last executing test programs: 2m39.45516099s ago: executing program 2 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m39.403538471s ago: executing program 2 (id=88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tcp_cong_state_set\x00', r1, 0x0, 0xffffffff}, 0x18) shutdown(r0, 0x1) 2m39.380188071s ago: executing program 2 (id=89): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 2m39.357078201s ago: executing program 2 (id=90): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x145142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 2m39.189571273s ago: executing program 2 (id=92): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x4}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) 2m38.67433241s ago: executing program 2 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m38.660997471s ago: executing program 32 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m35.260857846s ago: executing program 0 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) 2m34.897737721s ago: executing program 0 (id=186): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000280), 0x45}, 0x0) 2m34.792470672s ago: executing program 0 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 2m34.768209463s ago: executing program 0 (id=190): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x145142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 2m34.491484096s ago: executing program 4 (id=195): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 2m34.489545707s ago: executing program 0 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xffa8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m34.20476999s ago: executing program 4 (id=200): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000280), 0x45}, 0x0) 2m34.057520773s ago: executing program 4 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 2m33.965621294s ago: executing program 4 (id=205): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x145142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 2m33.819099615s ago: executing program 0 (id=206): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 2m33.818878275s ago: executing program 33 (id=206): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 2m33.645658308s ago: executing program 4 (id=210): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 2m32.703519301s ago: executing program 4 (id=228): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) socket$pppl2tp(0x18, 0x1, 0x1) wait4(r0, 0x0, 0x40000000, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m32.680447991s ago: executing program 34 (id=228): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) socket$pppl2tp(0x18, 0x1, 0x1) wait4(r0, 0x0, 0x40000000, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m18.046989407s ago: executing program 1 (id=605): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='g', 0xffffffffffffffdf, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) shutdown(r0, 0x1) 2m18.030123747s ago: executing program 1 (id=606): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m17.951363999s ago: executing program 1 (id=608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x49cf, 0xe8dc, 0x8, 0x0, 0x0) 2m17.83897005s ago: executing program 1 (id=612): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$eJzs3cuLXFUaAPCvqtLP9EweMwxJBiaBDGQepKsfDOmemcUMDMzMIjBMwI1CbLsrbUx1V9NVHdNNFh3dZeFCFAVx4d6/wI1ZGQVxrXtxIRGNLagglNxbVUm/KpaxUyV9fz+o9Dn33NR3Thff4da59/YNILNOJf/kIkYi4oOIONSobt3hVOPHxt3rs8krF/X6hc9z6X5JvbVr6/8djIj1iBiMiP//O+Kp3M641dW1KzPlcmm5WS/WFpaK1dW1s5cXZuZL86XF8alz09NTY5MT03s21psvPHPz/Fv/7X/z6+fv3H7xnbeTbo002zaPYy81ht4XRzZtOxARf38UwXqg0BzPUK87wkNJPr9fRcTpNP8PRSH9NIEsqNfr9e/qA+2a1+vAvpVPj4Fz+dGIaJTz/6qPNo7hfx3D+XKlWvvzpcrK4lzjWPlw9OUvXS6XxprfFQ5HXy6pj6fl+/WJbfXJiPQY+KXCUFofna2U57o71QHbHNyW/18V8vnRpBJ/6nXXgG7wlR+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/IpP+dP5+86q373+eurq5cqVw9O5fMCQsrs6OzleWl0flKZT69Z2fhh96vXKksjf8lVq4Va6VqrVhdXbu4UFlZrF1M7+u/WOrryqiAThw5eeujXESs/3UofSX6m21yFfa3ej0Xvb4HGeiNQq8nIKBnLP1BdvmOD+zyJ3q3GGzXsLT3fQG6I9/rDgA9c+a483+QVdb/Ibus/0N2OcYHrP9D9lj/h+wa2fn8r/T5P7/Y9OyusYj4ZUR8WOgbaD3rC9gP8p/mmsf/Zw79fmR7a3/um/QUQX9EPPvahVeuzdRqy+PJ9i/uba+92tw+0Yv+A51q5WkrjwGA7Nq4e3229epm3M/+2bgIYWf8A821ycH0HOXwRm7LtQq5Pbp2Yf1GRBzbLX6u+bzzxpmP4Y3CjvhHmz9zjbdI+3sgfW56d+If3xT/d5vin/jJvxXIhlvJ/DO2W/7l05yOe/m3df4Z2aNrJ9rPf/l781+hzfx3ssMYT7/+3Cdt49+IOLFr/Fa8wTTW9vhJ3850GP/OE4/9pl1b/Y3G++wWvyUpFWsLS8Xq6trZ9O/IzZcWx6fOTU9PjU1OTBfTNepia6V6p78de//2g8Y/3CZ+u/H/o9mnP3Y4/m9/+97jpx4Q/w+nd//8j7aJnxj6EU/o/3Li4yfbtSXx59qMP78z/rvD0WqNmOwwfvXl/wx0uCsA0AXV1bUrM+VyaVlBQeEhCgM/j27seaHXMxPwqN1P+l73BAAAAAAAAAAAAOhUNy4n7vUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g+8DAAD//3bC1tg=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, 0x0) 2m17.487944065s ago: executing program 1 (id=616): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 2m17.343089017s ago: executing program 1 (id=623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2m17.342930626s ago: executing program 35 (id=623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 1m58.795911996s ago: executing program 8 (id=1071): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000900)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000008c0), &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x80) 1m58.737399226s ago: executing program 8 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 1m58.736841777s ago: executing program 8 (id=1075): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x40002000}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = gettid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m57.452960474s ago: executing program 8 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='securityfs\x00', 0x10000, 0x0) 1m57.342757035s ago: executing program 8 (id=1092): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x82400, 0x184) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) 1m56.831108702s ago: executing program 8 (id=1104): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m56.735481633s ago: executing program 36 (id=1104): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 5.782497462s ago: executing program 9 (id=2344): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) 5.409221028s ago: executing program 9 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000e22000/0x14000)=nil, 0x14000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x48040) kexec_load(0x4, 0xa, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110, 0xe}}], 0x18}, 0x20044800) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) 3.955973637s ago: executing program 5 (id=2348): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 3.514577553s ago: executing program 5 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) inotify_init1(0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x19, &(0x7f00000002c0)={0x14, 0x100000, 0xfffffff4}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 3.504223953s ago: executing program 3 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) unshare(0x28020480) syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020701010000000000000000040000030c0007800800014000007ffbb847cca7d95177de4452b4191ad455bda27a171ca904d9b0f49395faa60b72bb9dc1daa53708be48dd51f1eb7fcabd1e1ca6f5b09dd2982805c3d84f079d5a767600a8a955325eb93d1bf427db6dfbb16a5065e6"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40448c2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 3.413389184s ago: executing program 6 (id=2355): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.376954995s ago: executing program 3 (id=2358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x214, &(0x7f0000000a00)="$eJzs3cFuElEUANBLS8tgXHRnYmIyxoWuGvULakxNjCQmNSx010RWsIINsGk/w1/wv/wA0xWbZgzOTEFKKRIBredsuMx9d3iPBwMbLlnkvj34EklSiZ2jOIpRJQ5iJ0rnAQDcJaMsi+9Z7verq+uYEgCwZkt8/l9ueEoAwJp9+Pjp3atG4/gkTZOIi/N+s9/Mb/P8m7eN4+fpTweTqot+v7l7lX+Rzn53GOf34l6Rf5nXp1fp/Yho7sezJ3l+nHv9vpH+Wl+Lz2teOwAAAAAAAAAAAAAAAAAAAAAAbMujSEtz+/scHs7m60U+vzfVH2imf081HpbtgSftgbKzTSwKAAAAAAAAAAAAAAAAAAAA/jG9wbB92um0upOgFhHTR6pzxtwcVIoTLzV4+8FOfbXyerHMqdRllrutvFI8RetdYH3+5i4TRPVv2Z1Vg/RPnbBWbvP1VD0qC8qzbBzMfxeUbTFuLN+PiMUTe3qy6rpG41fo18fd3iCyhYMn14jaxq5GAAAAAAAAAAAAAAAAAADwf5v61fc1ye42ZgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm9cbDMt/+R+2TzudVrc3GLZPk+LY5Mi84Cwi7t8yptXtlY+1F8l2FgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd9yMAAP//lJodvA==") unlink(&(0x7f0000000080)='./file0\x00') readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/241, 0xf1}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) 3.336149266s ago: executing program 5 (id=2359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syslog(0x2, &(0x7f0000000180)=""/85, 0x55) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x24082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50a5, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x45bc, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.323928086s ago: executing program 6 (id=2360): creat(&(0x7f0000000000)='./file0\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x67, 0x0, 0x4, 0x0, 0x0, 0x17, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, @perf_config_ext={0x2, 0x5}, 0x1048, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r4, &(0x7f0000000dc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f00000008c0)=""/208, 0xd0}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000a00)=""/69, 0x45}, {&(0x7f0000000a80)=""/207, 0xcf}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000000d40)=""/104, 0x68}], 0x9, 0x3, 0x40) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000000c00080014000380040004000800020000000000040001000c00018008000100", @ANYRES32=r10, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000300008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd000000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039e429bd7000eaffffdf000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028006000e000010000008000300ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) sendto$inet(r1, &(0x7f00000002c0)="cd", 0xff8a, 0x880, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x3df002) 3.143775948s ago: executing program 6 (id=2361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c40)=""/209, 0xd1}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004080)=""/91, 0x5b}], 0x1, &(0x7f00000044c0)=""/113, 0x71}, 0x7bb19c94}], 0x2, 0x40002122, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0xffffff7a, &(0x7f0000000300), 0x100000000000005e}, 0x44090) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') syz_io_uring_setup(0x645c, &(0x7f0000000240)={0x0, 0xb532, 0x8, 0x0, 0x246}, &(0x7f0000000300), &(0x7f00000003c0)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000040)={0xa, 0x4}) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) 2.905402381s ago: executing program 9 (id=2362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_submit(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.904789951s ago: executing program 5 (id=2363): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.793322463s ago: executing program 5 (id=2365): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002023008000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000d4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.738514077s ago: executing program 9 (id=2366): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1.734211237s ago: executing program 3 (id=2367): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00'}) bpf$ITER_CREATE(0x21, 0x0, 0x0) clock_gettime(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) setresuid(0xee00, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[]) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x9, 0x17, 0x7, 0x8}]}) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) 1.730198627s ago: executing program 6 (id=2376): syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004af5003c00000000e04a232cac1e0001ac14143444140903000000000000faffab1414aa0000020000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') setuid(0xee00) getdents64(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000600)={0x4, {{0xa, 0x4e24, 0x3, @loopback}}}, 0x88) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xb, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x10, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 1.549232809s ago: executing program 3 (id=2368): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 1.53635815s ago: executing program 6 (id=2380): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRESOCT, @ANYBLOB="d6b8ed3ffa4c07a901980d85035853af922c5e497bdf88ccfc412807ead4a823b3381d6accbfa788cd901d10faa1e134cede0067ca6dcad7efa2e6144c3c8b2262f398e0a41f7f8bebccc621552c86611a3067339725f943a13a39a3fc172cb3c7bf5b", @ANYRES32=0x0], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$nvram(0xffffffffffffff9c, 0x0, 0x90802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"5b88d43a033ae6ca1ca30ff60d0762c3", 0x0, r2, {0x7, 0x5}, {0x5, 0xfffffff9}, 0x81, [0x7fffffffffffffff, 0x8, 0x8, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xd0, 0x10000, 0x9, 0x2, 0x40, 0x6, 0x827a, 0xdd, 0x9]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 1.454277871s ago: executing program 7 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x48800) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408c8, 0xe) close_range(r4, 0xffffffffffffffff, 0x0) 1.365555742s ago: executing program 7 (id=2371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x82a42, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[], 0x0) 1.330623812s ago: executing program 3 (id=2372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) 1.193599314s ago: executing program 9 (id=2373): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") 1.193071904s ago: executing program 7 (id=2374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000003060500000000000000f100000000064500010007000000333431a7178530d0b04c4560972c727a2a6411d27b16a6074d0685a141e306e61fea0bd9227f69aa5b0ce00520d55224428ab6d7bd590378b87ef583e669552211ed79435ef7fe9adb2e264d30eb95b9a20c1a22cce184913416f2d0a0aa61459c7e756de0d7e2fa1acf8647881fd8bf129284291a61bfcda0b7260b38b588ba68e81f622a94a0dd4315ae371acee797f68869093a807395671273acdd1f2b15c2c3cb"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) eventfd(0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000002340)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 824.993499ms ago: executing program 5 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140), 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) 597.728082ms ago: executing program 6 (id=2377): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_submit(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 595.802392ms ago: executing program 7 (id=2389): rseq(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x30000000, 0x3) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30010068}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="68000000e2daf55a2ac7e06afa74d2c75e82859f3865aed800000000000000a63f492107080003400000000008000240000000040a000000006f72743000000007000100275e000018000100e47b29253d2d2d252f5d2d27212d295b2c5d5e0005000100000000000500010000000300000000000000000141585d1e2e7b46ab7268807fdd1d42302e1afd349f98f975a5ef813f84b335a5a3890d538054a656c23c51e8e2e4899cf10732b16bc69a06e443494c850709c92a4e547116"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000004500)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES64=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kvm_dirty_ring_exit\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r9 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x5cf, &(0x7f0000001580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180f000009000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000400)=""/153, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 264.215266ms ago: executing program 9 (id=2379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x4, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x9, 0x100}, 0x3323, 0x5, 0x3, 0x5, 0xc, 0x800001, 0xfff7, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(0x0, &(0x7f0000000640)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29685, 0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0, 0x10, 0xb, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=2383): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) setgroups(0x0, 0x0) kernel console output (not intermixed with test programs): p7: detected capacity change from 0 to 256 [ 117.752109][ T29] audit: type=1326 audit(1749463915.099:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 117.791490][ T8614] sd 0:0:1:0: device reset [ 117.813918][ T29] audit: type=1326 audit(1749463915.139:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6ff9dd290 code=0x7ffc0000 [ 117.837545][ T29] audit: type=1326 audit(1749463915.139:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 117.861318][ T29] audit: type=1326 audit(1749463915.139:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 117.869159][ T6716] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.884806][ T29] audit: type=1326 audit(1749463915.139:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 117.895249][ T6716] Quota error (device loop5): write_blk: dquota write failed [ 117.918708][ T29] audit: type=1326 audit(1749463915.139:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 117.925953][ T6716] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 118.047747][ T8623] loop5: detected capacity change from 0 to 1024 [ 118.065952][ T8623] EXT4-fs: Ignoring removed bh option [ 118.071551][ T8623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.107037][ T8623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.142643][ T29] audit: type=1326 audit(1749463915.409:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 118.902355][ T8668] loop6: detected capacity change from 0 to 512 [ 118.922164][ T8668] EXT4-fs (loop6): 1 orphan inode deleted [ 118.928453][ T8668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.941371][ T6716] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1 [ 118.989779][ T8668] ext4 filesystem being mounted at /syzcgroup/cpu/syz6/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 119.025239][ T8668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.102665][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.156104][ T8690] loop5: detected capacity change from 0 to 1024 [ 119.171577][ T8690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.192467][ T8690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.321915][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.374041][ T8708] syzkaller0: tun_chr_ioctl cmd 35108 [ 119.562912][ T8735] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.589510][ T8735] smc: net device bond0 erased user defined pnetid SYZ2 [ 120.008338][ T8782] loop6: detected capacity change from 0 to 1024 [ 120.016312][ T8782] EXT4-fs: Ignoring removed bh option [ 120.021818][ T8782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.045977][ T8782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.235968][ T8796] netlink: 'syz.3.1752': attribute type 3 has an invalid length. [ 120.756660][ T8806] delete_channel: no stack [ 120.761304][ T8806] delete_channel: no stack [ 120.935903][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.964807][ T8815] loop6: detected capacity change from 0 to 2048 [ 120.973341][ T8815] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.991900][ T8815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.013988][ T8815] random: crng reseeded on system resumption [ 121.679672][ T8829] loop7: detected capacity change from 0 to 2048 [ 121.702253][ T8829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.805068][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.910884][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.945751][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.025619][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.829103][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 122.829121][ T29] audit: type=1326 audit(1749463920.179:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.863630][ T29] audit: type=1326 audit(1749463920.209:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.887304][ T29] audit: type=1326 audit(1749463920.209:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.910888][ T29] audit: type=1326 audit(1749463920.209:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.934516][ T29] audit: type=1326 audit(1749463920.209:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.958034][ T29] audit: type=1326 audit(1749463920.209:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 122.981531][ T29] audit: type=1326 audit(1749463920.209:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 123.004990][ T29] audit: type=1326 audit(1749463920.209:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 123.028522][ T29] audit: type=1326 audit(1749463920.209:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 123.052164][ T29] audit: type=1326 audit(1749463920.209:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 123.091830][ T8990] loop5: detected capacity change from 0 to 128 [ 123.100384][ T8990] FAT-fs (loop5): error, invalid access to FAT (entry 0x0ffffff6) [ 123.267764][ T8998] netlink: 'syz.9.1784': attribute type 10 has an invalid length. [ 123.278370][ T8998] batman_adv: batadv0: Adding interface: team0 [ 123.284716][ T8998] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.310035][ T8998] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 123.320294][ T9004] netlink: 'syz.9.1784': attribute type 10 has an invalid length. [ 123.328200][ T9004] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1784'. [ 123.337274][ T9004] team0: entered promiscuous mode [ 123.342513][ T9004] team_slave_0: entered promiscuous mode [ 123.348284][ T9004] team_slave_1: entered promiscuous mode [ 123.354891][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.362022][ T9004] batman_adv: batadv0: Interface activated: team0 [ 123.368503][ T9004] batman_adv: batadv0: Interface deactivated: team0 [ 123.375187][ T9004] batman_adv: batadv0: Removing interface: team0 [ 124.728399][ T9062] loop6: detected capacity change from 0 to 128 [ 124.763260][ T9062] bio_check_eod: 3 callbacks suppressed [ 124.763280][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.763280][ T9062] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 124.784374][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.784374][ T9062] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 124.798373][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.798373][ T9062] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 124.815585][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.815585][ T9062] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 124.839457][ T9061] loop5: detected capacity change from 0 to 2048 [ 124.844851][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.844851][ T9062] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 124.867341][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.867341][ T9062] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 124.883766][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.883766][ T9062] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 124.897589][ T9061] loop5: p1 < > p4 [ 124.901935][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.901935][ T9062] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 124.915702][ T9061] loop5: p4 size 8388608 extends beyond EOD, truncated [ 124.923080][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.923080][ T9062] loop6: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 124.961708][ T9062] syz.6.1806: attempt to access beyond end of device [ 124.961708][ T9062] loop6: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 125.027584][ T9068] netlink: '+}[@': attribute type 10 has an invalid length. [ 125.154355][ T9077] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 125.265473][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1815'. [ 125.290898][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1815'. [ 125.301401][ T9085] loop5: detected capacity change from 0 to 1024 [ 125.321674][ T9085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.340298][ T9089] loop6: detected capacity change from 0 to 128 [ 125.374566][ T9089] FAT-fs (loop6): bogus number of reserved sectors [ 125.381208][ T9089] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 125.390567][ T9089] FAT-fs (loop6): Can't find a valid FAT filesystem [ 125.411904][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.181698][ T9118] loop5: detected capacity change from 0 to 512 [ 126.195401][ T9118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.212649][ T9118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 126.225152][ T9118] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1826: missing EA_INODE flag [ 126.242230][ T9118] EXT4-fs (loop5): Remounting filesystem read-only [ 126.249335][ T9118] EXT4-fs (loop5): 1 orphan inode deleted [ 126.262297][ T9118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.342851][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.373229][ T9121] loop5: detected capacity change from 0 to 2048 [ 126.396970][ T9121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.560867][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.813162][ T9137] loop5: detected capacity change from 0 to 4096 [ 126.881331][ T9137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.002809][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 128.002823][ T29] audit: type=1326 audit(1749463925.349:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.6.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 128.132745][ T9154] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.139428][ T9154] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 128.147177][ T9154] audit: backlog limit exceeded [ 128.152128][ T9154] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.158685][ T9154] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 128.166404][ T9154] audit: backlog limit exceeded [ 128.181624][ T29] audit: type=1326 audit(1749463925.379:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.6.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 128.205218][ T29] audit: type=1326 audit(1749463925.379:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.6.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 128.228728][ T29] audit: type=1326 audit(1749463925.379:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.6.