_dirty error [ 87.454628][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.370: corrupted inode contents [ 87.486848][ T5189] loop4: detected capacity change from 0 to 2048 [ 87.498533][ T5193] syzkaller0: entered promiscuous mode [ 87.504121][ T5193] syzkaller0: entered allmulticast mode [ 87.572902][ T5181] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.370: mark_inode_dirty error [ 87.652963][ T5189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 87.665708][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.370: corrupted inode contents [ 87.682972][ T5181] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 87.693057][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.370: corrupted inode contents [ 87.705681][ T5181] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.370: mark_inode_dirty error [ 87.717948][ T5181] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 87.727768][ T5181] EXT4-fs (loop3): 1 truncate cleaned up [ 87.735397][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.748547][ T5181] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.090551][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 88.199324][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.584660][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 88.806755][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.547562][ T5250] 9pnet_fd: Insufficient options for proto=fd [ 89.744625][ T5261] loop3: detected capacity change from 0 to 512 [ 89.756192][ T5263] bridge1: entered promiscuous mode [ 89.951733][ T5263] netlink: 256 bytes leftover after parsing attributes in process `syz.2.390'. [ 90.152154][ T5261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.203974][ T5261] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.303912][ T5261] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.396: corrupted inode contents [ 90.347878][ T5261] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.396: mark_inode_dirty error [ 90.392495][ T5261] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.396: corrupted inode contents [ 90.479989][ T5261] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.396: mark_inode_dirty error [ 90.655227][ T5275] loop4: detected capacity change from 0 to 1024 [ 90.666632][ T5275] EXT4-fs: Ignoring removed bh option [ 90.687329][ T5275] EXT4-fs: inline encryption not supported [ 90.693745][ T5275] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.754717][ T5275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.763234][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.777260][ T5275] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.398: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.792129][ T5275] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.398: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.807119][ T5275] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.398: Failed to acquire dquot type 0 [ 90.819780][ T5275] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 90.829862][ T5275] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.398: mark_inode_dirty error [ 90.883336][ T5281] lo speed is unknown, defaulting to 1000 [ 91.139067][ T5275] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.176833][ T5275] EXT4-fs (loop4): 1 orphan inode deleted [ 91.182948][ T5275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.206902][ T5155] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.221878][ T5155] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 91.234375][ T5275] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.398: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.554240][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.628411][ T5293] loop4: detected capacity change from 0 to 512 [ 91.631964][ T5294] tipc: Started in network mode [ 91.639661][ T5294] tipc: Node identity 522d1bcb4372, cluster identity 4711 [ 91.646990][ T5294] tipc: Enabled bearer , priority 0 [ 91.657318][ T5294] syzkaller0: entered promiscuous mode [ 91.662800][ T5294] syzkaller0: entered allmulticast mode [ 91.671631][ T5293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.686362][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 91.695276][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 91.729976][ T5293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.752491][ T5290] tipc: Resetting bearer [ 91.769292][ T5290] tipc: Disabling bearer [ 91.776046][ T5293] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.834993][ T5305] loop3: detected capacity change from 0 to 1024 [ 91.865964][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.878175][ T5305] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.038713][ T5317] netlink: 'syz.1.406': attribute type 13 has an invalid length. [ 92.133112][ T5328] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 92.165135][ T5322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.406'. [ 92.308905][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.331607][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.340212][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f95fc00: rx timeout, send abort [ 92.348278][ T29] kauditd_printk_skb: 789 callbacks suppressed [ 92.348291][ T29] audit: type=1400 audit(1755631319.886:3008): avc: denied { read } for pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 92.364600][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.376621][ T29] audit: type=1400 audit(1755631319.886:3009): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.385186][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.406588][ T29] audit: type=1400 audit(1755631319.886:3010): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.406622][ T29] audit: type=1400 audit(1755631319.886:3011): avc: denied { add_name } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.406641][ T29] audit: type=1400 audit(1755631319.886:3012): avc: denied { create } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.478502][ T29] audit: type=1400 audit(1755631319.886:3013): avc: denied { append open } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.479639][ T5336] loop2: detected capacity change from 0 to 512 [ 92.501708][ T29] audit: type=1400 audit(1755631319.886:3014): avc: denied { getattr } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.526582][ T29] audit: type=1326 audit(1755631319.997:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e5a6ebe9 code=0x7ffc0000 [ 92.554523][ T29] audit: type=1326 audit(1755631319.997:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e5a6ebe9 code=0x7ffc0000 [ 92.559529][ T5336] EXT4-fs: Ignoring removed oldalloc option [ 92.578071][ T29] audit: type=1326 audit(1755631319.997:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95e5a6ebe9 code=0x7ffc0000 [ 92.583990][ T5336] EXT4-fs: inline encryption not supported [ 92.584011][ T5336] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.634097][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 92.644930][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.655137][ T5336] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.683379][ T5336] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.407: bg 0: block 64: padding at end of block bitmap is not set [ 92.698945][ T5336] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.407: Failed to acquire dquot type 0 [ 92.710631][ T5336] EXT4-fs (loop2): 1 truncate cleaned up [ 92.717747][ T5336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.881967][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f95f200: rx timeout, send abort [ 92.890279][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f95fc00: abort rx timeout. Force session deactivation [ 92.997784][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.059428][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 93.203522][ T5356] lo speed is unknown, defaulting to 1000 [ 93.431998][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f95f200: abort rx timeout. Force session deactivation [ 93.612032][ T5366] loop3: detected capacity change from 0 to 512 [ 93.625379][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.767837][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.781795][ T5366] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.781264][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.811318][ T5373] pim6reg1: entered promiscuous mode [ 94.848672][ T5384] Illegal XDP return value 996380800 on prog (id 306) dev N/A, expect packet loss! [ 94.898833][ T5380] syzkaller0: entered promiscuous mode [ 94.904383][ T5380] syzkaller0: entered allmulticast mode [ 94.910620][ T5382] bridge0: entered allmulticast mode [ 94.916509][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 94.929797][ T5384] loop9: detected capacity change from 0 to 7 [ 94.936754][ T5384] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.944738][ T5384] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.952732][ T5384] loop9: unable to read partition table [ 94.960427][ T5384] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 94.960427][ T5384] ) failed (rc=-5) [ 94.975752][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.986267][ T5382] bridge0 (unregistering): left allmulticast mode [ 94.989770][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.000922][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.009196][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.017327][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.061923][ T5388] program syz.2.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.077178][ T5380] IPVS: Error connecting to the multicast addr [ 95.083494][ T5387] tipc: New replicast peer: 255.255.255.255 [ 95.089650][ T5387] tipc: Enabled bearer , priority 10 [ 95.098958][ T5384] lo speed is unknown, defaulting to 1000 [ 95.144657][ T5393] loop4: detected capacity change from 0 to 512 [ 95.186644][ T5393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.226522][ T5399] lo speed is unknown, defaulting to 1000 [ 95.244095][ T5393] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.244126][ T5396] loop3: detected capacity change from 0 to 512 [ 95.284101][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.338504][ T5396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.340318][ T5403] loop4: detected capacity change from 0 to 512 [ 95.362072][ T5396] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.369158][ T5403] EXT4-fs: Ignoring removed oldalloc option [ 95.391161][ T5403] EXT4-fs (loop4): 1 truncate cleaned up [ 95.397175][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.424987][ T5396] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.535260][ T5396] random: crng reseeded on system resumption [ 95.545059][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.425'. [ 95.572174][ T5396] Restarting kernel threads ... [ 95.585723][ T5396] Done restarting kernel threads. [ 95.949999][ T5439] netlink: 'syz.3.429': attribute type 21 has an invalid length. [ 95.957801][ T5439] netlink: 156 bytes leftover after parsing attributes in process `syz.3.429'. [ 95.974790][ T5441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 96.411690][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.432346][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.440294][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.448587][ T4256] tipc: Node number set to 291445707 [ 96.454280][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.618421][ T5461] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 96.619438][ T5465] loop2: detected capacity change from 0 to 128 [ 96.626228][ T5461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 96.651642][ T5463] lo speed is unknown, defaulting to 1000 [ 96.661243][ T5461] team0: Port device geneve1 added [ 96.757547][ T5467] netlink: '+}[@': attribute type 13 has an invalid length. [ 96.864783][ T5155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.886044][ T5155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.953596][ T5155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.971900][ T5155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.749603][ T5495] __nla_validate_parse: 1 callbacks suppressed [ 97.749619][ T5495] netlink: 56 bytes leftover after parsing attributes in process `syz.1.446'. [ 97.765653][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 97.776786][ T29] kauditd_printk_skb: 1046 callbacks suppressed [ 97.776800][ T29] audit: type=1400 audit(1755631324.907:4062): avc: denied { create } for pid=5491 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.804328][ T29] audit: type=1400 audit(1755631324.916:4063): avc: denied { write } for pid=5491 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.824088][ T29] audit: type=1400 audit(1755631324.926:4064): avc: denied { read } for pid=5499 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.867247][ T5508] netlink: 248 bytes leftover after parsing attributes in process `syz.0.452'. [ 97.876474][ T5509] loop2: detected capacity change from 0 to 512 [ 97.876514][ T29] audit: type=1400 audit(1755631324.981:4065): avc: denied { nlmsg_read } for pid=5507 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.909489][ T29] audit: type=1400 audit(1755631325.018:4066): avc: denied { read write } for pid=5507 comm="syz.0.452" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.932953][ T29] audit: type=1400 audit(1755631325.018:4067): avc: denied { open } for pid=5507 comm="syz.0.452" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.969481][ T5509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.011078][ T5509] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.041154][ T5509] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5 [ 98.122324][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.142640][ T5521] loop2: detected capacity change from 0 to 128 [ 98.154606][ T5521] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.190471][ T5521] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.306493][ T29] audit: type=1400 audit(1755631325.369:4068): avc: denied { read write open } for pid=5520 comm="syz.2.456" path="/84/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.330265][ T29] audit: type=1400 audit(1755631325.369:4069): avc: denied { setattr } for pid=5520 comm="syz.2.456" path="/84/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.353227][ T29] audit: type=1400 audit(1755631325.378:4070): avc: denied { ioctl } for pid=5520 comm="syz.2.456" path="/84/file1/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.414908][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.626773][ T5541] loop2: detected capacity change from 0 to 1024 [ 98.916658][ T5541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.929184][ T5546] loop4: detected capacity change from 0 to 512 [ 99.225430][ T5541] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.421799][ T5546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.435379][ T5546] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.719624][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 100.271349][ T5578] lo speed is unknown, defaulting to 1000 [ 100.380750][ T5579] capability: warning: `syz.1.470' uses 32-bit capabilities (legacy support in use) [ 100.568056][ T5581] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.918401][ T5581] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.068292][ T5581] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.448741][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 101.459355][ T5581] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.540714][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.551917][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.565405][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.576459][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.589356][ T5615] loop4: detected capacity change from 0 to 128 [ 101.607736][ T5607] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.480'. [ 101.631185][ T5618] pim6reg1: entered allmulticast mode [ 102.077191][ T5615] ================================================================== [ 102.085382][ T5615] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 102.093448][ T5615] [ 102.095795][ T5615] write to 0xffff888116a3c528 of 8 bytes by task 5607 on cpu 1: [ 102.103421][ T5615] filemap_splice_read+0x4f4/0x740 [ 102.108547][ T5615] splice_direct_to_actor+0x26f/0x680 [ 102.113918][ T5615] do_splice_direct+0xda/0x150 [ 102.118677][ T5615] do_sendfile+0x380/0x650 [ 102.123101][ T5615] __x64_sys_sendfile64+0x105/0x150 [ 102.128304][ T5615] x64_sys_call+0x2bb0/0x2ff0 [ 102.132993][ T5615] do_syscall_64+0xd2/0x200 [ 102.137581][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.143569][ T5615] [ 102.145883][ T5615] write to 0xffff888116a3c528 of 8 bytes by task 5615 on cpu 0: [ 102.153501][ T5615] filemap_splice_read+0x4f4/0x740 [ 102.158606][ T5615] splice_direct_to_actor+0x26f/0x680 [ 102.164234][ T5615] do_splice_direct+0xda/0x150 [ 102.168994][ T5615] do_sendfile+0x380/0x650 [ 102.173420][ T5615] __x64_sys_sendfile64+0x105/0x150 [ 102.178666][ T5615] x64_sys_call+0x2bb0/0x2ff0 [ 102.183344][ T5615] do_syscall_64+0xd2/0x200 [ 102.187879][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.193854][ T5615] [ 102.196174][ T5615] value changed: 0x00000000000006f4 -> 0x00000000000006f5 [ 102.203273][ T5615] [ 102.205594][ T5615] Reported by Kernel Concurrency Sanitizer on: [ 102.211749][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.221392][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.231530][ T5615] ================================================================== [ 102.440814][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 102.449902][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 102.498979][ T5627] netlink: 176 bytes leftover after parsing attributes in process `syz.2.484'. [ 102.535821][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'.