last executing test programs: 5.689970112s ago: executing program 2 (id=1327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xbe}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000300)='./file1\x00', 0x214000, &(0x7f00000004c0), 0xfc, 0x587, &(0x7f0000002100)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, 0x0, 0x26, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 5.653354863s ago: executing program 2 (id=1328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@newtaction={0xfb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfa0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x8}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x1}, {}, {0x0, 0xfe}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x0, 0x0, 0x0, 0x675, 0x8}, {0x0, 0x0, 0x0, 0x3}, {0x9}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x3ff}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {0x0, 0x80000}, {}, {}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0xfc, 0x1a, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x3, 0x7f, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'pedit\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4a, 0x10000000, 0x400, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x6, 0x388}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x10000000, 0xa8000000, 0xffff7fff}}]}, {0x52, 0x6, "58f532bcbc510c48eac376db6e0a913409f74dfe54bc8dec16ca7a65f99df045fb179b8a7bc33c27f203dc0c734c4fc547a4074584c525c1e1f245c416df11bc3393cf877592af8be79e47774273"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xfb4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_get$pid(0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) 4.770897485s ago: executing program 2 (id=1339): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) msgrcv(0x0, 0x0, 0x0, 0x6, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0xffffff69, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x9, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3429, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x80001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x2, 0xf4cd]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x4}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pread64(r8, &(0x7f0000033240)=""/102396, 0x19051, 0x7fffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r10) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r10, 0x4004550d, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.800114428s ago: executing program 4 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") 3.753478129s ago: executing program 0 (id=1357): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0xffffffffffffffcd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000007e0000007e00000004000000010000000000000803000000040080000000000f02000000e80f0200000000000010040000000700000000000007000000000c0000000000000e02000000010000000700000035ce000012000000040000000a000000090000000700000003000000090000000000000e05000000026100000000000000000000000000383e216924f2"], &(0x7f00000007c0)=""/228, 0x9c, 0xe4, 0x1, 0x9, 0x10000, @value=r1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000077340000000000000800001718110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000ca3f40a36c6aa461d3b9d4a69d8c10c69f07e5f2c9985044d5a71783011ca12a9b5a9a159300647e88b8a0f0e56bb33c76d85693d4f480f97a8f9276a82f100d98483c3dda22fc7cf6d814e6e7ae1a156d0e378b82a0852b0840f8301000000e90638b68110c16f16a8b3f7ac52"], 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010047bd7000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.65688052s ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x1000}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) 3.566841201s ago: executing program 4 (id=1360): rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 3.136612497s ago: executing program 0 (id=1364): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r0, r0, 0x0, 0xb) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000540)='()+\\^\x00') r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200f3ffffffff06020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.022216619s ago: executing program 0 (id=1366): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x1c8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.92627127s ago: executing program 1 (id=1367): socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 2.88591992s ago: executing program 1 (id=1368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2.816754412s ago: executing program 1 (id=1369): socket(0x10, 0x80002, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) 2.674123333s ago: executing program 4 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 2.542216265s ago: executing program 1 (id=1372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") 2.391067427s ago: executing program 3 (id=1373): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) move_pages(0x0, 0xfffffffffffffeae, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c010000100001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100020000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5, 0x0, 0x400000000}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f0000000580)) 2.082756372s ago: executing program 3 (id=1374): unshare(0x22020600) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200006600000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(0x0, 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000009c2c"], 0x48) clock_adjtime(0x2, &(0x7f00000004c0)={0x8, 0x9, 0x8, 0x3, 0x1, 0x80, 0x81, 0xde, 0x1, 0x1, 0x0, 0xd6, 0xdd05, 0x80, 0x1, 0x6, 0x46, 0x1, 0x9, 0x8, 0x7, 0x36, 0x0, 0x1}) 2.031856002s ago: executing program 0 (id=1375): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x800002, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) 1.780018185s ago: executing program 3 (id=1376): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0xffffffffffffffcd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000007e0000007e00000004000000010000000000000803000000040080000000000f02000000e80f0200000000000010040000000700000000000007000000000c0000000000000e02000000010000000700000035ce000012000000040000000a000000090000000700000003000000090000000000000e05000000026100000000000000000000000000383e216924f2"], &(0x7f00000007c0)=""/228, 0x9c, 0xe4, 0x1, 0x9, 0x10000, @value=r1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000077340000000000000800001718110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000ca3f40a36c6aa461d3b9d4a69d8c10c69f07e5f2c9985044d5a71783011ca12a9b5a9a159300647e88b8a0f0e56bb33c76d85693d4f480f97a8f9276a82f100d98483c3dda22fc7cf6d814e6e7ae1a156d0e378b82a0852b0840f8301000000e90638b68110c16f16a8b3f7ac52"], 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010047bd7000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.774313206s ago: executing program 4 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 1.720641496s ago: executing program 2 (id=1378): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0xfffffffe, 0x80, 0x400002, 0x9c}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r4, 0x264b, 0x4, 0x1, 0x0, 0x0) 1.650074617s ago: executing program 0 (id=1379): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.553432329s ago: executing program 1 (id=1380): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000004000008510000006000000180200", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x13ba2000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8c7) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.46535285s ago: executing program 2 (id=1381): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0xffffffffffffffcd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000007e0000007e00000004000000010000000000000803000000040080000000000f02000000e80f0200000000000010040000000700000000000007000000000c0000000000000e02000000010000000700000035ce000012000000040000000a000000090000000700000003000000090000000000000e05000000026100000000000000000000000000383e216924f2"], &(0x7f00000007c0)=""/228, 0x9c, 0xe4, 0x1, 0x9, 0x10000, @value=r1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000077340000000000000800001718110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000ca3f40a36c6aa461d3b9d4a69d8c10c69f07e5f2c9985044d5a71783011ca12a9b5a9a159300647e88b8a0f0e56bb33c76d85693d4f480f97a8f9276a82f100d98483c3dda22fc7cf6d814e6e7ae1a156d0e378b82a0852b0840f8301000000e90638b68110c16f16a8b3f7ac52"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010047bd7000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.225713013s ago: executing program 1 (id=1382): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x76}, 0xe) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) 1.130601514s ago: executing program 3 (id=1383): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 609.964442ms ago: executing program 4 (id=1384): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 600.081012ms ago: executing program 0 (id=1385): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x1c8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 345.042265ms ago: executing program 2 (id=1386): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x1c8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 142.660328ms ago: executing program 3 (id=1387): unshare(0x22020600) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200006600000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(0x0, 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000009c2c"], 0x48) clock_adjtime(0x2, &(0x7f00000004c0)={0x8, 0x9, 0x8, 0x3, 0x1, 0x80, 0x81, 0xde, 0x1, 0x1, 0x0, 0xd6, 0xdd05, 0x80, 0x1, 0x6, 0x46, 0x1, 0x9, 0x8, 0x7, 0x36, 0x0, 0x1}) 0s ago: executing program 3 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) kernel console output (not intermixed with test programs): (loop3): 1 truncate cleaned up [ 116.014622][ T5858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.027487][ T5859] loop0: detected capacity change from 0 to 256 [ 116.046225][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.219140][ T5867] vlan2: entered promiscuous mode [ 116.225208][ T5867] team0: entered promiscuous mode [ 116.230971][ T5867] team_slave_0: entered promiscuous mode [ 116.265879][ T5872] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 116.333367][ T5875] loop0: detected capacity change from 0 to 256 [ 116.397826][ T5876] loop3: detected capacity change from 0 to 2048 [ 116.409013][ T5875] syz.0.747: attempt to access beyond end of device [ 116.409013][ T5875] loop0: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 116.432010][ T5875] syz.0.747: attempt to access beyond end of device [ 116.432010][ T5875] loop0: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 116.446151][ T5875] syz.0.747: attempt to access beyond end of device [ 116.446151][ T5875] loop0: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 116.461791][ T5875] syz.0.747: attempt to access beyond end of device [ 116.461791][ T5875] loop0: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 116.513798][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.586489][ T29] audit: type=1400 audit(1746558985.366:2997): avc: denied { create } for pid=5865 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.622479][ T29] audit: type=1400 audit(1746558985.396:2998): avc: denied { create } for pid=5873 comm="syz.3.748" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.642885][ T29] audit: type=1326 audit(1746558985.396:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 116.666360][ T29] audit: type=1326 audit(1746558985.396:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 116.689722][ T29] audit: type=1400 audit(1746558985.396:3001): avc: denied { ioctl } for pid=5865 comm="syz.1.756" path="socket:[14718]" dev="sockfs" ino=14718 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.733309][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.742393][ T29] audit: type=1326 audit(1746558985.406:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 116.765971][ T29] audit: type=1326 audit(1746558985.406:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 117.300674][ T5895] loop1: detected capacity change from 0 to 1024 [ 117.326081][ T5895] EXT4-fs: inline encryption not supported [ 117.334362][ T5895] EXT4-fs: Ignoring removed bh option [ 117.344338][ T5895] EXT4-fs: Ignoring removed orlov option [ 117.355302][ T5895] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 117.380711][ T5904] loop0: detected capacity change from 0 to 512 [ 117.387492][ T5904] EXT4-fs: Ignoring removed nobh option [ 117.394733][ T5904] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 117.433120][ T5904] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.759: attempt to clear invalid blocks 2 len 1 [ 117.455584][ T5904] EXT4-fs (loop0): Remounting filesystem read-only [ 117.466423][ T5914] __nla_validate_parse: 8 callbacks suppressed [ 117.466442][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.481794][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.497178][ T5904] EXT4-fs (loop0): 1 truncate cleaned up [ 117.498097][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.510645][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.511814][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.538888][ T5917] program syz.3.