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 128.287320][ T9160] loop6: detected capacity change from 0 to 128 [ 128.312720][ T9160] FAT-fs (loop6): error, invalid access to FAT (entry 0x0ffffff6) [ 128.519702][ T9168] loop7: detected capacity change from 0 to 256 [ 128.603590][ T9170] loop6: detected capacity change from 0 to 512 [ 128.632303][ T9170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.671742][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.730163][ T9170] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.804072][ T9170] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1844'. [ 128.874781][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.963648][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.060364][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'. [ 129.107834][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'. [ 129.296360][ T9185] dvmrp1: entered allmulticast mode [ 129.342671][ T9185] dvmrp1: left allmulticast mode [ 129.531443][ T9165] syz.3.1842 (9165) used greatest stack depth: 7728 bytes left [ 129.575751][ T3374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.810408][ T3374] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.874253][ T9203] loop5: detected capacity change from 0 to 1024 [ 129.996581][ T9205] loop5: detected capacity change from 0 to 128 [ 130.074611][ T9205] bio_check_eod: 51 callbacks suppressed [ 130.074666][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.074666][ T9205] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 130.121832][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.121832][ T9205] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 130.135325][ T9205] buffer_io_error: 36454 callbacks suppressed [ 130.135341][ T9205] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 130.210923][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.210923][ T9205] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 130.224432][ T9205] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 130.259262][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.259262][ T9205] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 130.272835][ T9205] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 130.414511][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.414511][ T9205] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 130.428002][ T9205] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 130.479026][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.479026][ T9205] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 130.492509][ T9205] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 130.519163][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.519163][ T9205] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 130.532837][ T9205] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 130.550826][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.550826][ T9205] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 130.564454][ T9205] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 130.598923][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.598923][ T9205] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 130.612605][ T9205] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 130.636414][ T9205] syz.5.1855: attempt to access beyond end of device [ 130.636414][ T9205] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 130.650112][ T9205] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 130.658847][ T9205] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 130.815643][ T9226] loop7: detected capacity change from 0 to 4096 [ 130.950040][ T9226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.071915][ T9234] loop6: detected capacity change from 0 to 512 [ 132.128864][ T9234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.142968][ T9234] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.452376][ T9245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=9245 comm=syz.5.1864 [ 132.470880][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.048865][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 133.069352][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1865'. [ 133.104060][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.295449][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 133.295467][ T29] audit: type=1400 audit(1749463930.639:4222): avc: denied { create } for pid=9258 comm="syz.6.1870" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.523451][ T29] audit: type=1326 audit(1749463930.869:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.598131][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1871'. [ 133.618783][ T29] audit: type=1326 audit(1749463930.909:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b42a3d290 code=0x7ffc0000 [ 133.642315][ T29] audit: type=1326 audit(1749463930.909:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.665776][ T29] audit: type=1326 audit(1749463930.909:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.689254][ T29] audit: type=1326 audit(1749463930.909:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.712712][ T29] audit: type=1326 audit(1749463930.919:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.736357][ T29] audit: type=1326 audit(1749463930.929:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.759918][ T29] audit: type=1326 audit(1749463930.929:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 133.783466][ T29] audit: type=1326 audit(1749463930.929:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 135.275886][ T9299] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1881'. [ 135.309153][ T9301] netlink: 'syz.6.1882': attribute type 27 has an invalid length. [ 135.438317][ T9304] loop7: detected capacity change from 0 to 1024 [ 136.283649][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1887'. [ 137.294678][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'. [ 137.383548][ T9327] tipc: Enabling of bearer rejected, already enabled [ 137.461916][ T9334] loop7: detected capacity change from 0 to 512 [ 137.477718][ T9334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.503268][ T9334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.549218][ T9334] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.593167][ T9334] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1895'. [ 137.643504][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.957442][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1910'. [ 137.968734][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1910'. [ 137.983841][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1910'. [ 137.996446][ T9349] team_slave_0: left promiscuous mode [ 138.005652][ T9349] team0 (unregistering): Port device team_slave_0 removed [ 138.013205][ T9349] team_slave_1: left promiscuous mode [ 138.023239][ T9349] team0 (unregistering): Port device team_slave_1 removed [ 138.131685][ T9354] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 138.144089][ T3374] IPVS: starting estimator thread 0... [ 138.181480][ T9358] loop7: detected capacity change from 0 to 8192 [ 138.259033][ T9360] IPVS: using max 2304 ests per chain, 115200 per kthread [ 138.446456][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 138.446471][ T29] audit: type=1400 audit(1749463935.789:4306): avc: denied { mounton } for pid=9369 comm="syz.5.1905" path="/270/file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.877986][ T29] audit: type=1400 audit(1749463936.219:4307): avc: denied { bind } for pid=9371 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.172342][ T9383] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 139.461311][ T29] audit: type=1400 audit(1749463936.809:4308): avc: denied { remount } for pid=9394 comm="syz.7.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.481511][ T29] audit: type=1400 audit(1749463936.809:4309): avc: denied { write } for pid=9394 comm="syz.7.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.507869][ T9397] netlink: 'syz.6.1916': attribute type 13 has an invalid length. [ 139.516241][ T29] audit: type=1400 audit(1749463936.859:4310): avc: denied { execute } for pid=9396 comm="syz.9.1918" path="/181/cpu.stat" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.592958][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.601576][ T29] audit: type=1400 audit(1749463936.909:4311): avc: denied { ioctl } for pid=9392 comm="syz.5.1915" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.627035][ T9393] tmpfs: Unknown parameter '/dev/ppp' [ 139.632892][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.636672][ T9408] loop7: detected capacity change from 0 to 256 [ 139.709820][ T9408] vfat: Bad value for 'fmask' [ 139.716071][ T9397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.732678][ T9408] loop7: detected capacity change from 0 to 128 [ 139.757982][ T9408] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.789249][ T9408] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.963467][ T29] audit: type=1400 audit(1749463937.289:4312): avc: denied { create } for pid=9407 comm="syz.7.1921" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 140.725892][ T9418] loop5: detected capacity change from 0 to 1024 [ 140.734417][ T4162] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.752451][ T9418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.806895][ T9430] loop7: detected capacity change from 0 to 128 [ 140.823473][ T9430] FAT-fs (loop7): error, invalid access to FAT (entry 0x0ffffff6) [ 140.875281][ T29] audit: type=1400 audit(1749463938.219:4313): avc: denied { ioctl } for pid=9417 comm="syz.5.1924" path="/274/bus/bus" dev="loop5" ino=18 ioctlcmd=0x4813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.082727][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.106553][ T29] audit: type=1400 audit(1749463938.449:4314): avc: denied { mount } for pid=9441 comm="syz.5.1931" name="/" dev="hugetlbfs" ino=25716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 141.134943][ T29] audit: type=1326 audit(1749463938.449:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 141.239625][ T9446] bridge0: entered allmulticast mode [ 141.246315][ T9437] syzkaller1: entered promiscuous mode [ 141.252077][ T9437] syzkaller1: entered allmulticast mode [ 141.305658][ T9448] loop5: detected capacity change from 0 to 1024 [ 141.313076][ T9448] EXT4-fs: dax option not supported [ 141.327591][ T9448] loop5: detected capacity change from 0 to 1024 [ 141.683573][ T9456] hub 1-0:1.0: USB hub found [ 141.688459][ T9456] hub 1-0:1.0: 8 ports detected [ 141.787607][ T9463] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 142.752094][ T9481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9481 comm=syz.3.1954 [ 142.858874][ T9477] syz_tun: entered promiscuous mode [ 143.030956][ T9487] netlink: 'syz.7.1945': attribute type 21 has an invalid length. [ 143.044722][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1945'. [ 144.067789][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 144.067806][ T29] audit: type=1400 audit(1749463941.409:4498): avc: denied { bind } for pid=9491 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.094196][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 144.266037][ T29] audit: type=1400 audit(1749463941.409:4499): avc: denied { setopt } for pid=9491 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.285778][ T29] audit: type=1400 audit(1749463941.569:4500): avc: denied { connect } for pid=9494 comm="syz.6.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.305549][ T29] audit: type=1400 audit(1749463941.569:4501): avc: denied { name_connect } for pid=9494 comm="syz.6.1949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 144.326003][ T29] audit: type=1400 audit(1749463941.639:4502): avc: denied { write } for pid=9494 comm="syz.6.1949" lport=43980 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.348550][ T29] audit: type=1400 audit(1749463941.639:4503): avc: denied { read open } for pid=9494 comm="syz.6.1949" path="net:[4026532371]" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.378292][ T29] audit: type=1400 audit(1749463941.729:4504): avc: denied { add_name } for pid=9500 comm="syz.5.1950" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 144.418972][ T29] audit: type=1400 audit(1749463941.729:4505): avc: denied { create } for pid=9500 comm="syz.5.1950" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.439682][ T29] audit: type=1400 audit(1749463941.729:4506): avc: denied { associate } for pid=9500 comm="syz.5.1950" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.471516][ T9501] veth0_vlan: entered allmulticast mode [ 144.556825][ T29] audit: type=1400 audit(1749463941.899:4507): avc: denied { create } for pid=9506 comm="syz.5.1953" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.201846][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.233215][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.261574][ T9492] syz.7.1947 (9492) used greatest stack depth: 6776 bytes left [ 145.404437][ T9524] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.458629][ T9528] loop7: detected capacity change from 0 to 2048 [ 145.502219][ T9528] loop7: p1 < > p4 [ 145.519874][ T9528] loop7: p4 size 8388608 extends beyond EOD, truncated [ 145.706824][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1965'. [ 145.719073][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.728454][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.861279][ T9541] loop6: detected capacity change from 0 to 1024 [ 145.882546][ T9541] EXT4-fs: Ignoring removed oldalloc option [ 145.901821][ T9541] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 145.943173][ T9541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.518388][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.535813][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.697850][ T9557] xt_nat: multiple ranges no longer supported [ 146.892613][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.260806][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 148.022968][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1975'. [ 148.121916][ T9573] xfrm1: entered promiscuous mode [ 148.127163][ T9573] xfrm1: entered allmulticast mode [ 148.304928][ T9581] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1979'. [ 148.348355][ T9586] loop5: detected capacity change from 0 to 512 [ 148.360621][ T9586] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.376019][ T9586] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1981: bg 0: block 248: padding at end of block bitmap is not set [ 148.398979][ T9581] hsr_slave_0: left promiscuous mode [ 148.404966][ T9589] loop6: detected capacity change from 0 to 128 [ 148.413724][ T9581] hsr_slave_1: left promiscuous mode [ 148.419283][ T9586] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1981: Failed to acquire dquot type 1 [ 148.432226][ T9586] EXT4-fs (loop5): 1 truncate cleaned up [ 148.441352][ T9589] bio_check_eod: 9 callbacks suppressed [ 148.441323][ T9586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.441367][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.441367][ T9589] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 148.441423][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.441423][ T9589] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 148.486656][ T9589] buffer_io_error: 8 callbacks suppressed [ 148.486669][ T9589] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 148.501106][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.501106][ T9589] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 148.514597][ T9589] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 148.523316][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.523316][ T9589] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 148.536817][ T9589] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 148.539523][ T9586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.546461][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.546461][ T9589] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 148.567963][ T9589] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 148.612559][ T9597] loop5: detected capacity change from 0 to 512 [ 148.624099][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.624099][ T9589] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 148.637750][ T9589] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 148.646577][ T9601] lo speed is unknown, defaulting to 1000 [ 148.650072][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.650072][ T9589] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 148.653027][ T9601] lo speed is unknown, defaulting to 1000 [ 148.665769][ T9589] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 148.666201][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.666201][ T9589] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 148.674502][ T9601] lo speed is unknown, defaulting to 1000 [ 148.680145][ T9589] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 148.695889][ T9601] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.699598][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.699598][ T9589] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 148.716588][ T9597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.728620][ T9589] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 148.749950][ T9589] syz.6.1982: attempt to access beyond end of device [ 148.749950][ T9589] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 148.750881][ T9601] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.763436][ T9589] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 148.779210][ T9589] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 148.783334][ T9597] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.803322][ T9601] lo speed is unknown, defaulting to 1000 [ 148.809419][ T9601] lo speed is unknown, defaulting to 1000 [ 148.815676][ T9601] lo speed is unknown, defaulting to 1000 [ 148.820189][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1984'. [ 148.830556][ T9601] lo speed is unknown, defaulting to 1000 [ 148.838764][ T9604] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1987'. [ 148.848693][ T9604] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1987'. [ 148.857836][ T9604] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1987'. [ 148.868643][ T9601] lo speed is unknown, defaulting to 1000 [ 148.883074][ T9601] lo speed is unknown, defaulting to 1000 [ 148.891776][ T9601] lo speed is unknown, defaulting to 1000 [ 148.917742][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.013285][ T9616] loop5: detected capacity change from 0 to 164 [ 149.020699][ T9616] rock: directory entry would overflow storage [ 149.026898][ T9616] rock: sig=0x66, size=4, remaining=3 [ 149.040089][ T9616] rock: directory entry would overflow storage [ 149.046427][ T9616] rock: sig=0x66, size=4, remaining=3 [ 149.076967][ T9621] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1993'. [ 149.087501][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 149.087520][ T29] audit: type=1400 audit(1749463946.429:4709): avc: denied { mount } for pid=9622 comm="syz.3.1994" name="/" dev="configfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.097379][ T9623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1994'. [ 149.117536][ T29] audit: type=1400 audit(1749463946.439:4710): avc: denied { search } for pid=9622 comm="syz.3.1994" name="/" dev="configfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.148408][ T29] audit: type=1400 audit(1749463946.479:4711): avc: denied { search } for pid=9622 comm="syz.3.1994" name="/" dev="configfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.170575][ T29] audit: type=1400 audit(1749463946.479:4712): avc: denied { read open } for pid=9622 comm="syz.3.1994" path="/" dev="configfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.193356][ T29] audit: type=1400 audit(1749463946.479:4713): avc: denied { setopt } for pid=9620 comm="syz.5.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.213585][ T29] audit: type=1400 audit(1749463946.519:4714): avc: denied { read } for pid=9625 comm="syz.3.1995" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.261487][ T29] audit: type=1400 audit(1749463946.609:4715): avc: denied { create } for pid=9627 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.282287][ T29] audit: type=1400 audit(1749463946.619:4716): avc: denied { ioctl } for pid=9627 comm="syz.3.1996" path="socket:[25410]" dev="sockfs" ino=25410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.306983][ T29] audit: type=1400 audit(1749463946.619:4717): avc: denied { bind } for pid=9627 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.326382][ T29] audit: type=1400 audit(1749463946.629:4718): avc: denied { setopt } for pid=9627 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.092253][ T9641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9641 comm=syz.6.2001 [ 150.106226][ T9641] $Hÿ: renamed from bond0 (while UP) [ 150.117212][ T9641] loop9: detected capacity change from 0 to 7 [ 150.123560][ T9641] loop9: unable to read partition table [ 150.130551][ T9641] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 150.130551][ T9641] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 150.226987][ T9647] loop6: detected capacity change from 0 to 8192 [ 151.125786][ T9673] loop5: detected capacity change from 0 to 512 [ 151.132814][ T9673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.141726][ T9673] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 151.202463][ T9673] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 151.237568][ T9673] EXT4-fs (loop5): Remounting filesystem read-only [ 151.244447][ T9673] EXT4-fs (loop5): 1 truncate cleaned up [ 151.250774][ T9673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.273358][ T9685] loop6: detected capacity change from 0 to 512 [ 151.295008][ T9685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.308578][ T9685] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.324108][ T9691] netlink: 'syz.5.2013': attribute type 4 has an invalid length. [ 151.332706][ T9693] netlink: 'syz.9.2018': attribute type 13 has an invalid length. [ 151.969163][ T9693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.012826][ T9693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.167636][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.178423][ T9693] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.187697][ T9693] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.196715][ T9693] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.205874][ T9693] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.220401][ T9693] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.229635][ T9693] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.238628][ T9693] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.247611][ T9693] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.266081][ T9702] loop6: detected capacity change from 0 to 1024 [ 152.279209][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.279462][ T9702] ext4: Bad value for 'mb_optimize_scan' [ 152.342030][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2024'. [ 152.351302][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.360135][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.446833][ T9715] delete_channel: no stack [ 152.482526][ T9719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9719 comm=syz.9.2027 [ 152.503931][ T9719] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2027'. [ 152.622119][ T9726] loop6: detected capacity change from 0 to 8192 [ 152.848947][ T9735] loop7: detected capacity change from 0 to 512 [ 152.855713][ T9735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.863744][ T9735] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 152.876304][ T9735] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.904735][ T9735] EXT4-fs (loop7): 1 truncate cleaned up [ 152.915020][ T9735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.060287][ T9743] loop6: detected capacity change from 0 to 512 [ 153.073076][ T9743] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2035: Failed to acquire dquot type 1 [ 153.085151][ T9743] EXT4-fs (loop6): 1 truncate cleaned up [ 153.092525][ T9743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.105581][ T9743] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.131336][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.205210][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 153.230594][ T9755] loop6: detected capacity change from 0 to 512 [ 153.238681][ T9755] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 153.247484][ T9755] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.2039: iget: bad i_size value: 12154757448730 [ 153.261614][ T9755] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2039: couldn't read orphan inode 13 (err -117) [ 153.274975][ T9755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.290809][ T9755] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 153.320612][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.481824][ T9764] vhci_hcd: invalid port number 96 [ 153.487051][ T9764] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 153.521199][ T9763] futex_wake_op: syz.3.2042 tries to shift op by -1; fix this program [ 153.564913][ T9765] lo speed is unknown, defaulting to 1000 [ 153.691586][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.709636][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2044'. [ 153.914751][ T9778] loop7: detected capacity change from 0 to 1024 [ 153.951715][ T9778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.964012][ T9778] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.062375][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.092684][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.126596][ T9784] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 154.250994][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 154.251010][ T29] audit: type=1400 audit(1749463951.489:5293): avc: denied { ioctl } for pid=9781 comm="syz.5.2047" path="socket:[26322]" dev="sockfs" ino=26322 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.550881][ T29] audit: type=1326 audit(1749463951.889:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.599813][ T9789] netlink: 'syz.9.2050': attribute type 10 has an invalid length. [ 154.607692][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2050'. [ 154.810460][ T29] audit: type=1326 audit(1749463951.929:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.814384][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 154.833939][ T29] audit: type=1326 audit(1749463951.929:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.843055][ T9789] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 154.866328][ T29] audit: type=1326 audit(1749463951.929:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.905688][ T29] audit: type=1326 audit(1749463951.929:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.929261][ T29] audit: type=1326 audit(1749463951.929:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.952690][ T29] audit: type=1326 audit(1749463951.929:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.976159][ T29] audit: type=1326 audit(1749463951.929:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 154.999716][ T29] audit: type=1326 audit(1749463951.929:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 155.190236][ T9797] loop6: detected capacity change from 0 to 512 [ 156.054439][ T9797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.067107][ T9800] wireguard0: entered promiscuous mode [ 156.067104][ T9797] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.083147][ T9800] wireguard0: entered allmulticast mode [ 156.417958][ T9804] loop5: detected capacity change from 0 to 512 [ 156.439871][ T9804] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2053: bad orphan inode 11 [ 156.451077][ T9804] ext4_test_bit(bit=10, block=4) = 1 [ 156.456490][ T9804] is_bad_inode(inode)=0 [ 156.460869][ T9804] NEXT_ORPHAN(inode)=2080374784 [ 156.465771][ T9804] max_ino=32 [ 156.469134][ T9804] i_nlink=0 [ 156.527264][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.552135][ T9804] EXT4-fs (loop5): 1 truncate cleaned up [ 156.564161][ T9804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.636890][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.853169][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 156.900883][ T9812] loop6: detected capacity change from 0 to 1024 [ 156.919800][ T9812] EXT4-fs: Ignoring removed bh option [ 156.933137][ T9812] EXT4-fs: inline encryption not supported [ 156.942429][ T9812] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.954397][ T9812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 156.964242][ T9812] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.2057: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.979111][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2055'. [ 156.980273][ T9812] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.2057: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.003769][ T9812] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2057: Failed to acquire dquot type 0 [ 157.015442][ T9812] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 157.026256][ T9812] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2057: mark_inode_dirty error [ 157.037872][ T9812] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 157.048264][ T9812] EXT4-fs (loop6): 1 orphan inode deleted [ 157.054555][ T9812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.067100][ T6690] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.084742][ T9812] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 157.104187][ T6690] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0 [ 157.118819][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.129513][ T5400] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 157.143320][ T5400] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 157.153323][ T5400] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 157.180792][ T9822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 157.188203][ T9822] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 157.338903][ T9835] loop6: detected capacity change from 0 to 512 [ 157.395936][ T9835] EXT4-fs: Ignoring removed i_version option [ 157.405629][ T9835] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 157.417440][ T9835] EXT4-fs (loop6): 1 truncate cleaned up [ 157.424856][ T9835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.552586][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.641720][ T9851] lo speed is unknown, defaulting to 1000 [ 157.666921][ T9849] infiniband syz!: set down [ 157.671612][ T9849] infiniband syz!: added team_slave_0 [ 157.696284][ T9849] RDS/IB: syz!: added [ 157.701417][ T9849] smc: adding ib device syz! with port count 1 [ 157.707977][ T9849] smc: ib device syz! port 1 has pnetid [ 157.755051][ T9859] loop7: detected capacity change from 0 to 256 [ 157.940934][ T9859] FAT-fs (loop7): Directory bread(block 64) failed [ 157.967850][ T9859] FAT-fs (loop7): Directory bread(block 65) failed [ 157.988062][ T9859] FAT-fs (loop7): Directory bread(block 66) failed [ 158.010391][ T9863] SELinux: failed to load policy [ 158.015552][ T9859] FAT-fs (loop7): Directory bread(block 67) failed [ 158.023891][ T9859] FAT-fs (loop7): Directory bread(block 68) failed [ 158.031580][ T9859] FAT-fs (loop7): Directory bread(block 69) failed [ 158.038333][ T9859] FAT-fs (loop7): Directory bread(block 70) failed [ 158.072881][ T9865] $Hÿ: renamed from bond0 [ 158.084249][ T9865] $Hÿ: entered promiscuous mode [ 158.089364][ T9865] bond_slave_0: entered promiscuous mode [ 158.095190][ T9865] bond_slave_1: entered promiscuous mode [ 158.101049][ T9865] batadv0: entered promiscuous mode [ 158.102896][ T9859] FAT-fs (loop7): Directory bread(block 71) failed [ 158.117325][ T9859] FAT-fs (loop7): Directory bread(block 72) failed [ 158.123993][ T9859] FAT-fs (loop7): Directory bread(block 73) failed [ 158.272256][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2076'. [ 158.282148][ T9867] netem: change failed [ 158.355137][ T9870] loop5: detected capacity change from 0 to 512 [ 158.389754][ T9871] bio_check_eod: 9 callbacks suppressed [ 158.389775][ T9871] syz.7.2073: attempt to access beyond end of device [ 158.389775][ T9871] loop7: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 158.412202][ T9870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.744869][ T9870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.946404][ T9870] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.041146][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2081'. [ 159.226797][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.278692][ T9897] random: crng reseeded on system resumption [ 159.308988][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 159.309079][ T29] audit: type=1400 audit(1749464212.619:5554): avc: denied { append } for pid=9896 comm="syz.3.2082" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.338607][ T29] audit: type=1400 audit(1749464212.619:5555): avc: denied { open } for pid=9896 comm="syz.3.2082" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.392797][ T29] audit: type=1326 audit(1749464212.729:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.416423][ T29] audit: type=1326 audit(1749464212.729:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.440026][ T29] audit: type=1326 audit(1749464212.729:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.463730][ T29] audit: type=1326 audit(1749464212.729:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.487221][ T29] audit: type=1326 audit(1749464212.729:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.510886][ T29] audit: type=1326 audit(1749464212.729:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.534245][ T29] audit: type=1326 audit(1749464212.729:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.546957][ T4697] IPVS: starting estimator thread 0... [ 159.557719][ T29] audit: type=1326 audit(1749464212.729:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.9.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5d8e929 code=0x7ffc0000 [ 159.587693][ T9916] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 159.669388][ T9911] IPVS: using max 2352 ests per chain, 117600 per kthread [ 159.688157][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2092'. [ 160.835025][ T9949] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 160.849814][ T9949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.871053][ T9949] bond1: (slave veth5): Enslaving as an active interface with a down link [ 160.879846][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2099'. [ 160.889399][ T9952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9952 comm=syz.9.2099 [ 160.892920][ T9949] vlan2: entered allmulticast mode [ 160.901882][ T9952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9952 comm=syz.9.2099 [ 160.919691][ T9949] veth1: entered allmulticast mode [ 160.949614][ T9949] bond1: (slave vlan2): Opening slave failed [ 161.118508][ T9968] loop6: detected capacity change from 0 to 164 [ 161.195308][ T9968] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.209589][ T9970] vhci_hcd: invalid port number 96 [ 161.214857][ T9970] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 161.216273][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 161.240849][ T9970] futex_wake_op: syz.5.2106 tries to shift op by -1; fix this program [ 161.314114][ T9960] loop7: detected capacity change from 0 to 1024 [ 161.329745][ T9960] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.340364][ T9962] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.349820][ T9962] Symlink component flag not implemented [ 161.354286][ T9960] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 161.355540][ T9962] Symlink component flag not implemented [ 161.356487][ T9962] Symlink component flag not implemented (7) [ 161.363990][ T9960] EXT4-fs (loop7): orphan cleanup on readonly fs [ 161.369336][ T9962] Symlink component flag not implemented (116) [ 161.375320][ T9960] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #3: comm syz.7.2103: iget: bad i_size value: 1407392063428608 [ 161.377042][ T9960] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.2103: Bad quota inode: 3, type: 0 [ 161.415962][ T9960] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 161.430732][ T9960] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 161.437981][ T9960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.533960][ T9982] lo speed is unknown, defaulting to 1000 [ 161.660385][ T9982] loop3: detected capacity change from 0 to 512 [ 161.667207][ T9982] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.673786][ T9982] EXT4-fs: Ignoring removed bh option [ 161.680836][ T9982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.737353][ T9982] EXT4-fs (loop3): 1 truncate cleaned up [ 161.743934][ T9982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.882420][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.901366][ T9994] random: crng reseeded on system resumption [ 161.914074][ T9994] loop6: detected capacity change from 0 to 512 [ 161.923669][ T9994] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2114: bad orphan inode 11 [ 161.934351][ T9994] ext4_test_bit(bit=10, block=4) = 1 [ 161.939732][ T9994] is_bad_inode(inode)=0 [ 161.943935][ T9994] NEXT_ORPHAN(inode)=2080374784 [ 161.948957][ T9994] max_ino=32 [ 161.952251][ T9994] i_nlink=0 [ 161.956385][ T9994] EXT4-fs (loop6): 1 truncate cleaned up [ 161.962581][ T9994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.987891][ T9995] loop7: detected capacity change from 0 to 512 [ 162.001855][ T9995] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 162.017986][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.040962][ T9995] EXT4-fs (loop7): 1 truncate cleaned up [ 162.055556][ T9995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.061712][ T9986] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2111'. [ 162.123434][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 162.146442][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.194629][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.238984][T10006] netlink: 'syz.3.2117': attribute type 10 has an invalid length. [ 162.270191][T10006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.287309][T10013] loop7: detected capacity change from 0 to 1024 [ 162.301044][T10013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.311169][T10013] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.323953][T10013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 162.335339][T10013] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.2120: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.351331][T10013] EXT4-fs (loop7): Remounting filesystem read-only [ 162.355639][T10006] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.358331][T10013] EXT4-fs (loop7): 1 orphan inode deleted [ 162.359542][T10013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.385444][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.451350][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 162.485249][T10023] lo speed is unknown, defaulting to 1000 [ 162.491356][T10023] lo speed is unknown, defaulting to 1000 [ 162.497374][T10023] lo speed is unknown, defaulting to 1000 [ 162.504039][T10023] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 162.514663][T10023] lo speed is unknown, defaulting to 1000 [ 162.520824][T10023] lo speed is unknown, defaulting to 1000 [ 162.522130][T10013] loop7: detected capacity change from 0 to 512 [ 162.526971][T10023] lo speed is unknown, defaulting to 1000 [ 162.539188][T10023] lo speed is unknown, defaulting to 1000 [ 162.545264][T10023] lo speed is unknown, defaulting to 1000 [ 162.551636][T10023] lo speed is unknown, defaulting to 1000 [ 162.560996][T10013] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2120: Failed to acquire dquot type 1 [ 162.573475][T10013] EXT4-fs (loop7): 1 truncate cleaned up [ 162.580967][T10013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.599081][T10013] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.612823][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.624314][T10028] netlink: 'syz.3.2124': attribute type 21 has an invalid length. [ 162.633244][T10028] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2124'. [ 162.677226][T10034] loop7: detected capacity change from 0 to 1024 [ 162.677415][T10032] lo speed is unknown, defaulting to 1000 [ 162.685452][T10034] EXT4-fs: Ignoring removed bh option [ 162.695271][T10034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.705686][T10034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.731959][T10032] lo speed is unknown, defaulting to 1000 [ 162.750245][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2128'. [ 162.767693][T10040] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.785870][T10037] loop3: detected capacity change from 0 to 2048 [ 162.839699][T10037] loop3: p1 < > p4 [ 162.844539][T10037] loop3: p4 size 8388608 extends beyond EOD, truncated [ 163.104528][T10032] SELinux: ebitmap: truncated map [ 163.154839][T10032] SELinux: failed to load policy [ 163.240667][T10046] loop6: detected capacity change from 0 to 1024 [ 163.289732][T10046] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.300803][T10046] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.388031][T10046] JBD2: no valid journal superblock found [ 163.393855][T10046] EXT4-fs (loop6): Could not load journal inode [ 163.398356][T10048] loop3: detected capacity change from 0 to 128 [ 163.408623][T10048] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.423035][T10048] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.442843][ T4697] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 163.450447][ T4697] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 163.457886][ T4697] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 163.470805][ T4697] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.495116][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.531483][T10046] loop6: detected capacity change from 0 to 8192 [ 163.545157][T10051] xt_hashlimit: max too large, truncated to 1048576 [ 163.552798][T10046] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 163.558073][T10046] loop6: partition table partially beyond EOD, truncated [ 163.570765][T10046] loop6: p1 start 67108864 is beyond EOD, truncated [ 163.577447][T10046] loop6: p2 size 61546 extends beyond EOD, truncated [ 163.589019][T10046] loop6: p3 start 100859904 is beyond EOD, truncated [ 163.600033][T10046] loop6: p5 start 67108864 is beyond EOD, truncated [ 163.606738][T10046] loop6: p6 size 61546 extends beyond EOD, truncated [ 163.633761][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.790597][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.799224][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.099506][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.108129][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.867759][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 164.867835][ T29] audit: type=1400 audit(1749464218.209:6306): avc: denied { bind } for pid=10066 comm="syz.6.