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.548399][ T5917] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 117.574477][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.584188][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 117.600955][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.619944][ T5921] loop2: detected capacity change from 0 to 2048 [ 117.647923][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.696526][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.772876][ T5934] SELinux: ebitmap: truncated map [ 117.794117][ T5934] SELinux: failed to load policy [ 117.897553][ T5950] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.916606][ T5952] loop4: detected capacity change from 0 to 512 [ 117.925933][ T5952] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.936789][ T5955] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 117.938010][ T5952] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.775: bg 0: block 248: padding at end of block bitmap is not set [ 117.979575][ T5952] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.775: Failed to acquire dquot type 1 [ 117.995245][ T5959] loop1: detected capacity change from 0 to 2048 [ 117.997304][ T5952] EXT4-fs (loop4): 1 truncate cleaned up [ 118.053107][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.109699][ T5952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.145222][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.212521][ T5955] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.221077][ T5955] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.229487][ T5955] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.238115][ T5955] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.267741][ T5950] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.281946][ T5976] SELinux: failed to load policy [ 118.285537][ T5952] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 118.320316][ T5952] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 118.352757][ T5950] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.396407][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.421752][ T5950] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.495587][ T5950] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.534544][ T5988] loop4: detected capacity change from 0 to 512 [ 118.535323][ T5950] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.561877][ T5950] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.570466][ T5988] EXT4-fs: Ignoring removed nobh option [ 118.573826][ T5950] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.612794][ T6001] program syz.2.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.623637][ T5988] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 118.631940][ T6001] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.665029][ T5988] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.782: attempt to clear invalid blocks 2 len 1 [ 118.678087][ T5988] EXT4-fs (loop4): Remounting filesystem read-only [ 118.685875][ T5988] EXT4-fs (loop4): 1 truncate cleaned up [ 118.692430][ T5988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.736836][ T6010] loop2: detected capacity change from 0 to 512 [ 118.743543][ T6010] EXT4-fs: Ignoring removed bh option [ 118.749342][ T6010] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 118.776677][ T6017] loop4: detected capacity change from 0 to 512 [ 118.783907][ T6017] EXT4-fs: Ignoring removed nobh option [ 118.789579][ T6017] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.796212][ T6010] EXT4-fs (loop2): 1 truncate cleaned up [ 118.826368][ T6017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.858710][ T6017] EXT4-fs (loop4): 1 truncate cleaned up [ 118.927579][ T6029] loop4: detected capacity change from 0 to 512 [ 118.956691][ T6031] loop1: detected capacity change from 0 to 512 [ 118.963604][ T6029] journal_path: Lookup failure for './file0/../file0' [ 118.970444][ T6029] EXT4-fs: error: could not find journal device path [ 119.007332][ T6031] EXT4-fs (loop1): 1 orphan inode deleted [ 119.013757][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'. [ 119.023173][ T310] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 119.031448][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'. [ 119.035231][ T6031] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.067452][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'. [ 119.092602][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'. [ 119.188295][ T6049] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.201983][ T6045] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 119.217779][ T6051] loop4: detected capacity change from 0 to 164 [ 119.225176][ T6051] ISOFS: unable to read i-node block [ 119.230654][ T6051] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 119.241338][ T6049] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.292289][ T6049] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.371692][ T6049] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.374445][ T6067] loop4: detected capacity change from 0 to 512 [ 119.388211][ T6067] EXT4-fs: Ignoring removed bh option [ 119.391245][ T6065] netlink: 'syz.1.808': attribute type 13 has an invalid length. [ 119.394401][ T6067] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 119.411561][ T6067] EXT4-fs (loop4): 1 truncate cleaned up [ 119.500309][ T5969] page_pool_release_retry() stalled pool shutdown: id 29, 50 inflight 60 sec [ 119.511907][ T6069] loop0: detected capacity change from 0 to 128 [ 119.571244][ T6069] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.586593][ T6065] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.595287][ T6065] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.604008][ T6065] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.612634][ T6065] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.638937][ T6049] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.651221][ T6049] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.673523][ T6049] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.685635][ T6049] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.803163][ T6075] loop1: detected capacity change from 0 to 2048 [ 119.831146][ T6075] loop1: p1 < > p4 [ 119.880449][ T6075] loop1: p4 size 8388608 extends beyond EOD, truncated [ 119.919026][ T6079] SELinux: ebitmap: truncated map [ 119.920304][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.931792][ T6079] SELinux: failed to load policy [ 119.932966][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.950973][ T6075] futex_wake_op: syz.1.809 tries to shift op by -1; fix this program [ 120.163021][ T6086] loop0: detected capacity change from 0 to 512 [ 120.201558][ T6086] EXT4-fs (loop0): 1 orphan inode deleted [ 120.216606][ T6086] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.233691][ T1578] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 120.259341][ T6097] loop1: detected capacity change from 0 to 512 [ 120.266242][ T6099] /dev/nullb0: Can't lookup blockdev [ 120.278763][ T6097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.293514][ T6097] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.820: bg 0: block 248: padding at end of block bitmap is not set [ 120.320017][ T6099] loop4: detected capacity change from 0 to 512 [ 120.327039][ T6097] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.820: Failed to acquire dquot type 1 [ 120.327583][ T6097] EXT4-fs (loop1): 1 truncate cleaned up [ 120.348383][ T6099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.364866][ T6097] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 120.375213][ T6099] EXT4-fs (loop4): 1 truncate cleaned up [ 120.391936][ T6097] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 120.400912][ T6099] xt_hashlimit: max too large, truncated to 1048576 [ 120.581450][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.704263][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.739594][ T6124] loop0: detected capacity change from 0 to 2048 [ 120.790819][ T6124] loop0: p1 < > p4 [ 120.802320][ T6099] Cannot find add_set index 3 as target [ 120.808530][ T6124] loop0: p4 size 8388608 extends beyond EOD, truncated [ 120.884997][ T6127] loop2: detected capacity change from 0 to 128 [ 120.924280][ T6127] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.941538][ T6124] futex_wake_op: syz.0.826 tries to shift op by -1; fix this program [ 121.160560][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 121.160646][ T29] audit: type=1326 audit(1746558989.946:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 121.207240][ T29] audit: type=1326 audit(1746558989.976:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 121.230856][ T29] audit: type=1326 audit(1746558989.976:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 121.254377][ T29] audit: type=1326 audit(1746558989.976:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 121.278318][ T29] audit: type=1326 audit(1746558989.976:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 121.310167][ T29] audit: type=1326 audit(1746558989.986:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 121.333687][ T29] audit: type=1326 audit(1746558989.986:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 121.357095][ T29] audit: type=1326 audit(1746558989.986:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 121.380594][ T29] audit: type=1326 audit(1746558989.986:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 121.404009][ T29] audit: type=1326 audit(1746558989.986:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 121.993316][ T6140] loop3: detected capacity change from 0 to 512 [ 122.006191][ T6140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.013355][ T6140] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.835: bg 0: block 248: padding at end of block bitmap is not set [ 122.028540][ T6140] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.835: Failed to acquire dquot type 1 [ 122.046947][ T6140] EXT4-fs (loop3): 1 truncate cleaned up [ 122.086348][ T6140] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 122.101419][ T6140] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 122.195995][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.216324][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.241832][ T6178] dummy0: entered promiscuous mode [ 122.256177][ T6178] team0: entered promiscuous mode [ 122.261343][ T6178] team_slave_0: entered promiscuous mode [ 122.267286][ T6178] team_slave_1: entered promiscuous mode [ 122.290248][ T6178] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 122.303366][ T6178] Cannot create hsr debugfs directory [ 122.310017][ T6178] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 122.313353][ T6177] loop2: detected capacity change from 0 to 8192 [ 122.319986][ T6178] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 122.467419][ T6182] loop3: detected capacity change from 0 to 512 [ 122.481006][ T6182] journal_path: Lookup failure for './file0/../file0' [ 122.487890][ T6182] EXT4-fs: error: could not find journal device path [ 123.853855][ T6208] SELinux: failed to load policy [ 123.882954][ T6209] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 123.971982][ T6209] SELinux: failed to load policy [ 124.183600][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.228250][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.266138][ T6221] hub 2-0:1.0: USB hub found [ 124.271240][ T6221] hub 2-0:1.0: 8 ports detected [ 124.389936][ T6229] loop3: detected capacity change from 0 to 256 [ 124.475129][ T6231] loop0: detected capacity change from 0 to 8192 [ 125.065511][ T6240] loop1: detected capacity change from 0 to 512 [ 125.144836][ T6240] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.181799][ T6240] program syz.1.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.191270][ T6240] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.382797][ T6247] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.864: corrupted inode contents [ 125.395240][ T6247] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #19: comm syz.1.864: mark_inode_dirty error [ 125.406876][ T6247] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.864: corrupted inode contents [ 125.419094][ T6247] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.864: mark_inode_dirty error [ 125.431414][ T6247] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.864: mark inode dirty (error -117) [ 125.444258][ T6247] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 126.059271][ T6256] SELinux: ebitmap: truncated map [ 126.070598][ T6256] SELinux: failed to load policy [ 126.090767][ T6259] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.099813][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.108607][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.113179][ T6262] @ÿ: renamed from veth0_vlan [ 126.126063][ T6259] vlan2: entered allmulticast mode [ 126.771342][ T6268] loop2: detected capacity change from 0 to 128 [ 126.910608][ T6272] SELinux: failed to load policy [ 127.349069][ T6275] syz.2.871: attempt to access beyond end of device [ 127.349069][ T6275] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 127.397687][ T6275] syz.2.871: attempt to access beyond end of device [ 127.397687][ T6275] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 127.440151][ T6275] syz.2.871: attempt to access beyond end of device [ 127.440151][ T6275] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 127.569504][ T6275] syz.2.871: attempt to access beyond end of device [ 127.569504][ T6275] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 127.582962][ T6275] syz.2.871: attempt to access beyond end of device [ 127.582962][ T6275] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 127.596355][ T6275] syz.2.871: attempt to access beyond end of device [ 127.596355][ T6275] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 127.609803][ T6275] syz.2.871: attempt to access beyond end of device [ 127.609803][ T6275] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 127.623360][ T6275] syz.2.871: attempt to access beyond end of device [ 127.623360][ T6275] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 127.636738][ T6275] syz.2.871: attempt to access beyond end of device [ 127.636738][ T6275] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 127.653478][ T6278] loop1: detected capacity change from 0 to 256 [ 127.668897][ T6275] syz.2.871: attempt to access beyond end of device [ 127.668897][ T6275] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 128.059279][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 128.059370][ T29] audit: type=1400 audit(1746558996.836:3148): avc: denied { write } for pid=6283 comm="syz.3.876" name="rt_acct" dev="proc" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 128.500713][ T6284] __nla_validate_parse: 20 callbacks suppressed [ 128.500730][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 128.862845][ T6285] SELinux: policydb magic number 0x2f74656e does not match expected magic number 0xf97cff8c [ 128.892440][ T6285] SELinux: failed to load policy [ 128.904072][ T29] audit: type=1400 audit(1746558997.296:3149): avc: denied { write } for pid=6283 comm="syz.3.876" path="socket:[16734]" dev="sockfs" ino=16734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.093272][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 129.116820][ T6303] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 129.134163][ T29] audit: type=1400 audit(1746558997.896:3150): avc: denied { search } for pid=6302 comm="syz.0.881" name="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.156563][ T6303] loop0: detected capacity change from 0 to 512 [ 129.165314][ T29] audit: type=1326 audit(1746558997.936:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.4.