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.893644][ T29] audit: type=1400 audit(1749464218.209:6307): avc: denied { name_bind } for pid=10066 comm="syz.6.2137" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 164.915586][ T29] audit: type=1400 audit(1749464218.209:6308): avc: denied { node_bind } for pid=10066 comm="syz.6.2137" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 165.252619][T10062] loop5: detected capacity change from 0 to 1024 [ 166.620039][T10076] loop3: detected capacity change from 0 to 1024 [ 166.620760][T10076] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.620786][T10076] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.621927][T10076] JBD2: no valid journal superblock found [ 166.621940][T10076] EXT4-fs (loop3): Could not load journal inode [ 166.674871][ T29] audit: type=1326 audit(1749464219.949:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675033][ T29] audit: type=1326 audit(1749464219.949:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675087][ T29] audit: type=1326 audit(1749464219.949:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675125][ T29] audit: type=1326 audit(1749464219.949:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675203][ T29] audit: type=1326 audit(1749464219.949:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675241][ T29] audit: type=1326 audit(1749464219.949:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.675278][ T29] audit: type=1326 audit(1749464219.949:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.6.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 166.759029][T10076] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 166.851221][T10062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.851324][T10062] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.973601][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 166.981260][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 166.988768][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 166.996217][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 167.003693][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.011400][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.019042][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.026695][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 167.034198][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.041859][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.049315][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.056780][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.064344][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.071870][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.079303][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.086743][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.094195][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.101678][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.109250][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.116696][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.124314][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.131983][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.139634][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.147161][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.154608][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.162177][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.169724][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.177220][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.184675][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.192115][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.199673][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.207127][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.214560][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.222007][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.229535][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.236960][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.244441][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.252600][ T3389] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 167.265014][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2144'. [ 167.291292][T10091] hsr_slave_0 (unregistering): left promiscuous mode [ 167.517660][T10100] @: renamed from vlan0 [ 168.055502][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.651128][T10121] loop7: detected capacity change from 0 to 512 [ 168.690131][T10121] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 168.698225][T10121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 168.739147][T10127] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 168.753354][T10121] System zones: 0-1, 15-15, 18-18, 34-34 [ 168.778081][T10121] EXT4-fs (loop7): orphan cleanup on readonly fs [ 168.785202][T10121] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 168.800686][T10121] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 168.837562][T10121] EXT4-fs (loop7): 1 truncate cleaned up [ 168.844603][T10121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.864822][T10129] loop3: detected capacity change from 0 to 128 [ 168.873939][T10129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.898492][T10129] ext4 filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.078379][T10134] vhci_hcd: invalid port number 96 [ 169.083596][T10134] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 169.091426][T10134] futex_wake_op: syz.6.2156 tries to shift op by -1; fix this program [ 169.119100][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.765024][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.876309][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 169.876325][ T29] audit: type=1326 audit(1749464223.219:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ff9d58e7 code=0x7ffc0000 [ 169.906228][ T29] audit: type=1326 audit(1749464223.219:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ff97ab19 code=0x7ffc0000 [ 169.929901][ T29] audit: type=1326 audit(1749464223.219:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 169.953490][ T29] audit: type=1326 audit(1749464223.229:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0dbdc58e7 code=0x7ffc0000 [ 169.977177][ T29] audit: type=1326 audit(1749464223.229:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0dbd6ab19 code=0x7ffc0000 [ 170.000694][ T29] audit: type=1326 audit(1749464223.229:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 170.024238][ T29] audit: type=1326 audit(1749464223.229:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ff9d58e7 code=0x7ffc0000 [ 170.047691][ T29] audit: type=1326 audit(1749464223.229:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ff97ab19 code=0x7ffc0000 [ 170.071333][ T29] audit: type=1326 audit(1749464223.229:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 170.094837][ T29] audit: type=1326 audit(1749464223.229:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0dbdc58e7 code=0x7ffc0000 [ 170.280287][T10158] SELinux: ebitmap: truncated map [ 170.288730][T10158] SELinux: failed to load policy [ 170.367527][T10163] loop7: detected capacity change from 0 to 256 [ 170.639139][T10172] ipvlan2: entered promiscuous mode [ 170.644487][T10172] ipvlan2: entered allmulticast mode [ 170.650100][T10172] macvlan0: entered allmulticast mode [ 170.695076][T10175] loop6: detected capacity change from 0 to 1024 [ 170.713117][T10175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.998121][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.053705][T10185] xt_hashlimit: size too large, truncated to 1048576 [ 171.140544][T10190] : renamed from vxcan1 [ 171.485576][T10204] netlink: 'syz.5.2179': attribute type 1 has an invalid length. [ 171.493488][T10204] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2179'. [ 171.524616][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2180'. [ 171.560849][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2180'. [ 171.584447][T10209] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 171.631036][T10209] smc: net device bond0 erased user defined pnetid SYZ2 [ 171.726957][T10213] loop6: detected capacity change from 0 to 1024 [ 171.734183][T10213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.744229][T10213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.757838][T10215] loop5: detected capacity change from 0 to 164 [ 171.767160][T10215] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 171.777084][T10213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 171.795681][T10213] System zones: 0-1, 3-36 [ 171.806523][T10213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.087450][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.506825][T10241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 172.513475][T10241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.521183][T10241] vhci_hcd vhci_hcd.0: Device attached [ 172.530555][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.573675][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.699276][T10241] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 172.706033][T10241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.713716][T10241] vhci_hcd vhci_hcd.0: Device attached [ 172.832473][T10246] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 172.839144][T10246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.846806][T10246] vhci_hcd vhci_hcd.0: Device attached [ 172.854137][T10242] vhci_hcd: connection closed [ 172.854156][T10247] vhci_hcd: connection closed [ 172.854491][ T6683] vhci_hcd: stop threads [ 172.860669][T10244] vhci_hcd: connection closed [ 172.863645][ T6683] vhci_hcd: release socket [ 172.863666][ T6683] vhci_hcd: disconnect device [ 172.882334][ T6683] vhci_hcd: stop threads [ 172.886613][ T6683] vhci_hcd: release socket [ 172.891097][ T6683] vhci_hcd: disconnect device [ 172.895886][ T3389] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 172.903538][ T6683] vhci_hcd: stop threads [ 172.907838][ T6683] vhci_hcd: release socket [ 172.912310][ T6683] vhci_hcd: disconnect device [ 172.917137][ T3389] usb 7-1: enqueue for inactive port 0 [ 172.923290][ T3389] usb 7-1: enqueue for inactive port 0 [ 172.930037][ T3389] usb 7-1: enqueue for inactive port 0 [ 173.012057][ T3389] vhci_hcd: vhci_device speed not set [ 173.143267][T10256] loop6: detected capacity change from 0 to 512 [ 173.167454][T10256] EXT4-fs: Ignoring removed oldalloc option [ 173.203718][T10256] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2195: Parent and EA inode have the same ino 15 [ 173.217110][T10260] capability: warning: `syz.5.2196' uses 32-bit capabilities (legacy support in use) [ 173.230356][T10256] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2195: Parent and EA inode have the same ino 15 [ 173.268865][T10256] EXT4-fs (loop6): 1 orphan inode deleted [ 173.276301][T10256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.641381][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2199'. [ 173.650607][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2199'. [ 173.659629][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2199'. [ 173.747188][T10271] loop3: detected capacity change from 0 to 512 [ 173.754386][T10271] EXT4-fs: Ignoring removed oldalloc option [ 173.760441][T10271] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.884101][T10271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.901566][T10271] EXT4-fs (loop3): orphan cleanup on readonly fs [ 173.902825][T10271] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2198: Failed to acquire dquot type 1 [ 173.904066][T10271] EXT4-fs (loop3): 1 truncate cleaned up [ 173.994977][T10279] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.183898][T10271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.197584][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.270924][T10276] Set syz1 is full, maxelem 65536 reached [ 174.277168][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2203'. [ 174.415994][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.426809][T10294] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10294 comm=syz.7.2205 [ 174.495653][T10304] loop5: detected capacity change from 0 to 164 [ 174.499278][T10300] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2208'. [ 174.512115][T10304] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.528541][T10304] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.549242][T10304] Symlink component flag not implemented [ 174.555023][T10304] Symlink component flag not implemented [ 174.562025][T10304] Symlink component flag not implemented (7) [ 174.568149][T10304] Symlink component flag not implemented (116) [ 174.595332][T10312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=10312 comm=syz.6.2206 [ 174.609682][T10312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10312 comm=syz.6.2206 [ 174.622581][T10312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10312 comm=syz.6.2206 [ 174.741994][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2212'. [ 174.751253][T10317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.759572][T10317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.769753][T10317] $Hÿ: (slave batadv0): Releasing backup interface [ 174.776906][T10317] batadv0 (unregistering): left promiscuous mode [ 175.350253][T10329] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 175.366542][T10331] loop3: detected capacity change from 0 to 164 [ 175.398817][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 175.398836][ T29] audit: type=1326 audit(1749464228.739:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.437646][T10340] netlink: '+}[@': attribute type 3 has an invalid length. [ 175.446818][T10327] lo speed is unknown, defaulting to 1000 [ 175.457597][ T29] audit: type=1326 audit(1749464228.749:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.481477][ T29] audit: type=1326 audit(1749464228.749:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.505028][ T29] audit: type=1326 audit(1749464228.749:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.529146][ T29] audit: type=1326 audit(1749464228.749:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.552594][ T29] audit: type=1326 audit(1749464228.749:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.576275][ T29] audit: type=1326 audit(1749464228.749:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.578477][T10327] lo speed is unknown, defaulting to 1000 [ 175.599985][ T29] audit: type=1326 audit(1749464228.749:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.600021][ T29] audit: type=1326 audit(1749464228.749:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbdce929 code=0x7ffc0000 [ 175.679633][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 175.688575][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 175.692976][ T29] audit: type=1326 audit(1749464228.949:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.5.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 175.723580][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 175.747397][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 175.821020][T10367] netlink: 'syz.3.2228': attribute type 3 has an invalid length. [ 175.831386][T10367] loop3: detected capacity change from 0 to 256 [ 175.871894][T10369] loop6: detected capacity change from 0 to 1024 [ 175.886780][T10371] loop3: detected capacity change from 0 to 1024 [ 175.897528][T10371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.915391][T10369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.038463][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.063750][T10379] tracefs: Unknown parameter 'm¼›Ze—Bß «­ÀœÚode' [ 176.420081][T10387] loop6: detected capacity change from 0 to 128 [ 176.516247][T10405] loop6: detected capacity change from 0 to 2048 [ 176.549743][T10405] loop6: p1 < > p4 [ 176.554556][T10405] loop6: p4 size 8388608 extends beyond EOD, truncated [ 176.703842][ T3413] IPVS: starting estimator thread 0... [ 176.747451][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.799207][T10420] IPVS: using max 2352 ests per chain, 117600 per kthread [ 177.046126][T10437] lo speed is unknown, defaulting to 1000 [ 177.082576][T10437] lo speed is unknown, defaulting to 1000 [ 178.609823][T10467] lo speed is unknown, defaulting to 1000 [ 178.626917][T10465] lo speed is unknown, defaulting to 1000 [ 178.647640][T10467] lo speed is unknown, defaulting to 1000 [ 178.701821][T10465] lo speed is unknown, defaulting to 1000 [ 179.067309][T10481] random: crng reseeded on system resumption [ 179.077543][T10479] loop6: detected capacity change from 0 to 512 [ 179.086193][T10483] __nla_validate_parse: 8 callbacks suppressed [ 179.086210][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2259'. [ 179.123292][T10479] EXT4-fs: Ignoring removed i_version option [ 179.145798][T10479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 179.164127][T10481] loop3: detected capacity change from 0 to 512 [ 179.194147][T10479] EXT4-fs (loop6): 1 truncate cleaned up [ 179.203034][T10481] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2258: bad orphan inode 11 [ 179.223917][T10479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.258325][T10481] ext4_test_bit(bit=10, block=4) = 1 [ 179.263717][T10481] is_bad_inode(inode)=0 [ 179.267909][T10481] NEXT_ORPHAN(inode)=2080374784 [ 179.272831][T10481] max_ino=32 [ 179.276051][T10481] i_nlink=0 [ 179.331749][T10481] EXT4-fs (loop3): 1 truncate cleaned up [ 179.350899][T10481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.391911][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.458836][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.504429][T10497] loop3: detected capacity change from 0 to 1024 [ 179.533665][T10497] tipc: New replicast peer: 0.0.255.255 [ 179.539366][T10497] tipc: Enabled bearer , priority 10 [ 179.548576][T10499] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.211980][T10514] loop5: detected capacity change from 0 to 512 [ 180.219018][T10514] EXT4-fs: Ignoring removed oldalloc option [ 180.226945][T10514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2269: Parent and EA inode have the same ino 15 [ 180.240818][T10514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2269: Parent and EA inode have the same ino 15 [ 180.253782][T10514] EXT4-fs (loop5): 1 orphan inode deleted [ 180.260155][T10514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.292689][T10519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10519 comm=syz.6.2270 [ 180.337381][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2272'. [ 180.403369][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 180.403412][ T29] audit: type=1326 audit(1749464233.749:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.443364][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2273'. [ 180.474334][ T29] audit: type=1326 audit(1749464233.749:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.497990][ T29] audit: type=1326 audit(1749464233.759:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.521554][ T29] audit: type=1326 audit(1749464233.759:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.545216][ T29] audit: type=1326 audit(1749464233.759:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.568863][ T29] audit: type=1326 audit(1749464233.759:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.592617][ T29] audit: type=1326 audit(1749464233.759:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.616359][ T29] audit: type=1326 audit(1749464233.759:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.640281][ T29] audit: type=1326 audit(1749464233.759:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.663968][ T29] audit: type=1326 audit(1749464233.759:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188f9e929 code=0x7ffc0000 [ 180.775741][T10536] lo speed is unknown, defaulting to 1000 [ 180.844814][T10536] lo speed is unknown, defaulting to 1000 [ 180.974477][T10547] loop3: detected capacity change from 0 to 256 [ 181.029339][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2283'. [ 181.046690][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2283'. [ 181.057629][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.089176][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2285'. [ 181.186401][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2287'. [ 181.195705][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2287'. [ 181.204839][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2287'. [ 181.223229][T10524] syz.6.2282 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 181.237885][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.6.2282 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 181.237968][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.237985][T10524] Call Trace: [ 181.237994][T10524] [ 181.238005][T10524] __dump_stack+0x1d/0x30 [ 181.238031][T10524] dump_stack_lvl+0xe8/0x140 [ 181.238056][T10524] dump_stack+0x15/0x1b [ 181.238076][T10524] dump_header+0x81/0x220 [ 181.238168][T10524] oom_kill_process+0x334/0x3f0 [ 181.238207][T10524] out_of_memory+0x979/0xb80 [ 181.238287][T10524] try_charge_memcg+0x5e6/0x9e0 [ 181.238361][T10524] obj_cgroup_charge_pages+0xa6/0x150 [ 181.238468][T10524] __memcg_kmem_charge_page+0x9f/0x170 [ 181.238503][T10524] __alloc_frozen_pages_noprof+0x188/0x360 [ 181.238614][T10524] alloc_pages_mpol+0xb3/0x250 [ 181.238649][T10524] alloc_pages_noprof+0x90/0x130 [ 181.238683][T10524] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 181.238787][T10524] __kvmalloc_node_noprof+0x30f/0x4e0 [ 181.238818][T10524] ? ip_set_alloc+0x1f/0x30 [ 181.238854][T10524] ? ip_set_alloc+0x1f/0x30 [ 181.238938][T10524] ? __kmalloc_cache_noprof+0x189/0x320 [ 181.238970][T10524] ip_set_alloc+0x1f/0x30 [ 181.239005][T10524] hash_netiface_create+0x282/0x740 [ 181.239044][T10524] ? __pfx_hash_netiface_create+0x10/0x10 [ 181.239189][T10524] ip_set_create+0x3cc/0x960 [ 181.239222][T10524] ? __nla_parse+0x40/0x60 [ 181.239248][T10524] nfnetlink_rcv_msg+0x4c3/0x590 [ 181.239301][T10524] ? selinux_capable+0x1f9/0x270 [ 181.239415][T10524] netlink_rcv_skb+0x120/0x220 [ 181.239436][T10524] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 181.239475][T10524] nfnetlink_rcv+0x16b/0x1690 [ 181.239516][T10524] ? __kfree_skb+0x109/0x150 [ 181.239535][T10524] ? nlmon_xmit+0x4f/0x60 [ 181.239561][T10524] ? consume_skb+0x49/0x150 [ 181.239598][T10524] ? nlmon_xmit+0x4f/0x60 [ 181.239662][T10524] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 181.239687][T10524] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 181.239752][T10524] ? __dev_queue_xmit+0x182/0x1fb0 [ 181.239776][T10524] ? ref_tracker_free+0x37d/0x3e0 [ 181.239822][T10524] ? __netlink_deliver_tap+0x4dc/0x500 [ 181.239849][T10524] netlink_unicast+0x5a1/0x670 [ 181.239892][T10524] netlink_sendmsg+0x58b/0x6b0 [ 181.239968][T10524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.239993][T10524] __sock_sendmsg+0x142/0x180 [ 181.240105][T10524] ____sys_sendmsg+0x31e/0x4e0 [ 181.240133][T10524] ___sys_sendmsg+0x17b/0x1d0 [ 181.240172][T10524] __x64_sys_sendmsg+0xd4/0x160 [ 181.240231][T10524] x64_sys_call+0x2999/0x2fb0 [ 181.240255][T10524] do_syscall_64+0xd2/0x200 [ 181.240278][T10524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.240306][T10524] ? clear_bhb_loop+0x40/0x90 [ 181.240391][T10524] ? clear_bhb_loop+0x40/0x90 [ 181.240418][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.240516][T10524] RIP: 0033:0x7fc6ff9de929 [ 181.240542][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.240563][T10524] RSP: 002b:00007fc6fe047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.240584][T10524] RAX: ffffffffffffffda RBX: 00007fc6ffc05fa0 RCX: 00007fc6ff9de929 [ 181.240597][T10524] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.240611][T10524] RBP: 00007fc6ffa60b39 R08: 0000000000000000 R09: 0000000000000000 [ 181.240665][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.240677][T10524] R13: 0000000000000000 R14: 00007fc6ffc05fa0 R15: 00007ffe5c42e328 [ 181.240698][T10524] [ 181.584858][T10524] memory: usage 307200kB, limit 307200kB, failcnt 159 [ 181.591911][T10524] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 181.599905][T10524] kmem: usage 239580kB, limit 9007199254740988kB, failcnt 0 [ 181.607269][T10524] Memory cgroup stats for /syz6: [ 181.628279][T10524] cache 69025792 [ 181.637068][T10524] rss 200704 [ 181.640376][T10524] shmem 69021696 [ 181.644078][T10524] mapped_file 4096 [ 181.647817][T10524] dirty 4096 [ 181.651085][T10524] writeback 0 [ 181.654401][T10524] workingset_refault_anon 272 [ 181.659147][T10524] workingset_refault_file 33 [ 181.663754][T10524] swap 0 [ 181.666675][T10524] swapcached 0 [ 181.670137][T10524] pgpgin 149148 [ 181.673611][T10524] pgpgout 132243 [ 181.677173][T10524] pgfault 147605 [ 181.680807][T10524] pgmajfault 40 [ 181.684284][T10524] inactive_anon 69222400 [ 181.688542][T10524] active_anon 0 [ 181.692095][T10524] inactive_file 0 [ 181.695825][T10524] active_file 20480 [ 181.699749][T10524] unevictable 0 [ 181.703319][T10524] hierarchical_memory_limit 314572800 [ 181.708863][T10524] hierarchical_memsw_limit 9223372036854771712 [ 181.715248][T10524] total_cache 69025792 [ 181.719372][T10524] total_rss 200704 [ 181.723227][T10524] total_shmem 69021696 [ 181.727311][T10524] total_mapped_file 4096 [ 181.731695][T10524] total_dirty 4096 [ 181.735460][T10524] total_writeback 0 [ 181.739400][T10524] total_workingset_refault_anon 272 [ 181.744712][T10524] total_workingset_refault_file 33 [ 181.749894][T10524] total_swap 0 [ 181.753417][T10524] total_swapcached 0 [ 181.757473][T10524] total_pgpgin 149148 [ 181.758147][T10570] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 181.761575][T10524] total_pgpgout 132243 [ 181.768127][T10570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.772230][T10524] total_pgfault 147609 [ 181.779831][T10570] vhci_hcd vhci_hcd.0: Device attached [ 181.783829][T10524] total_pgmajfault 40 [ 181.783841][T10524] total_inactive_anon 69222400 [ 181.798496][T10524] total_active_anon 0 [ 181.802537][T10524] total_inactive_file 0 [ 181.806796][T10524] total_active_file 20480 [ 181.811262][T10524] total_unevictable 0 [ 181.815325][T10524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6/syz1,task=syz.6.2282,pid=10522,uid=0 [ 181.829179][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.830513][T10524] Memory cgroup out of memory: Killed process 10524 (syz.6.2282) total-vm:95800kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 181.850112][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.888304][T10570] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 181.895117][T10570] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 181.902819][T10570] vhci_hcd vhci_hcd.0: Device attached [ 181.940615][T10570] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(15) [ 181.947382][T10570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.955170][T10570] vhci_hcd vhci_hcd.0: Device attached [ 181.983794][T10571] vhci_hcd: connection closed [ 181.983841][T10575] vhci_hcd: connection closed [ 181.989018][ T6713] vhci_hcd: stop threads [ 181.998440][ T6713] vhci_hcd: release socket [ 182.002962][ T6713] vhci_hcd: disconnect device [ 182.018387][T10573] vhci_hcd: connection closed [ 182.018764][ T6713] vhci_hcd: stop threads [ 182.028207][ T6713] vhci_hcd: release socket [ 182.032955][ T6713] vhci_hcd: disconnect device [ 182.039060][ T3413] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 182.047164][ T3413] usb 15-1: enqueue for inactive port 0 [ 182.047283][ T6713] vhci_hcd: stop threads [ 182.057243][ T6713] vhci_hcd: release socket [ 182.061730][ T6713] vhci_hcd: disconnect device [ 182.068691][ T3413] usb 15-1: enqueue for inactive port 0 [ 182.085248][ T3413] usb 15-1: enqueue for inactive port 0 [ 182.268783][ T3413] vhci_hcd: vhci_device speed not set [ 183.617714][T10598] lo speed is unknown, defaulting to 1000 [ 183.654704][T10598] lo speed is unknown, defaulting to 1000 [ 183.726222][T10590] loop5: detected capacity change from 0 to 512 [ 183.733078][T10590] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.739582][T10590] EXT4-fs: Ignoring removed bh option [ 183.785711][T10590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.814084][T10590] EXT4-fs (loop5): 1 truncate cleaned up [ 