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x0 [ 129.211826][ T6305] @ÿ: renamed from veth0_vlan [ 129.358209][ T6308] loop1: detected capacity change from 0 to 128 [ 129.377643][ T6308] EXT4-fs mount: 23 callbacks suppressed [ 129.377663][ T6308] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.396399][ T6308] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.944353][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.977353][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.986423][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.025951][ T6319] SELinux: failed to load policy [ 130.080980][ T29] audit: type=1326 audit(1746558998.866:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 130.105745][ T29] audit: type=1326 audit(1746558998.886:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 130.129160][ T29] audit: type=1326 audit(1746558998.886:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 130.152630][ T29] audit: type=1326 audit(1746558998.886:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 130.180233][ T6327] loop3: detected capacity change from 0 to 128 [ 130.407305][ T6333] loop0: detected capacity change from 0 to 8192 [ 130.421235][ T6336] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 130.430926][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.439588][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.453965][ T6336] vlan2: entered allmulticast mode [ 131.253851][ T29] audit: type=1326 audit(1746559000.036:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 131.322362][ T29] audit: type=1326 audit(1746559000.056:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 131.644737][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 131.771849][ T6365] netlink: 'syz.4.905': attribute type 4 has an invalid length. [ 131.781742][ T6365] netlink: 'syz.4.905': attribute type 4 has an invalid length. [ 132.181931][ T6390] A link change request failed with some changes committed already. Interface 77ÿ may have been left with an inconsistent configuration, please check. [ 132.241231][ T6392] loop1: detected capacity change from 0 to 128 [ 132.646399][ T6398] loop3: detected capacity change from 0 to 1024 [ 132.678133][ T6398] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.689115][ T6398] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.707721][ T6392] bio_check_eod: 167 callbacks suppressed [ 132.707738][ T6392] syz.1.915: attempt to access beyond end of device [ 132.707738][ T6392] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 132.814619][ T6398] JBD2: no valid journal superblock found [ 132.820737][ T6398] EXT4-fs (loop3): Could not load journal inode [ 132.827603][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 132.839326][ T6392] syz.1.915: attempt to access beyond end of device [ 132.839326][ T6392] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 132.866660][ T6392] syz.1.915: attempt to access beyond end of device [ 132.866660][ T6392] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 132.930748][ T6392] syz.1.915: attempt to access beyond end of device [ 132.930748][ T6392] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 132.960250][ T6392] syz.1.915: attempt to access beyond end of device [ 132.960250][ T6392] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 132.975545][ T6392] syz.1.915: attempt to access beyond end of device [ 132.975545][ T6392] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 132.989599][ T6392] syz.1.915: attempt to access beyond end of device [ 132.989599][ T6392] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 133.003429][ T6392] syz.1.915: attempt to access beyond end of device [ 133.003429][ T6392] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 133.017241][ T6392] syz.1.915: attempt to access beyond end of device [ 133.017241][ T6392] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 133.030959][ T6392] syz.1.915: attempt to access beyond end of device [ 133.030959][ T6392] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 133.079365][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 133.079384][ T29] audit: type=1400 audit(1746559001.856:3271): avc: denied { create } for pid=6408 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.107352][ T6409] loop1: detected capacity change from 0 to 128 [ 133.118644][ T6410] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.126070][ T29] audit: type=1400 audit(1746559001.896:3272): avc: denied { create } for pid=6406 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 133.165954][ T29] audit: type=1326 audit(1746559001.946:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.189412][ T29] audit: type=1326 audit(1746559001.946:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.389881][ T29] audit: type=1326 audit(1746559001.996:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.413361][ T29] audit: type=1326 audit(1746559001.996:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.436864][ T29] audit: type=1326 audit(1746559001.996:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.460368][ T29] audit: type=1326 audit(1746559001.996:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.483694][ T29] audit: type=1326 audit(1746559001.996:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 133.507091][ T29] audit: type=1326 audit(1746559001.996:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde27acd2d0 code=0x7ffc0000 [ 133.523447][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.539296][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.558627][ T6414] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.570999][ T6420] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.585926][ T6419] vlan2: entered allmulticast mode [ 133.621636][ T6414] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.138184][ T6414] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.250847][ T6428] loop3: detected capacity change from 0 to 512 [ 134.258218][ T6428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.271914][ T6414] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.283480][ T6428] EXT4-fs (loop3): 1 truncate cleaned up [ 134.290923][ T6428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.353287][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.371357][ T6414] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.396478][ T6414] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.432135][ T6414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.477426][ T6414] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.733691][ T6444] loop3: detected capacity change from 0 to 2048 [ 134.751785][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.594828][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.612535][ T6453] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.613496][ T6451] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.630010][ T6453] SELinux: failed to load policy [ 135.636858][ T6453] loop0: detected capacity change from 0 to 128 [ 135.649912][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 135.662762][ T6453] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.691024][ T6453] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.746527][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 135.786967][ T6471] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.816031][ T6474] loop3: detected capacity change from 0 to 256 [ 135.844251][ T6471] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.882817][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.911687][ T6471] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.022131][ T6471] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.037632][ T6478] loop4: detected capacity change from 0 to 512 [ 136.044922][ T6478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.056959][ T6478] EXT4-fs (loop4): 1 truncate cleaned up [ 136.063642][ T6478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.123219][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.655096][ T6495] loop1: detected capacity change from 0 to 2048 [ 136.691694][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.909988][ T6501] loop3: detected capacity change from 0 to 256 [ 137.291299][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.341423][ T6515] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 137.358034][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 137.555904][ T6523] loop0: detected capacity change from 0 to 1024 [ 137.580008][ T6523] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.952: Failed to acquire dquot type 0 [ 137.591892][ T6523] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 137.607025][ T6523] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.952: corrupted inode contents [ 137.620426][ T6523] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.952: mark_inode_dirty error [ 137.632234][ T6523] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.952: corrupted inode contents [ 137.668527][ T6526] loop1: detected capacity change from 0 to 128 [ 137.697639][ T6526] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.710181][ T6526] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.770317][ T6523] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.952: mark_inode_dirty error [ 137.819853][ T6523] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.952: corrupted inode contents [ 137.925239][ T6523] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 137.978945][ T6523] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.952: corrupted inode contents [ 138.008069][ T6523] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.952: mark_inode_dirty error [ 138.025349][ T6523] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 138.070893][ T6523] EXT4-fs (loop0): 1 truncate cleaned up [ 138.077096][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.105437][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 138.105451][ T29] audit: type=1400 audit(1746559006.886:3591): avc: denied { remount } for pid=6520 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.131424][ T6522] EXT4-fs: Ignoring removed orlov option [ 138.137204][ T6522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.160540][ T6522] EXT4-fs (loop0): can't enable nombcache during remount [ 138.169497][ T29] audit: type=1400 audit(1746559006.946:3592): avc: denied { name_bind } for pid=6531 comm="syz.3.954" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 138.191163][ T29] audit: type=1400 audit(1746559006.946:3593): avc: denied { node_bind } for pid=6531 comm="syz.3.954" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 138.270342][ T6536] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 138.279568][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.288096][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.299744][ T6536] vlan2: entered allmulticast mode [ 138.345327][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.391188][ T29] audit: type=1326 audit(1746559007.176:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.414756][ T29] audit: type=1326 audit(1746559007.176:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.438132][ T29] audit: type=1326 audit(1746559007.176:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.461559][ T29] audit: type=1326 audit(1746559007.176:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.485347][ T29] audit: type=1326 audit(1746559007.196:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.520924][ T6540] loop1: detected capacity change from 0 to 8192 [ 138.570439][ T6540] loop1: p1 p2 < > p3 p4 < p5 > [ 138.575514][ T6540] loop1: partition table partially beyond EOD, truncated [ 138.582703][ T6540] loop1: p1 size 100663296 extends beyond EOD, truncated [ 138.590953][ T6540] loop1: p2 start 591104 is beyond EOD, truncated [ 138.597417][ T6540] loop1: p3 start 33572980 is beyond EOD, truncated [ 138.604549][ T6540] loop1: p5 size 