183.820676][T10590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.867036][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2299'. [ 183.941098][T10606] netlink: 'syz.3.2300': attribute type 27 has an invalid length. [ 184.068518][T10609] random: crng reseeded on system resumption [ 184.078594][T10606] wg2: left promiscuous mode [ 184.083375][T10606] wg2: left allmulticast mode [ 184.101529][T10609] loop7: detected capacity change from 0 to 512 [ 184.109439][T10604] __nla_validate_parse: 1 callbacks suppressed [ 184.109453][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2299'. [ 184.135708][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.148068][T10609] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2301: bad orphan inode 11 [ 184.150750][ T4721] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.165801][T10609] ext4_test_bit(bit=10, block=4) = 1 [ 184.171288][T10609] is_bad_inode(inode)=0 [ 184.175488][T10609] NEXT_ORPHAN(inode)=2080374784 [ 184.177699][ T4721] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.180367][T10609] max_ino=32 [ 184.180380][T10609] i_nlink=0 [ 184.190149][T10609] EXT4-fs (loop7): 1 truncate cleaned up [ 184.196036][T10615] loop5: detected capacity change from 0 to 1024 [ 184.197585][T10609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.220697][T10615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.247212][T10615] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.270448][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.455298][T10626] loop3: detected capacity change from 0 to 1024 [ 184.481709][T10626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.571804][T10631] lo speed is unknown, defaulting to 1000 [ 184.632152][T10631] lo speed is unknown, defaulting to 1000 [ 184.771928][T10631] loop7: detected capacity change from 0 to 512 [ 184.778666][T10631] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.785311][T10631] EXT4-fs: Ignoring removed bh option [ 184.870800][T10631] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.883661][T10631] EXT4-fs (loop7): 1 truncate cleaned up [ 184.890738][T10631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.051885][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.075693][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.078674][T10638] netlink: 'syz.9.2319': attribute type 13 has an invalid length. [ 185.110285][T10638] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 185.119869][T10638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.223669][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.237235][T10647] netlink: '+}[@': attribute type 3 has an invalid length. [ 185.313143][T10652] netlink: 'syz.9.2313': attribute type 27 has an invalid length. [ 185.338377][T10652] $Hÿ: left promiscuous mode [ 185.343421][T10652] bond_slave_0: left promiscuous mode [ 185.349229][T10652] bond_slave_1: left promiscuous mode [ 185.366438][ T3389] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 185.366627][T10652] macsec0: left promiscuous mode [ 185.375636][ T3389] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.380459][T10652] xfrm1: left promiscuous mode [ 185.393835][T10652] xfrm1: left allmulticast mode [ 185.484299][T10665] bridge0: entered allmulticast mode [ 185.520330][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 185.559307][T10665] bridge_slave_1: left allmulticast mode [ 185.565833][T10665] bridge_slave_1: left promiscuous mode [ 185.574284][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.589818][T10665] bridge_slave_0: left allmulticast mode [ 185.596187][T10665] bridge_slave_0: left promiscuous mode [ 185.603919][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.664852][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 185.706771][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 185.770761][T10673] loop5: detected capacity change from 0 to 256 [ 185.839461][T10674] dvmrp1: entered allmulticast mode [ 185.849666][T10674] dvmrp1: left allmulticast mode [ 185.902969][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 185.902987][ T29] audit: type=1326 audit(1749464239.249:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.3.2322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0dbdce929 code=0x0 [ 186.187828][T10685] loop5: detected capacity change from 0 to 512 [ 186.203240][T10685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.215990][T10685] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.376769][T10684] loop6: detected capacity change from 0 to 164 [ 187.012669][T10684] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 187.164581][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.203422][ T29] audit: type=1326 audit(1749464240.539:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.227047][ T29] audit: type=1326 audit(1749464240.539:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.250621][ T29] audit: type=1326 audit(1749464240.539:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.274078][ T29] audit: type=1326 audit(1749464240.539:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.297729][ T29] audit: type=1326 audit(1749464240.539:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.321342][ T29] audit: type=1326 audit(1749464240.549:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.344791][ T29] audit: type=1326 audit(1749464240.549:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.368445][ T29] audit: type=1326 audit(1749464240.549:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.392074][ T29] audit: type=1326 audit(1749464240.549:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.6.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc6ff9de929 code=0x7ffc0000 [ 187.432665][T10698] netlink: 'syz.5.2326': attribute type 13 has an invalid length. [ 187.489237][T10698] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 187.499057][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.786270][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 187.795365][ T3413] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.832182][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2330'. [ 187.841415][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2330'. [ 187.850430][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2330'. [ 187.860623][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2330'. [ 188.009363][T10715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=10715 comm=syz.7.2331 [ 188.039486][T10715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10715 comm=syz.7.2331 [ 188.052375][T10715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10715 comm=syz.7.2331 [ 188.530457][T10720] loop6: detected capacity change from 0 to 164 [ 188.621182][T10728] loop3: detected capacity change from 0 to 512 [ 188.628199][T10728] EXT4-fs: Ignoring removed i_version option [ 188.635186][T10728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.647822][T10728] EXT4-fs (loop3): 1 truncate cleaned up [ 188.654853][T10728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.707001][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.730921][T10741] loop6: detected capacity change from 0 to 1024 [ 188.740209][T10741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.817180][T10747] netlink: 'syz.7.2342': attribute type 13 has an invalid length. [ 188.854353][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.865015][T10747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.890702][ T3413] lo speed is unknown, defaulting to 1000 [ 188.896518][ T3413] syz2: Port: 1 Link ACTIVE [ 189.049367][T10752] dvmrp1: entered allmulticast mode [ 189.077212][T10752] dvmrp1: left allmulticast mode [ 189.590155][T10755] hub 1-0:1.0: USB hub found [ 189.602966][T10755] hub 1-0:1.0: 8 ports detected [ 189.843537][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.871589][T10761] loop7: detected capacity change from 0 to 1024 [ 190.014549][T10761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.060876][T10778] lo speed is unknown, defaulting to 1000 [ 191.129196][T10778] lo speed is unknown, defaulting to 1000 [ 191.398194][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 191.398227][ T29] audit: type=1326 audit(1749464244.739:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.471308][ T29] audit: type=1326 audit(1749464244.779:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.495073][ T29] audit: type=1326 audit(1749464244.779:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.518806][ T29] audit: type=1326 audit(1749464244.779:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.542818][ T29] audit: type=1326 audit(1749464244.779:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.566369][ T29] audit: type=1326 audit(1749464244.779:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.590214][ T29] audit: type=1326 audit(1749464244.779:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.613837][ T29] audit: type=1326 audit(1749464244.779:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.637498][ T29] audit: type=1326 audit(1749464244.789:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.661033][ T29] audit: type=1326 audit(1749464244.789:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b42a3e929 code=0x7ffc0000 [ 191.892788][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.902046][T10795] loop5: detected capacity change from 0 to 2048 [ 191.919883][T10795] loop5: p1 < > p4 [ 191.929695][T10795] loop5: p4 size 8388608 extends beyond EOD, truncated [ 191.994204][T10806] loop3: detected capacity change from 0 to 256 [ 192.050324][T10809] netlink: 'syz.6.2360': attribute type 1 has an invalid length. [ 192.058119][T10809] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2360'. [ 192.451384][T10819] loop7: detected capacity change from 0 to 2048 [ 192.458707][T10819] EXT4-fs: Ignoring removed nobh option [ 192.470792][T10819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.760908][T10830] lo speed is unknown, defaulting to 1000 [ 192.823071][T10830] lo speed is unknown, defaulting to 1000 [ 193.536095][ T4162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.599502][T10838] tmpfs: Unknown parameter '/dev/ppp' [ 193.854305][T10848] hub 1-0:1.0: USB hub found [ 193.868254][T10848] hub 1-0:1.0: 8 ports detected [ 194.243384][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2374'. [ 194.263512][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2374'. [ 194.351762][T10866] lo speed is unknown, defaulting to 1000 [ 194.388309][T10866] lo speed is unknown, defaulting to 1000 [ 194.488773][T10863] loop7: detected capacity change from 0 to 164 [ 194.544148][T10863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.565099][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2374'. [ 194.780121][T10856] loop3: detected capacity change from 0 to 1024 [ 194.798012][T10856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.829104][T10873] netlink: 'syz.7.2389': attribute type 10 has an invalid length. [ 194.829122][T10873] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2389'. [ 194.829142][T10873] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 194.829896][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2389'. [ 194.843097][T10873] loop7: detected capacity change from 0 to 736 [ 194.843439][T10873] iso9660: Unknown parameter 'kvm_dirty_ring_exit' [ 194.881687][T10873] netlink: 'syz.7.2389': attribute type 27 has an invalid length. [ 194.924191][T10873] sit0: left allmulticast mode [ 194.945492][ T4701] lo speed is unknown, defaulting to 1000 [ 194.945513][ T4701] syz2: Port: 1 Link DOWN [ 195.062426][T10856] ================================================================== [ 195.062465][T10856] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 195.062519][T10856] [ 195.062527][T10856] read-write to 0xffff88811a8ac730 of 8 bytes by task 10878 on cpu 0: [ 195.062549][T10856] __filemap_remove_folio+0x1bc/0x2a0 [ 195.062583][T10856] folio_unmap_invalidate+0x1dd/0x360 [ 195.062610][T10856] invalidate_inode_pages2_range+0x27c/0x3d0 [ 195.062639][T10856] filemap_invalidate_pages+0x16d/0x1a0 [ 195.062672][T10856] kiocb_invalidate_pages+0x6e/0x80 [ 195.062707][T10856] __iomap_dio_rw+0x5d4/0x1250 [ 195.062745][T10856] iomap_dio_rw+0x40/0x90 [ 195.062785][T10856] ext4_file_write_iter+0xad9/0xf00 [ 195.062816][T10856] iter_file_splice_write+0x5f2/0x970 [ 195.062866][T10856] direct_splice_actor+0x156/0x2a0 [ 195.062907][T10856] splice_direct_to_actor+0x312/0x680 [ 195.062949][T10856] do_splice_direct+0xda/0x150 [ 195.062989][T10856] do_sendfile+0x380/0x650 [ 195.063028][T10856] __x64_sys_sendfile64+0x105/0x150 [ 195.063060][T10856] x64_sys_call+0xb39/0x2fb0 [ 195.063086][T10856] do_syscall_64+0xd2/0x200 [ 195.063107][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.063128][T10856] [ 195.063133][T10856] read to 0xffff88811a8ac730 of 8 bytes by task 10856 on cpu 1: [ 195.063149][T10856] filemap_write_and_wait_range+0x59/0x340 [ 195.063185][T10856] ext4_file_write_iter+0xe04/0xf00 [ 195.063217][T10856] iter_file_splice_write+0x5f2/0x970 [ 195.063258][T10856] direct_splice_actor+0x156/0x2a0 [ 195.063298][T10856] splice_direct_to_actor+0x312/0x680 [ 195.063335][T10856] do_splice_direct+0xda/0x150 [ 195.063365][T10856] do_sendfile+0x380/0x650 [ 195.063392][T10856] __x64_sys_sendfile64+0x105/0x150 [ 195.063420][T10856] x64_sys_call+0xb39/0x2fb0 [ 195.063441][T10856] do_syscall_64+0xd2/0x200 [ 195.063472][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.063499][T10856] [ 195.063504][T10856] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 195.063518][T10856] [ 195.063523][T10856] Reported by Kernel Concurrency Sanitizer on: [ 195.063549][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.3.2372 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 195.063583][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.063600][T10856] ================================================================== [ 195.296470][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.766648][T10892] lo speed is unknown, defaulting to 1000 [ 195.805654][T10892] lo speed is unknown, defaulting to 1000