100663296 extends beyond EOD, truncated [ 138.638545][ T29] audit: type=1326 audit(1746559007.416:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.661982][ T29] audit: type=1326 audit(1746559007.416:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 138.692285][ T6471] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.704289][ T6471] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.717130][ T6471] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.726340][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.747006][ T6471] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.302546][ T6553] SELinux: Context Ü is not valid (left unmapped). [ 139.443419][ T6557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.646472][ T6569] loop1: detected capacity change from 0 to 512 [ 139.663115][ T6569] EXT4-fs: Ignoring removed i_version option [ 139.676679][ T6569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.711862][ T6569] EXT4-fs (loop1): 1 truncate cleaned up [ 139.718026][ T6571] !: renamed from dummy0 [ 139.724627][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.917114][ T6576] loop2: detected capacity change from 0 to 8192 [ 139.934873][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.962468][ T6579] loop1: detected capacity change from 0 to 1024 [ 139.971495][ T6576] loop2: p1 p2 < > p3 p4 < p5 > [ 139.972458][ T6579] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.971: Failed to acquire dquot type 0 [ 139.976470][ T6576] loop2: partition table partially beyond EOD, truncated [ 139.988635][ T6579] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 139.995841][ T6576] loop2: p1 size 100663296 extends beyond EOD, truncated [ 140.009601][ T6579] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.971: corrupted inode contents [ 140.028860][ T6579] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.971: mark_inode_dirty error [ 140.037048][ T6576] loop2: p2 start 591104 is beyond EOD, truncated [ 140.041023][ T6579] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.971: corrupted inode contents [ 140.046599][ T6576] loop2: p3 start 33572980 is beyond EOD, truncated [ 140.058766][ T6579] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.971: mark_inode_dirty error [ 140.069691][ T6576] loop2: p5 size 100663296 extends beyond EOD, truncated [ 140.076781][ T6579] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.971: corrupted inode contents [ 140.095391][ T6579] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 140.112274][ T6579] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.971: corrupted inode contents [ 140.124459][ T6579] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.971: mark_inode_dirty error [ 140.139145][ T6579] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 140.152020][ T6579] EXT4-fs (loop1): 1 truncate cleaned up [ 140.158153][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.205806][ T6579] EXT4-fs: Ignoring removed orlov option [ 140.211815][ T6579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.221400][ T6579] EXT4-fs (loop1): can't enable nombcache during remount [ 140.752761][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.803690][ T6592] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 140.813069][ T6590] netlink: 'syz.0.974': attribute type 13 has an invalid length. [ 140.819607][ T6592] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 140.828782][ T6588] loop3: detected capacity change from 0 to 8192 [ 140.852200][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.861128][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.871610][ T6590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.995900][ T6597] loop1: detected capacity change from 0 to 128 [ 141.280356][ T6607] loop1: detected capacity change from 0 to 512 [ 141.330743][ T6607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.444780][ T6607] EXT4-fs (loop1): 1 truncate cleaned up [ 141.451443][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.308629][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.317660][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.326556][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.462134][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.471199][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.480104][ T6617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.984'. [ 143.028880][ T6629] loop2: detected capacity change from 0 to 512 [ 143.067361][ T6629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.092170][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.103181][ T6629] EXT4-fs (loop2): 1 truncate cleaned up [ 143.118147][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.137316][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 143.148819][ T6634] loop0: detected capacity change from 0 to 128 [ 143.155662][ T6634] EXT4-fs: Ignoring removed nobh option [ 143.161338][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 143.161352][ T29] audit: type=1400 audit(1746559011.926:3842): avc: denied { create } for pid=6633 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.187132][ T29] audit: type=1400 audit(1746559011.926:3843): avc: denied { connect } for pid=6633 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.219838][ T29] audit: type=1400 audit(1746559011.996:3844): avc: denied { write } for pid=6628 comm="syz.2.988" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.245481][ T29] audit: type=1400 audit(1746559011.996:3845): avc: denied { open } for pid=6637 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.248099][ T6634] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.264841][ T29] audit: type=1400 audit(1746559011.996:3846): avc: denied { kernel } for pid=6637 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.296268][ T29] audit: type=1400 audit(1746559012.056:3847): avc: denied { write } for pid=6637 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.315611][ T29] audit: type=1326 audit(1746559012.056:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 143.329955][ T6634] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.339089][ T29] audit: type=1326 audit(1746559012.056:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 143.372684][ T29] audit: type=1326 audit(1746559012.056:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 143.396143][ T29] audit: type=1326 audit(1746559012.056:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde27ace969 code=0x7ffc0000 [ 143.598232][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 143.896312][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.007052][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.078346][ T6658] loop2: detected capacity change from 0 to 8192 [ 144.120595][ T6658] loop2: p1 p2 < > p3 p4 < p5 > [ 144.125762][ T6658] loop2: partition table partially beyond EOD, truncated [ 144.195661][ T6665] tipc: Started in network mode [ 144.200740][ T6665] tipc: Node identity 4, cluster identity 4711 [ 144.206918][ T6665] tipc: Node number set to 4 [ 144.215196][ T6658] loop2: p1 size 100663296 extends beyond EOD, truncated [ 144.236593][ T6662] !: renamed from dummy0 [ 144.251985][ T6658] loop2: p2 start 591104 is beyond EOD, truncated [ 144.258605][ T6658] loop2: p3 start 33572980 is beyond EOD, truncated [ 144.259302][ T6667] loop0: detected capacity change from 0 to 2048 [ 144.276599][ T6658] loop2: p5 size 100663296 extends beyond EOD, truncated [ 144.297466][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.320445][ T6671] loop4: detected capacity change from 0 to 128 [ 144.386784][ T6675] loop4: detected capacity change from 0 to 256 [ 144.401699][ T6677] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 144.413732][ T6677] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 144.747488][ T6688] SELinux: ebitmap: truncated map [ 144.773038][ T6688] SELinux: failed to load policy [ 144.858373][ T6694] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.027147][ T6703] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 145.035673][ T6703] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 145.113877][ T6708] 9pnet_virtio: no channels available for device syz [ 145.435255][ T6710] loop4: detected capacity change from 0 to 8192 [ 145.520495][ T6710] loop4: p1 p2 < > p3 p4 < p5 > [ 145.525495][ T6710] loop4: partition table partially beyond EOD, truncated [ 145.545485][ T6710] loop4: p1 size 100663296 extends beyond EOD, truncated [ 145.553453][ T6710] loop4: p2 start 591104 is beyond EOD, truncated [ 145.556599][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.560137][ T6710] loop4: p3 start 33572980 is beyond EOD, truncated [ 145.576161][ T6710] loop4: p5 size 100663296 extends beyond EOD, truncated [ 145.757773][ T6733] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 145.768183][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.777167][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.803564][ T6735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6735 comm=syz.0.1019 [ 145.816092][ T6735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6735 comm=syz.0.1019 [ 146.031469][ T6753] loop0: detected capacity change from 0 to 8192 [ 146.216777][ T6764] loop0: detected capacity change from 0 to 512 [ 146.224000][ T6764] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.234334][ T6766] loop4: detected capacity change from 0 to 128 [ 146.235864][ T6764] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.1030: corrupted xattr entries [ 146.253604][ T6764] EXT4-fs (loop0): 1 truncate cleaned up [ 146.254694][ T6766] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 146.259684][ T6764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.321909][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.638704][ T6780] loop0: detected capacity change from 0 to 8192 [ 146.681906][ T6780] loop0: p1 p2 < > p3 p4 < p5 > [ 146.686913][ T6780] loop0: partition table partially beyond EOD, truncated [ 146.694319][ T6782] loop2: detected capacity change from 0 to 128 [ 146.701371][ T6780] loop0: p1 size 100663296 extends beyond EOD, truncated [ 146.728533][ T6780] loop0: p2 start 591104 is beyond EOD, truncated [ 146.735110][ T6780] loop0: p3 start 33572980 is beyond EOD, truncated [ 146.742763][ T6780] loop0: p5 size 100663296 extends beyond EOD, truncated [ 147.053579][ T6766] bio_check_eod: 33 callbacks suppressed [ 147.053600][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.053600][ T6766] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 147.073408][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.073408][ T6766] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 147.087403][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.087403][ T6766] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 147.101150][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.101150][ T6766] loop4: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 147.114955][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.114955][ T6766] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 147.128771][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.128771][ T6766] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 147.142691][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.142691][ T6766] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 147.156530][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.156530][ T6766] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 147.170128][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.170128][ T6766] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 147.183774][ T6766] syz.4.1031: attempt to access beyond end of device [ 147.183774][ T6766] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 147.208496][ T51] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 147.229550][ T6804] tipc: Cannot configure node identity twice [ 147.256069][ T6807] loop2: detected capacity change from 0 to 764 [ 147.265377][ T6807] Symlink component flag not implemented [ 147.272029][ T6807] Symlink component flag not implemented (7) [ 147.287380][ T6807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.326286][ T6812] loop2: detected capacity change from 0 to 164 [ 147.334092][ T6812] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.346445][ T6812] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.383732][ T6817] __nla_validate_parse: 7 callbacks suppressed [ 147.383752][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 147.420028][ T6823] loop2: detected capacity change from 0 to 512 [ 147.427372][ T6823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.438514][ T6823] EXT4-fs (loop2): 1 truncate cleaned up [ 147.448814][ T6821] loop4: detected capacity change from 0 to 8192 [ 147.456124][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.472031][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 147.490348][ T6821] loop4: p1 p2 < > p3 p4 < p5 > [ 147.495363][ T6821] loop4: partition table partially beyond EOD, truncated [ 147.502715][ T6821] loop4: p1 size 100663296 extends beyond EOD, truncated [ 147.510497][ T6821] loop4: p2 start 591104 is beyond EOD, truncated [ 147.516996][ T6821] loop4: p3 start 33572980 is beyond EOD, truncated [ 147.524876][ T6821] loop4: p5 size 100663296 extends beyond EOD, truncated [ 147.536353][ T6826] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 147.536353][ T6826] program syz.0.1051 not setting count and/or reply_len properly [ 147.536621][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.674785][ T6838] loop3: detected capacity change from 0 to 512 [ 147.682809][ T6838] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.689450][ T6838] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1055: bad orphan inode 13 [ 147.699962][ T6838] ext4_test_bit(bit=12, block=18) = 1 [ 147.705421][ T6838] is_bad_inode(inode)=0 [ 147.709581][ T6838] NEXT_ORPHAN(inode)=2130706432 [ 147.714518][ T6838] max_ino=32 [ 147.717750][ T6838] i_nlink=1 [ 147.733644][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.765880][ T6838] tipc: Started in network mode [ 147.770907][ T6838] tipc: Node identity ac14140f, cluster identity 4711 [ 147.777853][ T6838] tipc: New replicast peer: 10.1.1.2 [ 147.783363][ T6838] tipc: Enabled bearer , priority 10 [ 147.820733][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.266418][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 148.266445][ T29] audit: type=1400 audit(1746559017.046:4079): avc: denied { read } for pid=6846 comm="syz.4.1057" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.317497][ T29] audit: type=1400 audit(1746559017.096:4080): avc: denied { execute } for pid=6846 comm="syz.4.1057" path="/218/pids.events" dev="tmpfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.450996][ T6853] loop4: detected capacity change from 0 to 512 [ 148.457986][ T6853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.465538][ T6853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.494286][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.507190][ T6853] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.541040][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.620024][ T29] audit: type=1400 audit(1746559017.396:4081): avc: denied { create } for pid=6863 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.639693][ T29] audit: type=1400 audit(1746559017.406:4082): avc: denied { setopt } for pid=6863 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.659194][ T29] audit: type=1400 audit(1746559017.406:4083): avc: denied { read } for pid=6863 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.678542][ T29] audit: type=1400 audit(1746559017.406:4084): avc: denied { connect } for pid=6863 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.777137][ T6866] loop2: detected capacity change from 0 to 128 [ 148.852862][ T6866] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.865260][ T6866] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.900324][ T3383] tipc: Node number set to 2886997007 [ 149.058256][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1065'. [ 149.126860][ T29] audit: type=1400 audit(1746559017.906:4085): avc: denied { create } for pid=6871 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.455041][ T29] audit: type=1400 audit(1746559018.216:4086): avc: denied { compute_member } for pid=6876 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.494112][ T29] audit: type=1400 audit(1746559018.236:4087): avc: denied { create } for pid=6869 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.513824][ T29] audit: type=1400 audit(1746559018.236:4088): avc: denied { create } for pid=6869 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.558232][ T6877] loop0: detected capacity change from 0 to 512 [ 149.577005][ T6877] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 149.603380][ T6882] loop4: detected capacity change from 0 to 512 [ 149.636409][ T6882] EXT4-fs: Ignoring removed orlov option [ 149.679665][ T6877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 149.775326][ T6877] System zones: 1-12 [ 149.820953][ T6882] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.1069: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.835866][ T6877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.845796][ T6882] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.1069: error -117 reading directory block [ 149.878895][ T6882] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 149.897806][ T6882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.590464][ T6877] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1067: bg 0: block 361: padding at end of block bitmap is not set [ 150.611008][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 150.652151][ T6877] EXT4-fs (loop0): Remounting filesystem read-only [ 150.680357][ T6877] EXT4-fs (loop0): 1 truncate cleaned up [ 150.728610][ T6877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 150.755257][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.885175][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 150.915568][ T6897] loop4: detected capacity change from 0 to 164 [ 150.966187][ T6897] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.998743][ T6899] loop0: detected capacity change from 0 to 512 [ 151.063281][ T6899] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.093595][ T6899] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1073: bad orphan inode 13 [ 151.132621][ T6899] ext4_test_bit(bit=12, block=18) = 1 [ 151.138068][ T6899] is_bad_inode(inode)=0 [ 151.142346][ T6899] NEXT_ORPHAN(inode)=2130706432 [ 151.147238][ T6899] max_ino=32 [ 151.150496][ T6899] i_nlink=1 [ 151.200522][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.231899][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 151.250583][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.302665][ T6899] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 151.332396][ T6899] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1073: bg 0: block 248: padding at end of block bitmap is not set [ 151.346987][ T6911] loop4: detected capacity change from 0 to 8192 [ 151.354311][ T6899] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1073: Failed to acquire dquot type 1 [ 151.366974][ T6899] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.396554][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.410390][ T6911] loop4: p1 p2 < > p3 p4 < p5 > [ 151.415393][ T6911] loop4: partition table partially beyond EOD, truncated [ 151.423104][ T6911] loop4: p1 size 100663296 extends beyond EOD, truncated [ 151.433194][ T6911] loop4: p2 start 591104 is beyond EOD, truncated [ 151.439718][ T6911] loop4: p3 start 33572980 is beyond EOD, truncated [ 151.457211][ T6911] loop4: p5 size 100663296 extends beyond EOD, truncated [ 151.511821][ T6920] loop0: detected capacity change from 0 to 512 [ 151.527965][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 151.545964][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 151.552608][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.560133][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 151.572340][ T6926] vhci_hcd: connection closed [ 151.572542][ T1861] vhci_hcd: stop threads [ 151.581590][ T1861] vhci_hcd: release socket [ 151.586018][ T1861] vhci_hcd: disconnect device [ 151.831243][ T6932] loop0: detected capacity change from 0 to 512 [ 151.841738][ T6932] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1084: bg 0: block 248: padding at end of block bitmap is not set [ 151.856395][ T6932] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1084: Failed to acquire dquot type 1 [ 151.868427][ T6932] EXT4-fs (loop0): 1 truncate cleaned up [ 151.874543][ T6932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.887108][ T6932] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.909653][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.450424][ T6957] loop4: detected capacity change from 0 to 128 [ 152.466335][ T6950] loop3: detected capacity change from 0 to 1024 [ 152.481550][ T6957] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.494366][ T6957] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.534097][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.576842][ T6950] bpf: Bad value for 'gid' [ 152.610800][ T6966] loop2: detected capacity change from 0 to 512 [ 152.646794][ T6966] EXT4-fs: Ignoring removed nobh option [ 152.677815][ T6966] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1093: invalid indirect mapped block 256 (level 2) [ 152.742018][ T6966] EXT4-fs (loop2): 2 truncates cleaned up [ 152.778098][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.824119][ T6966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1093: bg 0: block 5: invalid block bitmap [ 152.839624][ T6966] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.851918][ T6966] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.851918][ T6966] [ 152.861624][ T6966] EXT4-fs (loop2): Total free blocks count 0 [ 152.867676][ T6966] EXT4-fs (loop2): Free/Dirty block details [ 152.873774][ T6966] EXT4-fs (loop2): free_blocks=0 [ 152.878812][ T6966] EXT4-fs (loop2): dirty_blocks=66 [ 152.884073][ T6966] EXT4-fs (loop2): Block reservation details [ 152.890179][ T6966] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 153.010738][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 153.141617][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.205161][ T6976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.291825][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 153.291844][ T29] audit: type=1400 audit(1746559022.076:4478): avc: denied { setopt } for pid=6983 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.335275][ T6979] loop4: detected capacity change from 0 to 8192 [ 153.335761][ T6967] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.357556][ T6967] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 153.370198][ T6967] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.370198][ T6967] [ 153.379872][ T6967] EXT4-fs (loop3): Total free blocks count 0 [ 153.385959][ T6967] EXT4-fs (loop3): Free/Dirty block details [ 153.391928][ T6967] EXT4-fs (loop3): free_blocks=68451041280 [ 153.397755][ T6967] EXT4-fs (loop3): dirty_blocks=16400 [ 153.403214][ T6967] EXT4-fs (loop3): Block reservation details [ 153.409280][ T6967] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 153.430342][ T6979] loop4: p1 p2 < > p3 p4 < p5 > [ 153.435407][ T6979] loop4: partition table partially beyond EOD, truncated [ 153.452078][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 153.465091][ T6979] loop4: p1 size 100663296 extends beyond EOD, truncated [ 153.473209][ T6979] loop4: p2 start 591104 is beyond EOD, truncated [ 153.479663][ T6979] loop4: p3 start 33572980 is beyond EOD, truncated [ 153.514422][ T6979] loop4: p5 size 100663296 extends beyond EOD, truncated [ 153.651029][ T29] audit: type=1326 audit(1746559022.436:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 153.690113][ T29] audit: type=1326 audit(1746559022.436:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 153.713736][ T29] audit: type=1326 audit(1746559022.436:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 153.737191][ T29] audit: type=1326 audit(1746559022.456:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 153.814308][ T29] audit: type=1400 audit(1746559022.596:4483): avc: denied { connect } for pid=7006 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.842964][ T7007] loop3: detected capacity change from 0 to 2048 [ 153.850595][ T29] audit: type=1400 audit(1746559022.616:4484): avc: denied { write } for pid=7006 comm="syz.3.1105" path="socket:[18209]" dev="sockfs" ino=18209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.060717][ T7009] hub 2-0:1.0: USB hub found [ 154.065778][ T7009] hub 2-0:1.0: 8 ports detected [ 154.237398][ T7015] loop0: detected capacity change from 0 to 512 [ 154.302837][ T7016] loop4: detected capacity change from 0 to 512 [ 154.443650][ T7016] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 154.480312][ T7016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 154.481302][ T7015] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.488299][ T7016] System zones: 1-12 [ 154.499218][ T7016] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.508399][ T7016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1106: bg 0: block 361: padding at end of block bitmap is not set [ 154.525229][ T7020] loop3: detected capacity change from 0 to 128 [ 154.530427][ T7015] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1107: bad orphan inode 13 [ 154.542874][ T7016] EXT4-fs (loop4): Remounting filesystem read-only [ 154.549780][ T7016] EXT4-fs (loop4): 1 truncate cleaned up [ 154.557264][ T7015] ext4_test_bit(bit=12, block=18) = 1 [ 154.562847][ T7015] is_bad_inode(inode)=0 [ 154.567119][ T7015] NEXT_ORPHAN(inode)=2130706432 [ 154.572071][ T7015] max_ino=32 [ 154.575293][ T7015] i_nlink=1 [ 154.579663][ T7020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.592747][ T7015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.595355][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 154.620369][ T7020] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.637126][ T7015] tipc: Started in network mode [ 154.642143][ T7015] tipc: Node identity ac14140f, cluster identity 4711 [ 154.666738][ T7015] tipc: New replicast peer: 10.1.1.2 [ 154.672248][ T7015] tipc: Enabled bearer , priority 10 [ 154.752407][ T29] audit: type=1326 audit(1746559023.536:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 154.775947][ T29] audit: type=1326 audit(1746559023.536:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 154.799412][ T29] audit: type=1326 audit(1746559023.536:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2e4cafe969 code=0x7ffc0000 [ 154.829747][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.839647][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 154.873549][ T7031] netlink: 'syz.0.1112': attribute type 8 has an invalid length. [ 155.242640][ T7047] loop1: detected capacity change from 0 to 8192 [ 155.249805][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.269691][ T7049] loop3: detected capacity change from 0 to 764 [ 155.278813][ T7049] Symlink component flag not implemented [ 155.284729][ T7049] Symlink component flag not implemented (7) [ 155.284792][ T7047] loop1: p1 p2 < > p3 p4 < p5 > [ 155.284802][ T7047] loop1: partition table partially beyond EOD, truncated [ 155.299109][ T7049] sit0: left promiscuous mode [ 155.308259][ T7047] loop1: p1 size 100663296 extends beyond EOD, truncated [ 155.315972][ T7047] loop1: p2 start 591104 is beyond EOD, truncated [ 155.322453][ T7047] loop1: p3 start 33572980 is beyond EOD, truncated [ 155.329907][ T7047] loop1: p5 size 100663296 extends beyond EOD, truncated [ 155.340784][ T7049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.442253][ T7055] loop3: detected capacity change from 0 to 8192 [ 156.021609][ T7061] loop4: detected capacity change from 0 to 512 [ 156.032525][ T7060] loop0: detected capacity change from 0 to 512 [ 156.033947][ T5969] tipc: Node number set to 2886997007 [ 156.065361][ T7061] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.072193][ T7060] EXT4-fs: Ignoring removed orlov option [ 156.098719][ T7060] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 3: comm syz.0.1132: lblock 0 mapped to illegal pblock 3 (length 1) [ 156.113503][ T7061] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1122: bad orphan inode 13 [ 156.130745][ T7060] EXT4-fs warning (device loop0): dx_probe:793: inode #2: lblock 0: comm syz.0.1132: error -117 reading directory block [ 156.143711][ T7061] ext4_test_bit(bit=12, block=18) = 1 [ 156.149143][ T7061] is_bad_inode(inode)=0 [ 156.153412][ T7061] NEXT_ORPHAN(inode)=2130706432 [ 156.158407][ T7061] max_ino=32 [ 156.161667][ T7061] i_nlink=1 [ 156.165255][ T7060] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 156.173898][ T7060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.210298][ T7061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.226322][ T7065] loop2: detected capacity change from 0 to 512 [ 156.287648][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 156.317655][ T7061] tipc: New replicast peer: 10.1.1.2 [ 156.323172][ T7061] tipc: Enabled bearer , priority 10 [ 156.354911][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 156.383185][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.426038][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.569331][ T7076] tipc: Cannot configure node identity twice [ 156.831722][ T7097] loop0: detected capacity change from 0 to 128 [ 156.848696][ T7097] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.861323][ T7097] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.341262][ T3380] tipc: Node number set to 887499550 [ 157.861689][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.944852][ T7111] loop4: detected capacity change from 0 to 2048 [ 157.958403][ T7114] loop1: detected capacity change from 0 to 512 [ 157.978396][ T7116] loop2: detected capacity change from 0 to 512 [ 157.987728][ T7114] EXT4-fs: Ignoring removed orlov option [ 158.000041][ T7116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.013142][ T7114] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.1137: lblock 0 mapped to illegal pblock 3 (length 1) [ 158.028409][ T7114] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.1137: error -117 reading directory block [ 158.045900][ T7116] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.1140: corrupted xattr entries [ 158.070892][ T7114] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 158.085912][ T7116] EXT4-fs (loop2): 1 truncate cleaned up [ 158.113204][ T7124] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 158.114866][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 158.148524][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.161329][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.181584][ T7124] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1142'. [ 158.223654][ T7131] loop4: detected capacity change from 0 to 512 [ 158.231679][ T7131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.254408][ T7135] loop2: detected capacity change from 0 to 512 [ 158.262996][ T7131] EXT4-fs (loop4): 1 truncate cleaned up [ 158.286651][ T7135] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.303295][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 158.303312][ T29] audit: type=1400 audit(1746559027.086:4593): avc: denied { setattr } for pid=7133 comm="syz.2.1146" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.333212][ T29] audit: type=1400 audit(1746559027.086:4594): avc: denied { create } for pid=7133 comm="syz.2.1146" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 158.355342][ T29] audit: type=1400 audit(1746559027.116:4595): avc: denied { remove_name } for pid=7130 comm="syz.4.1145" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.378033][ T29] audit: type=1400 audit(1746559027.116:4596): avc: denied { rename } for pid=7130 comm="syz.4.1145" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.400332][ T29] audit: type=1400 audit(1746559027.116:4597): avc: denied { unlink } for pid=7130 comm="syz.4.1145" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.711756][ T7146] loop2: detected capacity change from 0 to 128 [ 158.721701][ T7146] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 158.736767][ T29] audit: type=1326 audit(1746559027.516:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 158.760310][ T29] audit: type=1326 audit(1746559027.516:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 158.783837][ T29] audit: type=1326 audit(1746559027.516:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 158.807353][ T29] audit: type=1326 audit(1746559027.516:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec170e969 code=0x7ffc0000 [ 158.977594][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 159.028880][ T7161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 159.035458][ T7161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 159.043095][ T7161] vhci_hcd vhci_hcd.0: Device attached [ 159.104153][ T7166] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 159.104153][ T7166] program syz.4.1153 not setting count and/or reply_len properly [ 159.182125][ T7162] vhci_hcd: connection closed [ 159.191572][ T1578] vhci_hcd: stop threads [ 159.200688][ T1578] vhci_hcd: release socket [ 159.205185][ T1578] vhci_hcd: disconnect device [ 159.222500][ T3380] vhci_hcd: vhci_device speed not set [ 159.371837][ T7171] loop1: detected capacity change from 0 to 2048 [ 159.579982][ T7180] loop1: detected capacity change from 0 to 512 [ 159.588764][ T7180] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.595510][ T7180] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1159: bad orphan inode 13 [ 159.606157][ T7180] ext4_test_bit(bit=12, block=18) = 1 [ 159.606879][ T7146] bio_check_eod: 93 callbacks suppressed [ 159.606957][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.606957][ T7146] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 159.611622][ T7180] is_bad_inode(inode)=0 [ 159.617899][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.617899][ T7146] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 159.630670][ T7180] NEXT_ORPHAN(inode)=2130706432 [ 159.630685][ T7180] max_ino=32 [ 159.649037][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.649037][ T7146] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 159.653471][ T7180] i_nlink=1 [ 159.680183][ T7180] EXT4-fs mount: 8 callbacks suppressed [ 159.680200][ T7180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.700240][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.700240][ T7146] loop2: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 159.722912][ T7182] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 159.732498][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.741158][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.756713][ T7182] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1160'. [ 159.765991][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.765991][ T7146] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 159.779966][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.779966][ T7146] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 159.794804][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.794804][ T7146] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 159.803255][ T7186] loop3: detected capacity change from 0 to 512 [ 159.808444][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.808444][ T7146] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 159.819875][ T7186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.828221][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.828221][ T7146] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 159.851689][ T7146] syz.2.1148: attempt to access beyond end of device [ 159.851689][ T7146] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 159.854477][ T7180] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 159.881880][ T29] audit: type=1400 audit(1746559028.666:4602): avc: denied { getopt } for pid=7189 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.882007][ T7191] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 159.910785][ T7186] EXT4-fs (loop3): 1 truncate cleaned up [ 159.915007][ T7191] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 159.917515][ T7186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.926866][ T5345] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 159.956077][ T7180] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1159: bg 0: block 248: padding at end of block bitmap is not set [ 159.978260][ T7180] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1159: Failed to acquire dquot type 1 [ 159.993214][ T7180] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.046454][ T7198] loop0: detected capacity change from 0 to 8192 [ 160.060978][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.083519][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.100698][ T7198] loop0: p1 p2 < > p3 p4 < p5 > [ 160.105769][ T7198] loop0: partition table partially beyond EOD, truncated [ 160.115953][ T7197] loop2: detected capacity change from 0 to 256 [ 160.134605][ T7201] loop1: detected capacity change from 0 to 128 [ 160.142215][ T7198] loop0: p1 size 100663296 extends beyond EOD, truncated [ 160.149863][ T7198] loop0: p2 start 591104 is beyond EOD, truncated [ 160.156422][ T7198] loop0: p3 start 33572980 is beyond EOD, truncated [ 160.166055][ T7198] loop0: p5 size 100663296 extends beyond EOD, truncated [ 160.249674][ T7213] loop1: detected capacity change from 0 to 512 [ 160.257045][ T7213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.274586][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 160.286922][ T7213] EXT4-fs (loop1): 1 truncate cleaned up [ 160.294782][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.348856][ T7215] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 160.348856][ T7215] program syz.3.1171 not setting count and/or reply_len properly [ 160.388344][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.092484][ T7226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1175'. [ 161.101570][ T7226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1175'. [ 161.104844][ T7231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 161.110591][ T7226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1175'. [ 161.117025][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.133760][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 161.168375][ T7232] vhci_hcd: connection closed [ 161.173438][ T5345] vhci_hcd: stop threads [ 161.182491][ T5345] vhci_hcd: release socket [ 161.187026][ T5345] vhci_hcd: disconnect device [ 161.418143][ T7242] loop1: detected capacity change from 0 to 8192 [ 162.111494][ T7259] __nla_validate_parse: 6 callbacks suppressed [ 162.111516][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 162.130143][ T7257] loop3: detected capacity change from 0 to 512 [ 162.162079][ T7257] EXT4-fs: Ignoring removed orlov option [ 162.299361][ T7257] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 3: comm syz.3.1184: lblock 0 mapped to illegal pblock 3 (length 1) [ 162.317494][ T7259] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 162.317494][ T7259] program syz.2.1183 not setting count and/or reply_len properly [ 162.338691][ T7257] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.1184: error -117 reading directory block [ 162.390157][ T7257] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 162.398907][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.439353][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.447934][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.467506][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.472901][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 162.485220][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.517425][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.526400][ T7266] loop1: detected capacity change from 0 to 8192 [ 162.533128][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.541609][ T7263] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.572799][ T7266] loop1: p1 p2 < > p3 p4 < p5 > [ 162.577945][ T7266] loop1: partition table partially beyond EOD, truncated [ 162.598017][ T7266] loop1: p1 size 100663296 extends beyond EOD, truncated [ 162.620877][ T7266] loop1: p2 start 591104 is beyond EOD, truncated [ 162.627488][ T7266] loop1: p3 start 33572980 is beyond EOD, truncated [ 162.665351][ T7275] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.674481][ T7275] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.680421][ T7266] loop1: p5 size 100663296 extends beyond EOD, truncated [ 162.770770][ T7293] loop2: detected capacity change from 0 to 256 [ 162.778200][ T7291] loop3: detected capacity change from 0 to 128 [ 162.823223][ T7291] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 162.888985][ T7303] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.977239][ T7309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.038348][ T7314] loop0: detected capacity change from 0 to 512 [ 163.045309][ T7314] EXT4-fs: Ignoring removed orlov option [ 163.063923][ T7314] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 3: comm syz.0.1200: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.120662][ T7314] EXT4-fs warning (device loop0): dx_probe:793: inode #2: lblock 0: comm syz.0.1200: error -117 reading directory block [ 163.133493][ T7314] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 163.142553][ T7314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.213392][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.769476][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 163.893311][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 163.893328][ T29] audit: type=1326 audit(1746559032.676:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 163.955687][ T29] audit: type=1326 audit(1746559032.706:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 163.979398][ T29] audit: type=1326 audit(1746559032.706:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 164.002813][ T29] audit: type=1326 audit(1746559032.706:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 164.026229][ T29] audit: type=1326 audit(1746559032.706:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 164.383002][ T7347] loop2: detected capacity change from 0 to 128 [ 164.401398][ T7347] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.414058][ T7347] ext4 filesystem being mounted at /260/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.438393][ T7358] loop0: detected capacity change from 0 to 512 [ 164.445592][ T7358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.473189][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.491389][ T7358] EXT4-fs (loop0): 1 truncate cleaned up [ 164.499177][ T7363] loop2: detected capacity change from 0 to 128 [ 164.506132][ T7363] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.518775][ T7358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.539801][ T310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.596504][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.607280][ T7367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 164.613846][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.621451][ T7367] vhci_hcd vhci_hcd.0: Device attached [ 164.632735][ T7368] vhci_hcd: connection closed [ 164.633015][ T310] vhci_hcd: stop threads [ 164.642113][ T310] vhci_hcd: release socket [ 164.642125][ T310] vhci_hcd: disconnect device [ 164.655402][ T7371] loop0: detected capacity change from 0 to 512 [ 164.662363][ T7371] EXT4-fs: Ignoring removed nobh option [ 164.669586][ T7371] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1214: invalid indirect mapped block 256 (level 2) [ 164.683477][ T7371] EXT4-fs (loop0): 2 truncates cleaned up [ 164.689860][ T7371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.707193][ T7371] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1214: bg 0: block 5: invalid block bitmap [ 164.719737][ T7371] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.731986][ T7371] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.731986][ T7371] [ 164.741645][ T7371] EXT4-fs (loop0): Total free blocks count 0 [ 164.747659][ T7371] EXT4-fs (loop0): Free/Dirty block details [ 164.753599][ T7371] EXT4-fs (loop0): free_blocks=0 [ 164.758562][ T7371] EXT4-fs (loop0): dirty_blocks=66 [ 164.763774][ T7371] EXT4-fs (loop0): Block reservation details [ 164.769790][ T7371] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 164.792707][ T310] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 164.854571][ T29] audit: type=1400 audit(1746559033.636:4627): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.878939][ T29] audit: type=1400 audit(1746559033.636:4628): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.903099][ T29] audit: type=1400 audit(1746559033.636:4629): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.930429][ T29] audit: type=1400 audit(1746559033.666:4630): avc: denied { create } for pid=7380 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.951196][ T29] audit: type=1400 audit(1746559033.666:4631): avc: denied { write } for pid=7380 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.992098][ T7382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.013531][ T7385] loop2: detected capacity change from 0 to 2048 [ 165.070540][ T7385] loop2: p1 < > p4 [ 165.085218][ T7385] loop2: p4 size 8388608 extends beyond EOD, truncated [ 165.216434][ T7400] loop4: detected capacity change from 0 to 512 [ 165.223172][ T7400] EXT4-fs: Ignoring removed nobh option [ 165.231673][ T7400] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1228: invalid indirect mapped block 256 (level 2) [ 165.246020][ T7400] EXT4-fs (loop4): 2 truncates cleaned up [ 165.254113][ T7400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.272231][ T7400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1228: bg 0: block 5: invalid block bitmap [ 165.285106][ T7400] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.297408][ T7400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.297408][ T7400] [ 165.307171][ T7400] EXT4-fs (loop4): Total free blocks count 0 [ 165.313217][ T7400] EXT4-fs (loop4): Free/Dirty block details [ 165.319116][ T7400] EXT4-fs (loop4): free_blocks=0 [ 165.324099][ T7400] EXT4-fs (loop4): dirty_blocks=66 [ 165.329231][ T7400] EXT4-fs (loop4): Block reservation details [ 165.335336][ T7400] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 165.357989][ T5345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 165.651481][ T7421] sit0: left promiscuous mode [ 165.668221][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.677078][ T7421] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.707625][ T7421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.906443][ T7424] netlink: 'syz.3.1235': attribute type 21 has an invalid length. [ 165.935624][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.961514][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.094698][ T7427] loop2: detected capacity change from 0 to 512 [ 166.131000][ T7427] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.152333][ T7428] loop0: detected capacity change from 0 to 128 [ 166.162138][ T7427] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1236: bad orphan inode 13 [ 166.178781][ T7427] ext4_test_bit(bit=12, block=18) = 1 [ 166.184250][ T7427] is_bad_inode(inode)=0 [ 166.188425][ T7427] NEXT_ORPHAN(inode)=2130706432 [ 166.193350][ T7427] max_ino=32 [ 166.196621][ T7427] i_nlink=1 [ 166.203610][ T7428] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 166.296429][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.415315][ T7427] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 166.451194][ T7427] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1236: bg 0: block 248: padding at end of block bitmap is not set [ 166.482581][ T7427] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1236: Failed to acquire dquot type 1 [ 166.525026][ T7427] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.612788][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.836913][ T7456] loop4: detected capacity change from 0 to 1024 [ 166.862302][ T7456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.877322][ T7456] bpf: Bad value for 'gid' [ 167.016634][ T7428] bio_check_eod: 103 callbacks suppressed [ 167.016652][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.016652][ T7428] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 167.036338][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.036338][ T7428] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 167.050032][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.050032][ T7428] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.064092][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.064092][ T7428] loop0: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 167.077809][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.077809][ T7428] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 167.091897][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.091897][ T7428] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 167.105961][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.105961][ T7428] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 167.120184][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.120184][ T7428] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 167.134057][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.134057][ T7428] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 167.148158][ T7428] syz.0.1247: attempt to access beyond end of device [ 167.148158][ T7428] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 167.175685][ T5345] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 167.194825][ T7460] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 167.213094][ T7460] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 167.225672][ T7460] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.225672][ T7460] [ 167.235398][ T7460] EXT4-fs (loop4): Total free blocks count 0 [ 167.241489][ T7460] EXT4-fs (loop4): Free/Dirty block details [ 167.247481][ T7460] EXT4-fs (loop4): free_blocks=68451041280 [ 167.253403][ T7460] EXT4-fs (loop4): dirty_blocks=16400 [ 167.258882][ T7460] EXT4-fs (loop4): Block reservation details [ 167.265087][ T7460] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 167.301951][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 167.410824][ T7468] 9pnet_fd: Insufficient options for proto=fd [ 168.090504][ T7498] __nla_validate_parse: 9 callbacks suppressed [ 168.090522][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 168.444277][ T7503] loop3: detected capacity change from 0 to 512 [ 168.456741][ T7505] loop0: detected capacity change from 0 to 512 [ 168.475536][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 168.485082][ T7505] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 168.502043][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.514758][ T7505] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 168.527065][ T7505] EXT4-fs (loop0): 1 truncate cleaned up [ 168.533180][ T7505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.545221][ T7503] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.583902][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.617527][ T7503] xt_hashlimit: max too large, truncated to 1048576 [ 168.625264][ T7503] Cannot find del_set index 65532 as target [ 168.702671][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.784524][ T7533] loop3: detected capacity change from 0 to 8192 [ 168.830424][ T7533] loop3: p1 p2 < > p3 p4 < p5 > [ 168.835416][ T7533] loop3: partition table partially beyond EOD, truncated [ 168.842909][ T7533] loop3: p1 size 100663296 extends beyond EOD, truncated [ 168.860589][ T7533] loop3: p2 start 591104 is beyond EOD, truncated [ 168.867107][ T7533] loop3: p3 start 33572980 is beyond EOD, truncated [ 168.875755][ T7533] loop3: p5 size 100663296 extends beyond EOD, truncated [ 169.457587][ T7551] capability: warning: `syz.0.1276' uses 32-bit capabilities (legacy support in use) [ 169.468112][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 169.468146][ T29] audit: type=1400 audit(1746559038.246:4815): avc: denied { connect } for pid=7550 comm="syz.0.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.494240][ T29] audit: type=1400 audit(1746559038.246:4816): avc: denied { create } for pid=7552 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.513858][ T29] audit: type=1400 audit(1746559038.256:4817): avc: denied { read append } for pid=7552 comm="syz.1.1277" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.537563][ T29] audit: type=1400 audit(1746559038.256:4818): avc: denied { open } for pid=7552 comm="syz.1.1277" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.545363][ T7556] loop4: detected capacity change from 0 to 512 [ 169.569692][ T7556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.579836][ T29] audit: type=1400 audit(1746559038.316:4819): avc: denied { bind } for pid=7552 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.599310][ T29] audit: type=1400 audit(1746559038.316:4820): avc: denied { setopt } for pid=7552 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.600619][ T7556] EXT4-fs (loop4): 1 truncate cleaned up [ 169.626537][ T7556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.658658][ T7562] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 169.665369][ T7562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.672960][ T7562] vhci_hcd vhci_hcd.0: Device attached [ 169.676994][ T29] audit: type=1400 audit(1746559038.406:4821): avc: denied { ioctl } for pid=7558 comm="syz.2.1280" path="socket:[20364]" dev="sockfs" ino=20364 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.703498][ T7566] loop3: detected capacity change from 0 to 2048 [ 169.714181][ T7563] vhci_hcd: connection closed [ 169.714458][ T310] vhci_hcd: stop threads [ 169.723494][ T310] vhci_hcd: release socket [ 169.725727][ T7566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.727903][ T310] vhci_hcd: disconnect device [ 169.729093][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.742773][ T29] audit: type=1400 audit(1746559038.526:4822): avc: denied { read write } for pid=7564 comm="syz.3.1281" path="/246/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.786905][ T29] audit: type=1400 audit(1746559038.566:4823): avc: denied { read } for pid=7570 comm="syz.4.1283" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.811279][ T29] audit: type=1400 audit(1746559038.566:4824): avc: denied { open } for pid=7570 comm="syz.4.1283" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.885080][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.946226][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 170.059691][ T7584] loop3: detected capacity change from 0 to 512 [ 170.066686][ T7584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.077925][ T7584] EXT4-fs (loop3): 1 truncate cleaned up [ 170.084280][ T7584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.112819][ T7589] loop4: detected capacity change from 0 to 2048 [ 170.161246][ T7589] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1290'. [ 170.275967][ T7595] loop4: detected capacity change from 0 to 8192 [ 170.320431][ T7595] loop4: p1 p2 < > p3 p4 < p5 > [ 170.325454][ T7595] loop4: partition table partially beyond EOD, truncated [ 170.343702][ T7595] loop4: p1 size 100663296 extends beyond EOD, truncated [ 170.356310][ T7600] loop2: detected capacity change from 0 to 8192 [ 170.364699][ T7595] loop4: p2 start 591104 is beyond EOD, truncated [ 170.371295][ T7595] loop4: p3 start 33572980 is beyond EOD, truncated [ 170.382983][ T7595] loop4: p5 size 100663296 extends beyond EOD, truncated [ 170.400343][ T7600] loop2: p1 p2 < > p3 p4 < p5 > [ 170.405341][ T7600] loop2: partition table partially beyond EOD, truncated [ 170.426809][ T7600] loop2: p1 size 100663296 extends beyond EOD, truncated [ 170.464530][ T7607] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.475813][ T7600] loop2: p2 start 591104 is beyond EOD, truncated [ 170.482395][ T7600] loop2: p3 start 33572980 is beyond EOD, truncated [ 170.510000][ T7600] loop2: p5 size 100663296 extends beyond EOD, truncated [ 170.531993][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 170.616631][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.765236][ T7624] smc: net device bond0 applied user defined pnetid SYZ2 [ 170.772465][ T7624] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 170.780657][ T7624] smc: net device bond0 erased user defined pnetid SYZ2 [ 170.787771][ T7624] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 170.812731][ T7627] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 170.819300][ T7627] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.826743][ T7627] vhci_hcd vhci_hcd.0: Device attached [ 170.835228][ T7628] vhci_hcd: connection closed [ 170.835459][ T51] vhci_hcd: stop threads [ 170.844651][ T51] vhci_hcd: release socket [ 170.849216][ T51] vhci_hcd: disconnect device [ 171.085355][ T7634] loop4: detected capacity change from 0 to 1024 [ 171.102296][ T7634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.129808][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.192401][ T7641] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 171.200264][ T7641] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1307'. [ 171.214874][ T7641] : renamed from bond0 (while UP) [ 171.383435][ T7647] loop1: detected capacity change from 0 to 512 [ 171.390502][ T7647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.418441][ T7647] EXT4-fs (loop1): 1 truncate cleaned up [ 171.424789][ T7647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.076578][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.113181][ T7679] loop4: detected capacity change from 0 to 512 [ 172.124593][ T7679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.153846][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.168820][ T7679] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.193439][ T7686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 172.200079][ T7686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.207580][ T7686] vhci_hcd vhci_hcd.0: Device attached [ 172.215607][ T7688] vhci_hcd: connection closed [ 172.215676][ T310] vhci_hcd: stop threads [ 172.224862][ T310] vhci_hcd: release socket [ 172.229305][ T310] vhci_hcd: disconnect device [ 172.239822][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.771261][ T7705] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 172.777938][ T7705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.785492][ T7705] vhci_hcd vhci_hcd.0: Device attached [ 172.794299][ T7706] vhci_hcd: connection closed [ 172.794485][ T51] vhci_hcd: stop threads [ 172.804314][ T51] vhci_hcd: release socket [ 172.808770][ T51] vhci_hcd: disconnect device [ 172.831649][ T7709] loop2: detected capacity change from 0 to 1024 [ 172.838550][ T7709] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 173.334449][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1336'. [ 173.582780][ T7742] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 173.604200][ T7742] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 173.632365][ T7742] loop3: detected capacity change from 0 to 256 [ 173.834248][ T7750] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 173.870747][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.894294][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.927775][ T7750] vlan0: entered allmulticast mode [ 174.160920][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 174.170554][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 174.198428][ T7771] netlink: 'syz.0.1342': attribute type 21 has an invalid length. [ 174.209626][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.218489][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.365650][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=7785 comm=syz.4.1353 [ 174.419998][ T7788] loop3: detected capacity change from 0 to 512 [ 174.429235][ T7785] loop4: detected capacity change from 0 to 512 [ 174.447060][ T7788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.464108][ T7788] EXT4-fs (loop3): 1 truncate cleaned up [ 174.471055][ T7788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.491178][ T7785] __quota_error: 671 callbacks suppressed [ 174.491290][ T7785] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 174.509021][ T7785] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.519525][ T7785] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1353: Failed to acquire dquot type 1 [ 174.602021][ T7785] EXT4-fs (loop4): 1 truncate cleaned up [ 174.633651][ T7785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.648170][ T7785] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.672346][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.708737][ T7797] loop4: detected capacity change from 0 to 512 [ 174.715816][ T7797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.733630][ T7797] EXT4-fs (loop4): 1 truncate cleaned up [ 174.770482][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.796127][ T7802] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 174.802700][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.810179][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 174.831619][ T7803] vhci_hcd: connection closed [ 174.832130][ T310] vhci_hcd: stop threads [ 174.841186][ T310] vhci_hcd: release socket [ 174.845624][ T310] vhci_hcd: disconnect device [ 174.856527][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.945043][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.120127][ T7811] loop4: detected capacity change from 0 to 128 [ 175.129717][ T7811] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.142734][ T7811] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.224810][ T29] audit: type=1326 audit(1746559044.006:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 175.248372][ T29] audit: type=1326 audit(1746559044.006:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 175.271776][ T29] audit: type=1326 audit(1746559044.006:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 175.400992][ T7824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 175.407611][ T7824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.415195][ T7824] vhci_hcd vhci_hcd.0: Device attached [ 175.424044][ T7826] vhci_hcd: connection closed [ 175.424188][ T51] vhci_hcd: stop threads [ 175.433259][ T51] vhci_hcd: release socket [ 175.437934][ T51] vhci_hcd: disconnect device [ 175.591277][ T29] audit: type=1400 audit(1746559044.376:5499): avc: denied { create } for pid=7831 comm="syz.1.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.837956][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.858962][ T7842] loop4: detected capacity change from 0 to 512 [ 175.866632][ T7842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.877997][ T7842] EXT4-fs (loop4): 1 truncate cleaned up [ 175.884455][ T7842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.068516][ T29] audit: type=1326 audit(1746559044.846:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 176.092745][ T29] audit: type=1326 audit(1746559044.846:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 176.171303][ T29] audit: type=1326 audit(1746559044.956:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 176.649425][ T29] audit: type=1326 audit(1746559044.976:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc91e969 code=0x7ffc0000 [ 176.698054][ T7864] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 176.704630][ T7864] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.713007][ T7864] vhci_hcd vhci_hcd.0: Device attached [ 176.726220][ T7865] vhci_hcd: connection closed [ 176.726399][ T51] vhci_hcd: stop threads [ 176.735607][ T51] vhci_hcd: release socket [ 176.740776][ T51] vhci_hcd: disconnect device [ 176.747410][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.777046][ T7868] loop4: detected capacity change from 0 to 512 [ 176.802432][ T7868] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.956593][ T7868] EXT4-fs (loop4): 1 truncate cleaned up [ 176.963136][ T7868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.011470][ T7876] netlink: 'syz.1.1380': attribute type 4 has an invalid length. [ 177.019337][ T7876] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1380'. [ 177.037706][ T7876] : renamed from bond0 (while UP) [ 177.067046][ T7878] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 177.073617][ T7878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.081849][ T7878] vhci_hcd vhci_hcd.0: Device attached [ 177.181611][ T7879] vhci_hcd: connection closed [ 177.181876][ T1578] vhci_hcd: stop threads [ 177.190921][ T1578] vhci_hcd: release socket [ 177.195435][ T1578] vhci_hcd: disconnect device [ 178.094192][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.320339][ T7898] loop4: detected capacity change from 0 to 512 [ 178.327177][ T7898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.338544][ T7898] EXT4-fs (loop4): 1 truncate cleaned up [ 178.345379][ T7898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.485762][ T7908] loop3: detected capacity change from 0 to 512 [ 178.494506][ T7908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.506520][ T7908] EXT4-fs (loop3): 1 truncate cleaned up [ 178.512870][ T7908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.671092][ T7911] ================================================================== [ 178.679251][ T7911] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 178.687202][ T7911] [ 178.689551][ T7911] write to 0xffff8881194ac628 of 4 bytes by task 7908 on cpu 1: [ 178.697230][ T7911] __mark_inode_dirty+0x240/0x760 [ 178.702305][ T7911] file_modified_flags+0x324/0x350 [ 178.707469][ T7911] file_modified+0x17/0x20 [ 178.711938][ T7911] ext4_buffered_write_iter+0x1d0/0x3c0 [ 178.717531][ T7911] ext4_file_write_iter+0x383/0xf00 [ 178.722777][ T7911] iter_file_splice_write+0x5ef/0x970 [ 178.728186][ T7911] direct_splice_actor+0x153/0x2a0 [ 178.733327][ T7911] splice_direct_to_actor+0x30f/0x680 [ 178.738734][ T7911] do_splice_direct+0xda/0x150 [ 178.743524][ T7911] do_sendfile+0x380/0x640 [ 178.747983][ T7911] __x64_sys_sendfile64+0x105/0x150 [ 178.753225][ T7911] x64_sys_call+0xb39/0x2fb0 [ 178.757852][ T7911] do_syscall_64+0xd0/0x1a0 [ 178.762389][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.768315][ T7911] [ 178.770668][ T7911] read to 0xffff8881194ac628 of 4 bytes by task 7911 on cpu 0: [ 178.778267][ T7911] __mark_inode_dirty+0x18e/0x760 [ 178.783338][ T7911] touch_atime+0x229/0x330 [ 178.787798][ T7911] filemap_splice_read+0x629/0x6b0 [ 178.792952][ T7911] ext4_file_splice_read+0x8f/0xb0 [ 178.798096][ T7911] splice_direct_to_actor+0x26c/0x680 [ 178.803496][ T7911] do_splice_direct+0xda/0x150 [ 178.808289][ T7911] do_sendfile+0x380/0x640 [ 178.812739][ T7911] __x64_sys_sendfile64+0x105/0x150 [ 178.817979][ T7911] x64_sys_call+0xb39/0x2fb0 [ 178.822591][ T7911] do_syscall_64+0xd0/0x1a0 [ 178.827120][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.833048][ T7911] [ 178.835381][ T7911] value changed: 0x00000000 -> 0x00000028 [ 178.841107][ T7911] [ 178.843440][ T7911] Reported by Kernel Concurrency Sanitizer on: [ 178.849616][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.3.1388 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 178.862082][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.872168][ T7911] ================================================================== [ 178.956133][ T7916] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 178.965448][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.972383][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.983148][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.174336][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.900193][ T5969] page_pool_release_retry() stalled pool shutdown: id 29, 50 inflight 121 sec